Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511.cer
File:                     3416eb84-d1fa-4d16-850d-b6024c13b511.cer (raw, json)
Hash identifier:          0ZbWAS7oREn0Lxb3YlbLGy9cUKPhNubH2o0tofNQtBY=
Subject key identifier:   C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858467B3A67453CF1C118E00337C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 09 Jul 2024 13:55:07 +0000
Certificate not after:    Mon 12 Oct 2026 13:55:07 +0000
Subordinate resources:    AS: 21930
                          IP: 198.202.141.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Sep 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7b:3a:67:45:3c:f1:c1:18:e0:03:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jul  9 13:55:07 2024 GMT
            Not After : Oct 12 13:55:07 2026 GMT
        Subject: CN=3416eb84-d1fa-4d16-850d-b6024c13b511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fb:d9:99:eb:82:e9:4e:fe:0e:e2:a3:e3:8b:
                    61:0c:0b:1a:2d:18:e1:f6:4d:4c:18:11:81:2e:d1:
                    2f:ff:7c:f2:21:4c:4b:d6:e5:b5:58:7c:ec:b7:f7:
                    75:11:3b:de:56:0b:dd:1a:cf:07:19:d5:08:88:bb:
                    5c:dc:2c:14:0d:e7:73:59:32:5d:0e:17:74:55:af:
                    6b:01:40:7d:44:62:91:20:39:1b:8e:a0:2a:65:7c:
                    1c:54:ce:19:5b:24:17:31:73:89:fc:aa:ff:2b:c2:
                    9d:5f:0d:3f:00:f1:24:07:73:d2:9f:a3:4a:70:18:
                    25:f8:52:18:eb:8e:db:82:16:15:04:96:b1:26:78:
                    d3:5c:67:a4:fa:6d:ce:6b:b4:62:bf:70:a5:06:77:
                    43:d8:4c:16:56:a4:e8:f0:f5:24:23:16:04:59:ea:
                    a6:7b:98:ae:db:25:ce:15:48:9a:10:bf:60:60:c7:
                    5c:cc:2c:51:2a:34:06:e0:69:14:32:ad:5d:9c:cd:
                    b3:9f:5f:de:59:17:04:7d:14:49:2c:bd:d5:99:71:
                    34:e1:a5:e1:fe:aa:d6:11:dc:e1:a7:09:d6:31:e1:
                    7e:cd:ac:e7:c3:4a:77:15:78:79:2b:76:85:7e:b5:
                    d2:9f:2b:8d:14:bb:69:47:01:d1:a1:88:12:4a:af:
                    9b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C5:D5:B8:03:A3:E2:B4:34:B2:FE:44:26:B5:3A:CA:53:D2:4C:19
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3416eb84-d1fa-4d16-850d-b6024c13b511/3416eb84-d1fa-4d16-850d-b6024c13b511.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.141.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21930

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0f:4c:3d:38:7e:cb:7c:52:9b:2a:d9:8f:55:8d:6f:af:a5:
         29:e0:59:7c:36:fb:10:41:0c:5f:60:0f:c9:f0:81:8d:a8:56:
         66:99:e2:62:7b:8b:85:a6:f8:76:5a:45:ad:d0:5f:7a:8c:3b:
         12:20:ad:75:a2:00:7d:42:62:a1:78:9e:af:5c:5c:e6:86:d1:
         c2:1f:e0:e7:c6:4b:2b:3c:4c:63:8d:34:2d:06:71:aa:42:5a:
         f9:7f:72:fb:9d:a0:69:ed:00:51:05:d6:b2:6b:fb:fa:cb:8f:
         af:98:9b:fc:e6:8c:83:a7:21:64:d2:0a:01:c5:39:0d:8d:74:
         97:38:f4:f4:47:79:81:fe:81:20:6a:e9:bb:55:53:e1:5e:5f:
         1c:57:e2:37:36:78:29:13:9c:e6:b6:3a:7f:fa:5e:8e:f7:1a:
         d6:12:12:51:e9:0d:4f:67:a5:48:ce:15:75:eb:3b:fb:93:3b:
         2b:be:17:90:ff:b0:64:8e:e5:9f:f3:6d:03:69:55:dc:ad:e7:
         d6:d5:d6:5b:f1:0b:1c:a9:3d:08:4e:25:12:92:9c:2c:bc:42:
         d9:e3:fd:4b:ee:93:e0:fd:02:ff:f7:53:df:09:18:1f:7c:c3:
         2d:45:c9:0c:eb:6a:af:c7:80:23:bc:3a:2d:cc:09:a8:b7:2d:
         90:76:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----