Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
File:                     b1898100-f40c-4002-b68a-8a97b548e69d.cer (raw, json)
Hash identifier:          N14paN/seowycQ6H/ox0d1BRYx2iftr2jDPBAe79KMk=
Subject key identifier:   89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584750A92836A8D8951DC33B9A40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 24 Sep 2024 00:45:27 +0000
Certificate not after:    Mon 28 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 18526
                          AS: 26132
                          IP: 23.176.40.0/24
                          IP: 74.113.96.0/22
                          IP: 158.51.108.0/22
                          IP: 2602:fd6f::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:50:a9:28:36:a8:d8:95:1d:c3:3b:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 24 00:45:27 2024 GMT
            Not After : Dec 28 01:45:27 2026 GMT
        Subject: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:80:ac:e1:e8:b3:e0:9c:90:b2:7e:a5:0c:e5:
                    35:7c:35:5b:80:19:c0:17:ef:92:3a:4a:5f:c7:1f:
                    d1:b1:f6:0a:56:40:fb:52:e1:5f:81:78:f9:d8:2e:
                    a3:57:4a:21:91:0a:67:a1:78:c6:de:46:37:b0:61:
                    d8:f7:4b:34:7f:5b:d6:6e:86:a6:21:d7:f2:14:da:
                    27:42:ff:85:bd:ac:bd:c7:26:0c:58:d6:3e:fa:04:
                    0c:de:77:cf:1d:18:4b:60:1a:25:16:b1:ab:48:c8:
                    ff:d9:d3:26:dc:ba:9e:07:dd:c5:3e:7c:14:48:41:
                    04:ad:48:31:9c:92:6a:4a:16:9c:95:ff:45:ec:cb:
                    1f:98:b0:c0:dd:3b:10:12:f9:15:c8:5e:fb:58:5b:
                    cc:bc:e7:03:41:07:c3:c6:ad:6a:91:79:9e:ed:c8:
                    16:f6:e2:3d:72:0b:ee:cf:47:e2:d7:c7:22:51:75:
                    d9:e0:64:46:b2:54:95:85:78:0d:fb:3c:cb:60:71:
                    33:b0:7d:2c:38:60:f9:75:26:d7:fc:e1:be:ac:75:
                    7b:ae:32:15:e1:57:56:6d:c9:6a:ae:6f:fe:27:bc:
                    c0:77:f4:e9:f8:5c:e1:7b:90:db:1c:4d:df:34:ab:
                    38:f0:78:58:fc:9e:07:40:64:96:7a:51:28:30:cf:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.40.0/24
                  74.113.96.0/22
                  158.51.108.0/22
                IPv6:
                  2602:fd6f::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18526
                  26132

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e6:86:7f:c1:76:bf:37:f5:ef:f5:64:03:6f:2c:ef:37:f8:
         ab:cd:2e:36:15:1c:d7:75:1d:26:9d:d7:32:5f:e5:1a:c2:28:
         12:27:6b:e0:8a:a5:4c:93:1c:92:22:05:c3:4f:df:57:7e:75:
         ac:4a:b8:16:26:21:4e:99:fa:3a:33:cb:dd:54:40:36:e7:c9:
         a1:fc:60:ca:2f:41:8c:81:f5:bf:2c:f3:c5:a0:68:2c:09:31:
         ce:35:5c:22:63:6c:5a:38:fc:e0:af:ce:93:00:19:6d:c6:67:
         35:30:44:b4:06:40:85:d1:33:32:f2:21:5f:ba:36:b2:b9:54:
         5e:d2:b4:83:fc:9a:83:ef:13:6f:8c:0c:76:9b:56:fd:57:62:
         2f:89:bd:c9:f3:fa:e5:f9:1c:86:b2:42:11:5d:f1:2c:31:e4:
         0e:15:77:76:ea:7d:35:fc:eb:58:b2:49:a3:4d:fe:68:08:90:
         33:d3:db:ee:ff:f7:ee:68:81:07:d1:79:4c:2b:ab:e7:18:48:
         db:5a:b5:9d:d3:6b:6c:88:93:24:33:db:f4:b7:56:79:1c:d2:
         ee:dc:cb:40:7a:76:9c:15:3a:9a:d1:9f:89:66:76:d8:8c:fb:
         b6:49:64:cd:20:38:ff:42:05:49:a4:cd:1b:04:c6:3a:8a:0e:
         8d:85:9d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----