Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer
File:                     a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer (raw, json)
Hash identifier:          z3zSDAJ3mmSCMcFeLcwHqnGVIWG+FK1BfOXzaYVxg6k=
Subject key identifier:   DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858473A53AFA26196352CA9086480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 16 Sep 2024 00:45:27 +0000
Certificate not after:    Sun 20 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 53389
                          IP: 198.38.74.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:53:af:a2:61:96:35:2c:a9:08:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 16 00:45:27 2024 GMT
            Not After : Dec 20 01:45:27 2026 GMT
        Subject: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:d1:82:44:58:5c:fb:c8:39:33:a9:cd:2a:
                    5c:fa:7c:34:cc:5e:61:69:ac:3f:83:96:aa:c2:ce:
                    ae:c9:4a:4b:d4:5c:73:68:4d:73:61:05:79:4a:3c:
                    c5:3c:f0:c2:57:46:a4:69:f5:a9:b9:7a:68:cc:3d:
                    3d:7f:e6:fb:bd:ab:db:40:a0:36:ae:ec:e6:4d:4f:
                    c6:a8:33:92:12:49:39:15:c2:35:5a:a0:43:be:39:
                    f1:4e:23:64:53:61:f5:bf:9f:0d:94:1c:49:24:f6:
                    5d:a3:52:b3:80:47:99:b1:83:5a:7e:b0:5f:e9:3b:
                    7d:af:f7:c9:11:24:1b:a1:89:0b:5c:75:68:04:b6:
                    c9:b5:8d:52:36:01:ae:f5:37:ba:ac:a7:d6:10:d2:
                    59:16:e3:9e:7c:87:ef:95:73:dd:0c:ec:b0:d5:c7:
                    11:ce:e7:41:a3:46:e3:be:9e:34:d6:b0:82:96:16:
                    52:ca:86:f3:e9:e8:0c:a9:28:78:12:e5:63:8d:2f:
                    bd:30:ef:4b:4e:a1:0b:88:42:fa:ea:b6:fd:ac:da:
                    8e:e3:7a:72:4c:03:1e:67:73:9e:cf:47:16:39:5d:
                    0a:59:fa:ba:eb:91:82:d2:c7:d9:8a:4b:ce:aa:42:
                    4e:92:b5:30:a4:7b:de:4b:5f:23:ed:1a:bd:f0:0b:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.38.74.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53389

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:d9:e4:82:c0:39:3e:2e:24:1f:34:f0:a2:51:20:a6:5c:
         f2:08:ef:c6:4c:be:9d:33:a6:9c:38:69:a8:ed:1f:53:49:3b:
         21:2c:ad:09:e7:37:39:fb:d9:9e:b3:5e:94:45:e8:f7:6a:1c:
         33:14:c7:cc:fe:f7:65:7d:c9:b9:45:c5:93:13:12:5f:e8:52:
         39:19:c0:eb:59:f7:60:db:2c:77:37:15:1e:76:e6:64:58:c4:
         69:14:32:c3:7e:2b:61:ce:38:23:c4:68:0f:78:e2:23:7c:25:
         a5:30:01:38:77:f1:9a:5e:48:32:a7:a5:9c:ff:6b:2b:09:9f:
         bf:e0:fd:12:b3:85:a1:ee:93:5a:f1:74:65:4f:40:fd:5e:e4:
         91:60:93:16:3c:c7:90:a6:85:a4:d2:2d:d0:14:73:b6:cb:d7:
         88:c2:65:75:fb:c9:a0:58:e2:d2:9d:4c:82:d8:91:ef:f7:7f:
         37:60:35:85:d7:e4:45:ea:b1:b1:6d:4e:79:03:66:ab:e1:58:
         31:76:b2:1f:95:83:92:75:5c:1f:1c:89:8a:49:b5:cd:7f:52:
         0c:9e:0c:37:71:a0:0b:75:6f:12:67:62:52:1a:43:c7:f5:ed:
         8c:24:d3:cd:7f:6b:25:84:a6:f8:3c:b9:fc:00:4a:ad:01:ba:
         39:6b:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----