Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer
File:                     e20d7b51-a205-4e55-9426-e473f80b2544.cer (raw, json)
Hash identifier:          LYHT+p8Fm42tB65tRgkuXbGFAo/xVwEdsCZT95uxeRI=
Subject key identifier:   98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285847E1F28FD4D4C0F4BAF16CA400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 15 Nov 2024 01:45:33 +0000
Certificate not after:    Thu 18 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 397736
                          IP: 23.174.16.0/24
                          IP: 2602:807:d000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:f2:8f:d4:d4:c0:f4:ba:f1:6c:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 15 01:45:33 2024 GMT
            Not After : Feb 18 01:45:33 2027 GMT
        Subject: CN=e20d7b51-a205-4e55-9426-e473f80b2544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:03:87:26:49:e4:92:3f:56:a4:47:90:7e:7c:
                    2d:78:8b:98:dd:b8:36:8e:4b:cc:12:f5:12:54:40:
                    6d:ca:a7:89:19:6d:c1:47:1b:75:c6:f7:b7:42:83:
                    38:1e:c5:e1:74:7d:3c:a5:a4:15:6b:08:e1:07:32:
                    38:49:18:88:98:bf:9c:c8:1f:e0:9d:0b:7f:db:58:
                    f8:db:0a:8b:a9:41:d9:36:72:b2:18:7a:2a:e3:32:
                    51:32:f4:5d:2e:83:27:f9:18:27:27:c0:24:77:26:
                    f0:f6:5e:ff:92:f2:f6:0c:aa:9d:6e:bc:9a:0e:31:
                    74:0f:75:59:4b:3c:dd:39:ad:e2:fa:07:c4:f9:24:
                    2c:7f:32:9b:b6:54:4a:c0:ee:cc:c0:5c:03:f5:6e:
                    8c:73:c8:22:aa:8b:6e:c0:27:da:ba:6a:e5:4b:7a:
                    72:e0:64:6d:25:9d:77:be:9a:18:1d:af:70:43:45:
                    5a:a9:87:49:91:e8:ce:ce:59:a9:21:0c:12:fd:00:
                    b9:d1:3e:f1:c0:47:b4:30:42:76:f6:d9:f4:d3:47:
                    24:c9:b9:ef:af:56:61:54:59:e8:bc:ad:52:1c:eb:
                    df:1b:1d:68:ec:e8:50:7b:b4:96:4e:57:88:3c:1f:
                    98:12:69:20:1a:c0:24:87:1b:77:31:d8:c2:e0:17:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.16.0/24
                IPv6:
                  2602:807:d000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397736

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e0:f0:85:12:e4:1d:d3:fa:a2:1f:9d:ab:30:c0:fe:1e:57:
         09:8c:5b:50:fd:fe:30:d5:64:cd:0e:14:12:1c:c7:75:cd:86:
         b5:38:ca:e7:b4:91:c8:69:9b:a6:7f:7f:98:90:1c:3c:5d:70:
         80:d8:c8:54:4c:83:3e:01:22:3c:27:e5:77:21:1e:7c:04:46:
         46:77:30:76:36:ff:a0:b4:d6:71:a2:16:cd:fa:fb:82:77:5a:
         03:aa:15:c7:51:0d:08:ed:e7:23:0e:b2:87:84:16:98:b2:66:
         03:a4:3b:03:1b:ce:6d:cc:1d:00:7b:4e:a6:98:8d:66:96:6a:
         3f:2e:7d:eb:aa:ed:94:4c:d2:b2:70:aa:a4:a9:d6:38:00:9a:
         a3:47:d5:89:78:e6:f6:9a:95:ad:c8:05:5c:a5:db:98:34:69:
         36:6b:b0:8a:13:fa:09:9a:b6:71:5d:e1:45:bd:41:f0:de:68:
         22:4c:e6:c8:f3:03:c4:39:85:24:cf:5a:36:0b:09:16:ce:e2:
         48:61:2a:c6:28:e1:93:ea:75:5e:7b:c9:de:7b:01:61:ec:f9:
         22:78:e4:b0:2e:e2:b8:4f:2e:7a:f1:d7:d9:44:23:be:a9:57:
         fb:d3:62:2a:2e:6e:6d:b7:be:fc:a7:ab:0d:bb:50:9c:e9:d6:
         d6:5c:00:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----