Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
File:                     208dcf74-3dce-4384-beaf-70319895fc4b.cer (raw, json)
Hash identifier:          Rd6QmA+860qA5sp3NV9mh6VACTcTK8wwQ+OKFrE+RwM=
Subject key identifier:   B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285847801EC8A7EDA5E2B4DC508B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Oct 2024 00:45:26 +0000
Certificate not after:    Thu 14 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 13812
                          AS: 18839
                          AS: 396157
                          IP: 134.65.168.0/22
                          IP: 208.89.140.0/22
                          IP: 2620:187::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:1e:c8:a7:ed:a5:e2:b4:dc:50:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Oct 11 00:45:26 2024 GMT
            Not After : Jan 14 01:45:26 2027 GMT
        Subject: CN=208dcf74-3dce-4384-beaf-70319895fc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:38:d2:33:68:6a:de:63:04:87:3e:09:4b:
                    ef:52:d5:11:9d:07:04:a3:6a:7e:b7:50:4e:63:34:
                    60:cd:df:6d:8b:6e:e3:2e:2a:3f:6e:89:88:61:a3:
                    3b:ea:e5:96:33:ac:82:f4:ac:e7:9f:19:8e:d0:a9:
                    97:cb:be:7e:0f:f9:18:fb:39:8c:97:6f:1c:be:66:
                    3f:7a:2f:8a:9d:14:a4:f5:20:fe:22:cd:22:89:5e:
                    2c:5c:2b:19:22:17:9a:25:f4:82:77:a6:ed:4c:05:
                    b1:6a:d2:06:07:54:d0:1e:57:47:34:c4:37:46:8e:
                    a5:00:e1:ca:09:7e:db:56:00:a9:ff:ba:ee:99:f0:
                    4a:de:3c:ad:7a:cc:3c:27:34:be:bc:9f:08:aa:82:
                    1c:31:da:23:44:86:07:0f:85:fb:2c:c2:f0:da:9f:
                    3b:5b:c3:c2:d8:68:10:db:48:5d:f1:b2:9d:f6:3a:
                    4e:5b:17:dd:f4:0a:ef:d5:3e:95:7e:b2:3a:37:0c:
                    7d:ec:ac:97:f3:ee:cc:80:0a:4b:49:5c:18:fc:ad:
                    11:52:4b:a8:70:69:ba:76:32:9a:50:c6:c7:d6:98:
                    a7:1c:da:86:a1:00:44:e7:0b:64:21:cf:42:d5:bc:
                    8a:d4:40:b3:4f:02:0d:6e:39:d3:23:d2:f9:02:19:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.168.0/22
                  208.89.140.0/22
                IPv6:
                  2620:187::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13812
                  18839
                  396157

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:81:ef:4e:2a:99:9b:d9:d7:ca:30:97:0d:e2:bd:cf:65:7d:
         3c:61:56:84:79:14:77:48:46:4e:2f:e7:bd:20:78:04:32:2d:
         a9:1a:5a:86:cc:1d:95:c6:01:24:71:05:41:5f:0d:d2:42:9f:
         a9:30:2a:92:65:a8:97:33:e4:7d:f3:3c:14:f6:76:4c:db:2a:
         4c:a6:b2:75:a0:47:6a:a6:e3:3f:e8:79:a7:86:78:58:e2:d9:
         5e:70:c9:44:ad:15:60:6b:e9:a2:dc:4c:0e:45:a6:8c:e8:5c:
         62:eb:56:7a:f2:c4:08:71:45:42:75:ab:7d:ba:e4:9a:71:2d:
         4a:6e:3a:12:46:03:65:71:5d:5a:e3:a8:30:3a:64:e4:98:22:
         d1:76:fa:de:02:d1:da:30:fa:ce:64:6f:ea:9b:30:7c:c4:19:
         d3:92:d3:b9:9c:79:2b:2e:bc:46:19:cc:a3:31:5c:6b:eb:d1:
         d1:4c:83:25:1e:86:8d:18:08:1c:de:61:a1:53:51:8f:e1:51:
         4d:e8:04:11:61:29:27:83:aa:e4:4d:75:59:01:68:37:80:cd:
         9b:e2:40:58:d3:e6:e6:47:81:9c:09:59:2f:a2:c4:b5:d1:e6:
         63:0e:ec:8d:d7:87:cf:bf:e7:fe:bc:90:2c:71:30:fe:e3:61:
         c4:78:46:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----