Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.cer
File:                     15eefb33-983f-41ca-b75b-50ef1b0aa5fc.cer (raw, json)
Hash identifier:          QN1G9OBPzBlZ42fjniwwRD5GJdogiiXzlWsu//peZ7I=
Subject key identifier:   83:26:8B:9B:F9:11:81:24:6E:B7:F6:9A:3E:55:DB:0C:41:66:A2:C6
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285846F3233E351D6A1158A4AA3F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Aug 2024 12:45:27 +0000
Certificate not after:    Tue 24 Nov 2026 13:45:27 +0000
Subordinate resources:    AS: 397856
                          IP: 207.188.4.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f3:23:3e:35:1d:6a:11:58:a4:aa:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 21 12:45:27 2024 GMT
            Not After : Nov 24 13:45:27 2026 GMT
        Subject: CN=15eefb33-983f-41ca-b75b-50ef1b0aa5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f4:a5:e5:ce:7d:ca:e9:a3:aa:f9:55:54:58:
                    8f:ce:5e:81:b2:d0:23:0d:a7:c0:33:dc:54:62:4f:
                    8e:db:1a:5c:da:94:5f:c2:c7:89:d5:64:66:c0:a0:
                    c6:36:30:aa:e2:f9:99:c9:fc:82:7b:4c:a0:6c:b1:
                    62:df:19:c7:e8:00:6e:40:2f:6b:4c:33:09:03:1f:
                    df:27:8e:2d:33:8c:9e:b5:08:ee:71:13:9a:67:61:
                    f9:49:20:85:00:fd:17:81:94:5a:1c:ff:93:53:3b:
                    38:a0:b7:7c:e0:f6:21:ca:4e:d6:80:6c:8e:aa:75:
                    f8:a6:d1:fa:df:b7:8c:7d:83:9b:4c:4b:38:30:e1:
                    aa:60:20:f8:8a:7d:9b:a7:c0:a1:da:ed:c8:69:70:
                    3c:f8:6f:3d:81:e9:7b:ed:4f:97:ba:d0:72:c2:ac:
                    bb:af:de:5f:20:00:fb:d6:a7:19:d4:3a:79:50:12:
                    c3:b5:a8:30:19:6b:d9:7b:94:ea:41:80:68:6f:53:
                    45:85:10:a4:88:d6:03:92:6a:4f:74:b6:39:c5:70:
                    c6:ee:bd:93:fe:db:f7:74:7c:5b:ce:66:85:51:f4:
                    49:5f:03:92:94:71:e6:49:93:a9:02:89:62:5a:dc:
                    51:fc:bd:eb:87:a7:b0:ec:43:31:01:f1:74:2f:dd:
                    ba:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:26:8B:9B:F9:11:81:24:6E:B7:F6:9A:3E:55:DB:0C:41:66:A2:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15eefb33-983f-41ca-b75b-50ef1b0aa5fc/15eefb33-983f-41ca-b75b-50ef1b0aa5fc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.188.4.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397856

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:b3:66:df:53:a2:b0:88:61:c1:f6:65:6c:b4:c7:4c:a6:8b:
         f9:d9:f7:13:a3:4f:34:aa:44:dd:48:75:b0:a0:1d:a1:d9:2a:
         4b:15:98:d0:1f:c0:5f:1d:98:40:fc:3c:05:e2:a9:d1:af:4e:
         a7:0b:42:58:11:f3:e5:9a:14:f0:6e:d0:1a:37:1d:6f:3e:78:
         15:8d:11:8c:48:e7:77:49:66:e6:6e:57:c1:dd:08:fd:ee:e1:
         c4:01:4f:3e:34:4c:2c:4d:ce:68:3d:29:b8:08:88:42:7b:85:
         78:e1:1f:13:4e:1f:8e:2b:6c:2b:9d:af:c0:0d:f8:69:05:6c:
         fd:9b:28:9f:c3:03:0d:34:34:51:a6:3a:8f:73:80:0e:04:03:
         e3:c7:67:5c:8a:36:cf:ef:2d:f6:76:ce:ab:84:f2:53:f5:9a:
         d2:ca:f9:26:e8:71:fa:cd:83:fa:95:fd:19:e0:76:45:a9:cb:
         ff:6b:06:b5:65:98:49:9e:00:95:66:87:f8:ca:72:f5:bd:a6:
         3e:e7:43:a9:6e:58:63:bf:95:25:02:a1:c0:da:e8:f4:f8:bb:
         ba:26:e0:b7:50:b5:61:1a:0c:da:34:cc:1a:64:66:a8:a5:e6:
         b7:ac:02:93:07:8c:50:00:e0:5b:12:61:9c:06:68:05:48:05:
         4f:ec:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----