Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
File:                     8fe40320-74dc-4444-a6ef-bd88d604a876.cer (raw, json)
Hash identifier:          +LDZU34tSMHlWnLHqDGfwN+OcJBBtMp2wKtatHQmOAo=
Subject key identifier:   06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285847993EF0EA370BA3B5CDCC6CF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 20 Oct 2024 00:45:26 +0000
Certificate not after:    Sat 23 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 26411
                          IP: 103.207.40.0/22
                          IP: 104.224.12.0/22
                          IP: 2602:2dd::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:99:3e:f0:ea:37:0b:a3:b5:cd:cc:6c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Oct 20 00:45:26 2024 GMT
            Not After : Jan 23 01:45:26 2027 GMT
        Subject: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:70:31:d2:04:7d:9f:bb:df:98:f5:59:be:59:
                    de:29:75:87:ac:d0:f9:b7:86:c2:8f:da:0f:f8:96:
                    f2:72:3a:6d:9e:64:1b:ee:4c:cd:72:74:f9:b6:75:
                    97:1f:15:6a:85:bc:f2:45:97:d4:4c:26:6e:0c:bd:
                    3c:19:2d:9f:74:43:fb:a6:df:4e:50:37:48:26:bf:
                    84:32:5d:a5:b3:4a:b5:60:6c:73:32:ab:ae:26:d9:
                    74:f0:31:4c:6e:3a:35:26:99:f3:ce:d6:3e:45:e2:
                    d9:a2:6a:b4:c4:60:a4:7b:85:ee:70:92:11:bc:f1:
                    f7:97:5f:09:23:09:db:6c:d2:51:b5:cf:94:7c:04:
                    66:ac:66:ab:f1:62:ca:a5:71:66:52:ff:90:0e:e6:
                    dc:fa:b3:19:d5:c5:95:9e:28:a4:de:d8:cc:d7:a0:
                    61:34:7b:48:b6:79:62:74:ba:7f:4c:3e:50:bc:c9:
                    ab:8f:91:3c:66:67:73:89:40:8b:1b:10:fd:8c:f2:
                    0e:1f:cf:86:f6:f7:73:57:f2:08:77:04:63:f8:61:
                    a6:34:ed:32:e8:42:64:7e:66:d3:d6:b7:a9:7b:d1:
                    ed:ec:94:fa:b2:1a:82:1a:8e:86:9a:c6:77:68:08:
                    60:26:3b:e5:99:e0:f4:ef:3a:9f:d1:08:1c:9e:4c:
                    96:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.40.0/22
                  104.224.12.0/22
                IPv6:
                  2602:2dd::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26411

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:8d:d7:4a:49:eb:1a:0e:b3:b2:3e:70:05:43:ff:68:5b:9a:
         37:3c:c9:43:0c:5d:bf:71:11:42:26:fa:73:79:56:2d:d5:96:
         00:54:99:2f:00:bd:95:c6:d0:4f:38:a3:87:68:55:60:89:68:
         4a:46:15:3b:97:9a:e3:6b:ed:aa:ac:f9:bd:9b:59:90:10:66:
         73:b0:21:1e:03:d3:ac:f4:95:10:a2:36:12:91:25:65:11:07:
         32:55:dc:e4:19:49:39:ff:3a:bd:39:00:e5:86:26:a9:9b:15:
         b9:7a:af:70:c8:2f:83:98:8d:62:ca:42:ad:72:17:3b:aa:f3:
         9e:63:5e:18:07:a8:12:4c:d0:e0:6e:82:2a:51:d8:f6:d8:fa:
         e6:d6:bb:cc:9a:5e:5b:ea:37:7b:b2:be:88:80:14:32:21:52:
         f0:ac:2b:7d:e7:d0:05:35:f9:cf:b7:10:30:33:40:93:af:9e:
         18:a8:52:67:ad:c3:42:b4:54:68:1e:25:d6:40:0d:28:cd:e6:
         29:bb:cf:4b:02:9f:18:73:97:9a:a9:81:57:ae:26:c1:78:a6:
         de:ba:d8:e7:4a:01:86:9e:e6:f3:91:5b:55:6f:92:4d:2f:7f:
         3d:34:d7:65:b2:cd:d1:86:61:e8:46:ed:6e:0b:ba:e3:dc:b6:
         0e:b9:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----