Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
File:                     9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer (raw, json)
Hash identifier:          uIAJLQNubjRLubBWYWfuDZ1w3/yGK+HCO+VsJ9/Vh6Y=
Subject key identifier:   35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority key identifier: 38:A7:B9:8A:D2:4F:C7:68:CE:CA:9B:60:76:47:E8:56:60:C0:38:3A
Certificate issuer:       /CN=907e0105-3516-47a0-a9c2-5f0b77661cb1
Certificate serial:       010D0C9F432858474F74EEF3D5B86F523979A400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 23 Sep 2024 14:24:24 +0000
Certificate not after:    Sun 27 Dec 2026 15:24:24 +0000
Subordinate resources:    IP: 74.120.120.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:74:ee:f3:d5:b8:6f:52:39:79:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=907e0105-3516-47a0-a9c2-5f0b77661cb1
        Validity
            Not Before: Sep 23 14:24:24 2024 GMT
            Not After : Dec 27 15:24:24 2026 GMT
        Subject: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a7:31:41:f2:1f:31:36:a4:ed:b3:28:05:d7:
                    ed:57:e8:8a:2d:b4:0a:32:79:b4:59:1c:35:bc:e7:
                    2a:21:94:f1:64:12:aa:0b:03:fc:33:90:8a:1e:8e:
                    89:42:46:36:4b:4b:4a:77:75:3e:f3:ef:6c:c8:4c:
                    c2:a2:89:53:ca:67:28:7f:29:36:12:40:e8:6c:25:
                    4d:45:a1:c9:4c:a8:fc:a4:bd:ae:0c:fa:7d:17:e4:
                    73:22:60:c0:0e:7b:23:1d:4d:ab:a4:b9:4e:6c:2f:
                    15:91:c4:be:e1:33:0b:07:58:e9:aa:25:9d:1d:04:
                    a5:84:9c:5d:d3:56:da:99:b0:19:c5:e9:16:32:99:
                    5e:99:42:cb:e5:d8:c6:06:43:97:bf:a4:e4:50:ea:
                    b0:a8:8c:e8:09:77:20:16:03:e8:0d:2c:e0:38:d7:
                    9b:8c:5c:5e:a8:ba:f4:a1:ea:5b:f0:b9:b6:76:42:
                    b6:3e:cf:70:b9:33:a7:ab:52:5c:6b:90:6f:a9:b6:
                    13:a8:1b:af:57:5f:80:49:26:a5:0b:da:e4:7f:26:
                    0f:1a:66:db:dd:ee:33:57:2b:5d:46:e9:b3:7a:c6:
                    b8:18:10:b2:c3:8e:8f:7d:c0:58:6f:6e:ac:a6:cf:
                    f3:e5:6f:df:1d:a9:6c:da:19:7b:cb:95:48:ab:91:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl

            X509v3 Authority Key Identifier:
                keyid:38:A7:B9:8A:D2:4F:C7:68:CE:CA:9B:60:76:47:E8:56:60:C0:38:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5c:20:e4:57:64:c8:0d:4b:93:c3:ff:94:4c:d6:f2:16:c9:
         05:2a:61:ac:b2:2a:86:72:77:3b:5a:3a:80:d5:8b:d9:b6:16:
         48:16:d4:0a:7e:dd:a6:ef:4c:02:66:f0:5d:12:6b:cd:9f:bc:
         09:10:57:92:4f:5f:62:3a:de:34:16:48:fb:10:1f:b3:15:bd:
         8c:0b:de:87:fa:b0:45:6a:dd:20:ea:a3:48:d8:e2:08:df:22:
         3e:7b:e3:74:04:a9:14:b6:db:0f:ee:0a:8a:72:8c:ea:a1:88:
         d7:f1:55:1a:42:30:9b:e4:94:eb:50:ec:9a:a4:d3:81:fe:42:
         88:06:91:22:61:8a:d5:2d:97:35:36:74:f5:61:aa:4a:5f:8c:
         a9:f0:5e:9b:96:b5:62:9d:77:f3:e6:b9:b7:52:b0:51:79:9e:
         1d:84:78:18:89:5f:b1:9b:68:3f:4b:41:fe:75:49:b3:e4:4a:
         0e:d6:e9:fc:77:64:f4:45:a1:41:f3:ad:8a:f2:5f:c2:68:18:
         a3:33:3d:32:c8:71:f9:89:cd:d1:52:c9:29:80:58:19:f5:7f:
         45:b0:35:dd:aa:8a:b4:ae:2f:c6:06:cf:b5:a2:ff:54:d3:56:
         4d:57:43:f3:2d:2d:cc:9d:9f:87:aa:13:90:df:56:d7:24:27:
         70:cc:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----