Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.cer
File:                     b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.cer (raw, json)
Hash identifier:          WWJbiHrCfLbP1rmrO9r9wdA4teQnFquipLmpho16tAw=
Subject key identifier:   32:1C:42:C8:F6:AB:B2:B1:3B:1A:04:92:EE:F2:0B:12:ED:0E:74:D3
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285847EC86DA150D39ECDA08592978
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Nov 2024 20:42:26 +0000
Certificate not after:    Mon 25 May 2026 00:45:20 +0000
Subordinate resources:    IP: 66.205.250.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ec:86:da:15:0d:39:ec:da:08:59:29:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 18 20:42:26 2024 GMT
            Not After : May 25 00:45:20 2026 GMT
        Subject: CN=b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:44:0a:4b:87:47:5d:e3:7a:fd:3b:fb:30:
                    81:b6:a7:14:6e:1f:ba:3e:c1:2d:71:2e:4f:31:13:
                    a1:84:97:a5:01:0a:d0:c1:11:79:65:a5:b7:d2:36:
                    96:1d:c0:b0:70:8e:ec:de:9d:68:e8:79:4c:7b:39:
                    12:78:10:ee:cd:c2:51:67:c2:f3:cd:6f:e4:d2:ab:
                    f3:f0:4e:b4:02:eb:02:ce:07:2e:aa:af:a3:b4:58:
                    2a:65:3e:73:02:ec:22:11:f9:f9:d0:b7:dc:40:aa:
                    32:c7:8b:97:68:f0:37:59:4b:31:9d:05:3f:c3:c0:
                    4e:b0:ce:38:6d:54:17:b7:a4:4b:bb:9b:23:e2:b3:
                    5b:e4:b2:3e:3b:da:7b:c3:7c:fb:e5:ba:8d:c9:e1:
                    24:ca:97:17:76:0b:9d:59:f2:3c:d3:20:31:13:51:
                    f2:e4:35:4b:30:85:98:fe:2c:fb:61:4f:f4:05:15:
                    29:99:df:15:62:3e:64:81:82:f8:c8:47:87:aa:86:
                    52:94:8a:3b:6f:87:be:14:b2:a1:b8:4a:aa:c4:53:
                    f5:bf:c8:7a:d1:94:79:be:c3:19:83:82:69:3d:1f:
                    10:6b:55:2c:bf:a2:01:88:d3:98:58:71:cb:a1:be:
                    35:1a:44:dc:09:c2:af:4c:d2:15:a2:db:58:ed:a8:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1C:42:C8:F6:AB:B2:B1:3B:1A:04:92:EE:F2:0B:12:ED:0E:74:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec/b58bddd2-b9c0-4e0a-a7cc-e4f4cb1b60ec.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:30:a4:e0:5e:1d:6d:5e:c9:84:b4:de:76:b1:84:39:bf:65:
         6b:3e:82:9a:a9:56:6d:fd:74:f7:d1:31:92:3a:6b:a6:56:7e:
         1b:e2:cc:15:6e:9d:3d:ef:ce:d2:4c:06:9e:05:64:50:c7:66:
         84:82:35:4d:8a:8b:a4:40:88:c2:b6:bd:15:85:11:db:5c:2a:
         50:c8:dd:a1:b0:b6:fb:d2:b5:2a:b3:46:d1:59:cd:54:b7:dd:
         ce:cf:a4:77:ad:6a:b1:fb:5e:94:66:fe:a3:8b:d0:18:8f:1f:
         35:27:a0:48:99:0a:15:f7:6c:7e:e3:bc:92:3f:17:44:4c:ad:
         f2:50:04:26:6c:35:94:d5:85:9f:ab:f6:c4:1b:55:4a:db:cf:
         cf:50:17:89:f1:e9:1c:5e:e5:d1:b6:38:52:48:e8:5d:db:d6:
         84:7e:b3:66:9a:0e:64:7f:d4:ee:ad:d1:e5:52:fd:ef:d0:1b:
         02:66:fe:8d:09:db:21:6f:a1:d4:4c:88:4a:ab:36:e8:2f:e9:
         7b:74:a2:16:aa:3d:90:62:9d:97:83:85:88:ed:8e:75:6a:86:
         16:8f:45:4c:ac:5e:3b:93:e5:10:ab:c0:7a:4f:a8:9d:bd:3c:
         27:7f:7a:1a:28:76:87:1b:ce:81:65:11:ba:1f:09:ae:7e:34:
         f5:e1:09:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----