Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d782618-2e83-4896-8b86-d8daf08e41bc.cer
File:                     7d782618-2e83-4896-8b86-d8daf08e41bc.cer (raw, json)
Hash identifier:          kXc0bm1XFFLRDoZMXJe4BAJAM1Da7LCf35nCWKLquSU=
Subject key identifier:   36:CC:A9:C9:8D:22:E2:B6:A5:90:9B:81:35:68:23:CE:53:56:AF:03
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285847CE67C60FCF5BC793C4DB0400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d782618-2e83-4896-8b86-d8daf08e41bc/7d782618-2e83-4896-8b86-d8daf08e41bc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d782618-2e83-4896-8b86-d8daf08e41bc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 08 Nov 2024 01:45:33 +0000
Certificate not after:    Thu 11 Feb 2027 01:45:33 +0000
Subordinate resources:    IP: 64.190.237.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:67:c6:0f:cf:5b:c7:93:c4:db:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov  8 01:45:33 2024 GMT
            Not After : Feb 11 01:45:33 2027 GMT
        Subject: CN=7d782618-2e83-4896-8b86-d8daf08e41bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:58:f4:54:ad:be:36:4d:ee:15:52:5e:52:
                    97:bc:f3:b9:e4:e2:b5:3c:22:51:23:4c:92:b3:6d:
                    9f:d1:40:11:9d:10:5c:9b:b9:2e:d5:8a:be:f8:bb:
                    48:37:41:42:0d:83:86:b7:91:e7:4e:b2:8c:ec:06:
                    fc:ed:30:68:c5:8e:b7:51:a5:03:1a:f9:21:75:08:
                    ec:8d:ea:fc:4d:54:3f:b8:bf:c8:12:93:01:59:3c:
                    98:29:b2:72:45:9e:75:c2:cc:9a:f5:98:94:92:24:
                    1c:29:ad:bc:28:32:c3:01:ec:31:6d:b2:c5:f8:01:
                    ba:81:5c:d7:c5:64:25:f1:e5:c2:f5:6f:10:65:46:
                    af:f3:31:fd:13:b6:fa:7a:cf:cb:56:c8:30:5e:d2:
                    52:2f:c2:84:c8:44:5b:fe:b2:41:2d:cc:d3:04:6d:
                    39:14:31:64:51:62:c7:c6:93:50:a7:e2:5e:d3:8b:
                    f0:a1:ee:6c:a6:a5:fc:af:f7:db:05:7a:b0:c0:20:
                    22:76:99:a7:04:d8:33:d1:fc:6a:82:1b:38:2b:6d:
                    f4:25:80:f5:55:f1:cb:44:19:e3:e3:50:67:d2:e7:
                    c3:f7:84:d0:26:40:f9:7b:2a:17:51:a3:f0:30:c8:
                    57:fe:0b:4d:58:12:78:5e:7e:6d:cb:4e:ea:b0:cc:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CC:A9:C9:8D:22:E2:B6:A5:90:9B:81:35:68:23:CE:53:56:AF:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d782618-2e83-4896-8b86-d8daf08e41bc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d782618-2e83-4896-8b86-d8daf08e41bc/7d782618-2e83-4896-8b86-d8daf08e41bc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:18:a3:c6:36:f3:78:91:d8:ee:1b:a8:5f:c4:dd:27:69:37:
         65:0a:12:85:db:4a:69:9e:a6:17:13:68:02:5c:a7:f7:e2:d7:
         3f:93:ba:e9:4b:a8:40:9f:a4:87:c8:34:20:48:6b:97:39:19:
         ce:77:4f:9d:de:bd:76:b7:09:20:6a:02:a4:a6:7b:89:da:be:
         80:50:b3:51:5d:92:1d:02:e4:c8:7f:c3:4c:df:5d:4d:59:eb:
         61:bd:5b:d7:cf:1c:3e:90:28:4e:02:eb:62:80:4a:5b:97:e4:
         95:65:b9:31:6f:b1:a7:2e:3d:e2:0f:5d:87:9b:68:28:aa:ce:
         36:84:70:4f:eb:af:c5:bb:83:58:9c:d5:e2:06:7e:a7:75:8c:
         c4:f2:b7:f9:f4:b0:eb:41:f9:d3:d2:8c:32:87:cb:d5:22:17:
         44:85:65:e4:90:04:84:6c:ea:fd:5b:fb:88:2b:8d:5e:a4:3f:
         a2:ba:f7:4a:bb:8d:96:ca:00:47:a5:ce:7a:48:b0:5e:8f:3a:
         3d:a3:0b:9b:d0:52:86:9b:ec:68:3c:0b:64:fb:31:a6:fa:43:
         9b:82:16:ab:bf:0e:a8:36:94:18:43:68:7f:02:ab:ce:2c:db:
         81:3b:d1:53:96:e2:82:9d:99:d8:b8:53:9a:a6:4a:1d:ce:08:
         5b:a7:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----