Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer
File:                     8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer (raw, json)
Hash identifier:          /zyUCtX6/ommNz6GfE/wIMzCSAgLw0gBzvPELxQDQxo=
Subject key identifier:   F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584586D0EC62FE6ED7C71411F480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 13 Apr 2024 00:45:20 +0000
Certificate not after:    Fri 17 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 399218
                          IP: 172.81.36.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d0:ec:62:fe:6e:d7:c7:14:11:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Apr 13 00:45:20 2024 GMT
            Not After : Jul 17 00:45:20 2026 GMT
        Subject: CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:58:8a:48:28:fe:24:7a:d2:2f:94:dd:3b:
                    cf:4f:1d:c0:06:c4:c6:e4:f6:0e:43:34:42:9e:62:
                    65:45:ff:ff:c2:33:03:d6:c8:c9:68:f6:7a:25:b2:
                    8a:d5:94:e6:59:b0:c2:d3:97:73:12:b0:60:eb:92:
                    1d:89:27:af:28:c4:c2:1b:30:63:8f:ca:1f:13:48:
                    33:69:c7:e4:5a:99:af:b9:60:32:b4:c8:e0:03:29:
                    5d:f2:7b:cb:da:38:de:8a:6a:90:52:19:4e:9b:79:
                    74:eb:b6:5d:d7:95:4f:d3:89:b2:ca:36:56:30:8a:
                    2d:de:de:c5:bc:b7:6c:a6:e7:72:3f:93:2f:e4:99:
                    c6:12:cf:43:e6:25:eb:d0:99:e2:db:34:8f:1f:6a:
                    a9:70:50:1f:58:67:8a:27:73:a6:32:5f:97:7e:ac:
                    37:4d:7f:df:de:6b:da:94:f5:03:5d:08:c4:c9:54:
                    7a:15:8c:0b:38:c5:63:9b:10:39:f4:12:4e:f5:a6:
                    2b:83:97:2d:bf:da:e7:b3:9d:cb:a3:03:6a:0a:00:
                    0d:ed:55:18:ce:eb:94:7f:67:96:2b:dc:b4:ca:7e:
                    ba:b4:84:3d:19:3c:3d:e0:07:b0:cc:ba:8d:44:37:
                    18:04:26:05:d4:ce:5d:0d:9c:41:4d:69:28:fc:85:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.36.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399218

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:cf:20:8f:80:74:df:8d:5c:da:f8:f9:a3:48:bf:6d:5a:51:
         cf:1b:28:2d:38:f0:5f:a3:38:bb:9c:47:2c:ee:05:1d:5a:be:
         09:d4:90:e2:5d:1d:f6:2c:0c:40:86:d1:60:f5:8d:d0:87:54:
         6f:29:ef:d4:ef:dd:7e:ad:ce:a9:4b:fa:29:be:9a:ba:8f:b6:
         68:35:a3:29:4c:27:89:cd:88:2e:67:17:43:90:73:0b:18:95:
         0e:24:3c:35:03:d0:24:58:af:5e:9b:9e:18:25:b3:0c:10:35:
         ea:f2:4f:17:e4:90:23:f4:02:15:16:0c:96:ae:45:70:17:92:
         ff:b6:ff:d9:ff:1c:ca:d1:9d:e4:16:07:1d:00:3f:83:20:24:
         44:bb:6f:51:1a:2a:ad:36:39:2f:a3:f0:74:e6:f0:3d:4a:4b:
         2f:27:65:4c:97:8e:a2:4b:1f:fd:52:0e:fa:01:dd:21:8b:c4:
         50:26:be:cf:18:ac:c3:11:7e:e7:73:9c:15:72:21:38:14:30:
         c7:96:90:ae:a0:b9:82:12:df:26:0d:c2:ce:a6:90:2a:cf:61:
         a1:ef:5e:1f:9d:26:ac:50:5f:c6:ef:50:f0:31:c8:24:6e:12:
         01:b9:0d:e9:c5:8f:2a:71:11:8c:91:24:9e:34:91:dc:8b:e9:
         ae:0c:f9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----