Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51.cer
File:                     a8f311de-c6af-4322-a952-b9c622f40e51.cer (raw, json)
Hash identifier:          Dr+cZwFUhAMKAxMk7MSSjUIGasJiEkZPkrOMhOdTBP0=
Subject key identifier:   5B:33:AF:7B:E9:7F:AE:2F:15:58:9C:D7:2B:AE:E0:5F:57:47:0A:F5
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285846D89DB4BCF8C61BBB16B90D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Aug 2024 00:45:22 +0000
Certificate not after:    Sun 15 Nov 2026 01:45:22 +0000
Subordinate resources:    AS: 400169
                          IP: 216.9.162.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d8:9d:b4:bc:f8:c6:1b:bb:16:b9:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug 12 00:45:22 2024 GMT
            Not After : Nov 15 01:45:22 2026 GMT
        Subject: CN=a8f311de-c6af-4322-a952-b9c622f40e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:83:fe:5a:30:1b:b5:a2:6a:94:bb:c7:fa:
                    c3:c5:47:d9:2d:46:84:2a:e8:96:30:47:86:0b:e8:
                    84:a0:ff:81:36:36:ad:fc:46:fe:1e:f4:b9:d1:73:
                    89:bf:2f:38:4d:3c:c1:58:27:53:41:5b:88:23:77:
                    48:af:5a:e2:15:c1:1b:fd:37:16:d2:47:d8:07:10:
                    42:33:c4:8d:f4:80:7f:c1:55:0e:e9:f4:a0:35:f8:
                    df:47:1a:d1:6c:37:42:7c:3b:f6:cd:3d:1a:08:fd:
                    5f:a9:5a:67:b5:c8:91:40:95:ce:d5:fe:e1:51:d0:
                    4a:8e:88:c9:d2:6a:c1:5d:a1:a1:5c:0f:45:d2:e3:
                    38:20:48:08:d7:ef:f3:af:fd:f1:1d:78:39:ea:20:
                    4d:2b:f3:2b:ae:09:20:f1:d0:ea:07:dd:b3:8e:a0:
                    54:7f:8c:75:68:b5:b6:3f:7d:c1:3e:3b:5c:61:99:
                    d2:2a:7a:f0:78:48:92:cb:88:fb:2f:ad:3a:cc:02:
                    a2:40:ae:7d:2e:95:47:b0:f9:ed:50:c0:4f:08:6c:
                    71:21:d9:a8:84:31:f5:fe:b6:97:0b:87:d5:b2:ca:
                    0e:56:96:18:61:22:69:f3:06:dd:99:95:b5:66:9a:
                    24:5e:c9:13:4a:f7:13:8a:3c:9b:b6:f5:69:66:7f:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:AF:7B:E9:7F:AE:2F:15:58:9C:D7:2B:AE:E0:5F:57:47:0A:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.9.162.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400169

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9a:22:c5:73:03:86:a0:70:27:3c:a8:61:88:58:e9:ce:58:
         ee:e4:47:25:03:8b:7a:b1:41:3e:c8:18:30:fb:91:d2:4a:89:
         2f:3b:1a:6b:20:00:6c:1a:58:1e:7c:ef:40:1e:a0:64:9b:ad:
         2c:83:c2:b0:49:ce:e1:78:cb:10:28:89:fd:2c:87:99:ee:48:
         67:e9:5c:af:aa:f5:31:9a:22:5a:3c:db:b9:9f:24:a6:fe:0a:
         24:56:9f:d0:ad:74:87:03:b9:c0:21:ff:14:7d:7c:b6:8a:63:
         f4:24:ac:e1:b1:3b:93:40:99:34:12:79:1a:71:f9:f5:72:fd:
         55:20:35:67:35:68:0a:b7:65:0a:67:cf:28:38:ce:a1:fe:4b:
         50:45:19:5a:89:ae:4e:bb:6a:86:c2:b2:70:9e:c7:2b:ff:f1:
         ee:b8:3d:f3:ac:6c:52:18:1e:ff:63:8e:20:1a:ed:9d:6d:a5:
         52:73:00:20:47:dc:58:45:f3:a9:b3:54:30:a6:6f:5c:98:4f:
         85:ec:b7:c0:d5:06:2e:21:8a:35:db:5f:0c:c1:c5:98:1b:13:
         67:73:1e:38:eb:8f:d4:c0:29:95:d2:3b:e5:d8:1c:00:41:23:
         b5:79:49:f2:7e:45:1f:0a:dc:b8:aa:e6:6e:5c:20:69:ba:33:
         d0:33:78:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----