Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
File:                     b32217e1-2473-49a5-919e-08e1896c5019.cer (raw, json)
Hash identifier:          /brSqwwrfkejvAk15h8phhnkT5SAtZONgLzFo/VeVgk=
Subject key identifier:   48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584538A5C67986F929200E09C440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 16 Mar 2024 00:45:21 +0000
Certificate not after:    Fri 19 Jun 2026 00:45:21 +0000
Subordinate resources:    AS: 22191
                          IP: 130.45.128.0/17
                          IP: 2604:1dc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:38:a5:c6:79:86:f9:29:20:0e:09:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Mar 16 00:45:21 2024 GMT
            Not After : Jun 19 00:45:21 2026 GMT
        Subject: CN=b32217e1-2473-49a5-919e-08e1896c5019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bc:26:e2:0a:1d:54:35:88:bb:0e:48:68:b2:
                    0f:2d:54:0c:cf:b9:cd:14:02:44:27:63:f2:98:9f:
                    f3:f4:a1:68:1c:74:7b:12:7c:85:9d:24:6d:dd:d6:
                    99:1b:00:32:27:df:8e:4a:d3:cf:00:0b:d1:90:18:
                    3d:84:0c:76:8f:7b:65:d1:fe:68:ea:3a:8b:73:7f:
                    1d:7f:97:71:56:44:be:88:29:2c:d9:09:ce:29:3a:
                    24:a8:94:d4:17:30:ea:04:56:c3:74:b4:ea:51:35:
                    d8:ec:32:ec:20:5b:c8:9a:ec:57:da:76:23:31:57:
                    97:ff:d4:27:5b:ce:58:b5:32:2b:65:1c:aa:5a:16:
                    06:b6:dc:5a:33:32:5d:e9:8b:f5:d5:88:08:78:f1:
                    6d:68:1f:fc:c3:c1:f4:4c:c8:16:a8:fb:43:01:fc:
                    f9:9c:b3:2f:44:ff:44:8d:d6:59:b2:bd:d7:21:9d:
                    15:91:14:59:75:73:a5:15:ae:07:5e:7d:c1:c0:cb:
                    e6:ff:f8:7e:7b:7c:87:7b:9f:4b:c6:a9:4e:b9:99:
                    5b:af:59:40:cb:60:d6:93:fc:30:5e:df:47:c1:95:
                    54:fc:ec:0b:bc:af:d7:23:f8:fa:f7:fb:10:62:25:
                    60:82:6f:4c:f0:ce:66:8e:e8:fe:48:00:8a:97:c0:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.45.128.0/17
                IPv6:
                  2604:1dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22191

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:98:96:b1:9d:b7:44:38:0c:b8:d9:2d:63:1b:e7:44:1c:01:
         07:11:74:af:77:1b:12:94:51:bc:59:d6:5a:82:e0:df:e8:b9:
         b7:ef:69:73:30:d9:d3:5a:4e:96:44:02:02:f0:36:aa:e4:fd:
         51:b9:ee:ba:49:04:7b:7f:7a:78:65:78:3d:02:ee:2b:e0:06:
         08:ca:f6:03:1d:9e:4b:01:0b:9e:0c:17:af:e9:c9:ea:66:f5:
         e7:0e:f5:3d:6c:59:00:50:22:94:ab:33:db:ab:4b:fe:05:d7:
         51:c9:7c:76:61:11:4a:89:0b:80:7a:f3:67:02:6d:13:0e:d8:
         45:3c:99:ef:a2:cb:b9:ca:67:eb:c0:3f:54:e4:06:61:9c:6a:
         39:67:15:e3:e5:3c:ab:06:57:bd:dd:16:a8:19:3d:b7:94:c4:
         1e:dd:e0:d5:40:6f:3c:45:59:a7:e8:43:10:bc:be:ec:a0:91:
         62:61:90:69:92:11:b7:36:39:16:11:a8:5a:4b:3b:b6:ce:d1:
         f7:87:cf:11:eb:ae:cf:b8:f5:31:ee:6a:55:25:30:f5:5f:41:
         d0:b8:9b:e8:41:7b:57:87:ce:dd:d7:40:9c:ee:72:61:da:bb:
         7d:2d:c6:e2:0c:ea:3b:b9:c6:f2:c5:1b:38:8f:a0:5c:04:4e:
         49:0b:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----