Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer
File:                     0af21de0-2cae-45f7-b42c-9598c4271ef0.cer (raw, json)
Hash identifier:          KP50sqh9Mz7vfyTPURdIw31iwC5aQkIHDqsT1AWmesM=
Subject key identifier:   91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858470548AF9F6591828C261D2A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 28 Aug 2024 00:45:26 +0000
Certificate not after:    Tue 01 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 397627
                          IP: 192.203.253.0/24
                          IP: 2607:4540::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:48:af:9f:65:91:82:8c:26:1d:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 28 00:45:26 2024 GMT
            Not After : Dec  1 01:45:26 2026 GMT
        Subject: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:ef:de:fa:81:ce:8e:a7:5e:2d:28:c4:82:
                    10:fc:0b:80:fc:b8:10:44:e4:69:96:d7:1f:27:01:
                    f4:68:31:9f:90:d9:33:81:a8:6b:39:f6:43:67:04:
                    b1:f7:ef:39:c5:9b:00:82:b4:c3:dc:f5:66:54:65:
                    31:19:d1:06:27:09:ba:52:c2:4a:3d:37:b5:9a:e1:
                    b9:c3:ef:5f:ff:bf:93:86:e4:7f:f1:8b:7e:01:ee:
                    03:3e:56:87:c6:d8:ba:dc:64:bf:1c:5f:f5:0c:0d:
                    a0:6a:d9:15:dc:e3:2b:69:ea:6d:71:2f:d1:d9:a1:
                    d3:78:a8:0b:99:3c:b6:7a:72:6c:6b:b6:99:83:e4:
                    80:c7:ce:8e:c1:3b:69:b9:af:d3:bf:66:7d:c8:b8:
                    ed:23:f5:9a:28:82:0f:fb:df:af:b5:c2:9f:e7:10:
                    2a:ba:1a:ac:94:1e:c3:96:93:68:e0:e1:42:9e:8d:
                    10:bc:93:b8:16:77:bb:63:84:56:38:04:1f:3c:54:
                    19:28:7a:66:82:77:7b:9e:bd:2c:c8:7b:ad:7c:6a:
                    b0:7c:b3:27:25:23:8a:01:40:ce:2f:0f:d9:d7:2a:
                    01:71:5f:10:6d:4b:36:06:af:78:4b:9c:84:f4:de:
                    a1:ec:33:f6:8c:ad:5b:3f:ec:e4:62:79:0e:0f:68:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.203.253.0/24
                IPv6:
                  2607:4540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397627

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ac:a3:78:7d:35:33:ec:4b:4a:30:b3:f2:f9:a1:2d:4b:85:
         8a:c3:f0:d1:e8:2f:c3:59:56:73:93:11:07:46:d1:27:b8:9a:
         b9:5d:71:ed:8d:b2:57:42:57:6f:05:6e:b0:ef:3a:66:8d:f1:
         95:02:66:7e:80:71:74:83:0b:10:ce:19:92:2b:b3:ad:47:e3:
         71:3b:ad:88:b3:29:f5:b3:3b:a0:44:fd:e4:c6:d9:33:87:89:
         0a:96:6e:54:7b:69:11:d2:fc:d1:50:f3:c5:16:43:b6:21:37:
         4f:88:97:82:86:37:60:4f:a8:b3:35:5b:c0:e9:6e:31:04:30:
         ef:05:08:9e:1f:5b:f2:2c:71:af:0d:55:a2:ba:56:de:f9:a6:
         d9:79:f6:85:d6:26:e3:fa:0b:10:08:c1:ee:b9:25:5e:b7:09:
         92:41:2f:38:51:c1:3c:13:d9:7a:82:4e:84:4e:22:56:ad:e8:
         c1:93:b0:e5:56:70:12:35:69:4c:ac:ae:7e:cb:77:08:74:e9:
         a9:33:19:0c:6c:8b:9a:de:a8:5d:63:c6:98:ac:1e:9f:e8:0c:
         5d:1d:6d:55:84:c9:52:8d:43:6b:03:a4:1c:24:f4:a3:3f:39:
         1a:f5:3f:f7:28:5e:60:3a:df:8b:9b:fc:13:2f:c9:64:c4:e7:
         99:44:2f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----