Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer
File:                     6f379fb1-acf0-497e-800b-5b1eca6ab7a6.cer (raw, json)
Hash identifier:          jOrBiD+24RrV/W++k3qUy6YC1iGPWDKOZSiAPQjmw34=
Subject key identifier:   E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285845C43BF83688CB6A5A35731B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 05 May 2024 00:45:20 +0000
Certificate not after:    Sat 08 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 26337
                          IP: 129.121.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c4:3b:f8:36:88:cb:6a:5a:35:73:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May  5 00:45:20 2024 GMT
            Not After : Aug  8 00:45:20 2026 GMT
        Subject: CN=6f379fb1-acf0-497e-800b-5b1eca6ab7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:bf:49:25:27:1d:35:11:f2:58:b5:88:df:
                    4b:cb:57:dd:a0:38:3c:86:10:a3:51:59:d6:f3:06:
                    6a:fe:75:ad:31:c0:b5:c8:94:e6:28:c6:43:b2:bf:
                    9f:3d:2f:d0:74:42:d8:de:97:64:a5:f4:19:9f:a8:
                    d9:ff:f7:bc:49:77:01:5e:9f:81:81:8b:f5:cb:8a:
                    e6:6d:89:5d:c0:7a:1c:71:57:8a:26:2b:89:c2:88:
                    74:68:36:e0:fd:bd:8b:44:09:e5:12:87:ea:b1:31:
                    a0:15:9e:ca:ec:1a:3b:ad:92:63:15:0a:80:2f:bb:
                    1e:5e:5c:10:d2:c8:bd:41:0b:96:a7:e6:ed:fa:bc:
                    20:39:fe:28:ba:86:69:bd:22:b3:ac:31:c0:e2:fd:
                    1c:a8:ce:f3:fa:b4:6b:f7:b6:27:b1:90:b6:cf:da:
                    d7:90:97:9e:05:15:d7:90:93:2f:74:2c:b4:dd:ca:
                    b6:92:49:46:2e:95:e6:c2:ed:e4:9e:29:b3:76:fb:
                    d8:9f:5e:9d:38:21:8a:c9:96:75:c5:29:24:26:81:
                    5a:83:d0:fe:fe:8a:4c:a7:49:f4:74:84:c4:ad:80:
                    58:20:ba:df:50:ef:a4:09:87:f2:76:08:7a:64:3d:
                    b9:a1:1b:0f:67:ba:2a:7b:21:0c:70:93:fd:c4:da:
                    cf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:78:64:D0:0E:B0:5D:74:BD:47:AA:73:48:0B:50:40:27:54:12:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6f379fb1-acf0-497e-800b-5b1eca6ab7a6/6f379fb1-acf0-497e-800b-5b1eca6ab7a6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.121.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26337

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:92:75:c9:b1:1e:d3:5c:00:9a:b4:6e:19:5f:1d:36:0e:69:
         a4:fd:52:03:75:55:0c:13:e8:9c:78:17:f0:33:69:81:1a:f2:
         9b:c6:dd:fc:b3:ef:37:f1:17:3d:e6:38:eb:89:6b:93:a9:48:
         40:0d:bb:35:37:e4:0e:d0:b7:4c:d7:c0:5b:aa:b2:4c:4a:c7:
         c2:ab:fc:b4:a6:87:f7:9e:45:40:3f:d0:32:05:09:20:ea:69:
         50:ec:3f:fd:59:74:d7:b9:06:60:a7:1b:73:40:da:06:33:9f:
         2f:c2:a4:d4:a8:9f:60:cb:78:a5:b2:76:6d:8f:87:39:c7:10:
         17:80:a5:8a:e4:60:3f:7d:7f:09:bd:b0:cc:05:f0:e4:98:5e:
         c0:d2:e6:b5:db:07:f0:86:05:49:72:92:c4:a4:3c:b5:14:14:
         f2:3f:75:39:47:cc:23:c1:8b:bf:82:ac:23:f4:9b:e0:d0:34:
         a3:c4:6c:16:73:39:05:d0:e1:59:bf:57:1e:4a:68:e7:9e:38:
         eb:7b:58:94:03:df:c1:7d:0b:fb:fc:7b:42:11:6b:cf:c8:32:
         a2:40:7e:3f:5c:a0:35:fa:f8:45:35:e7:1f:e7:0a:70:74:a3:
         74:3d:35:ef:32:05:de:67:7a:d5:94:1d:27:48:ce:30:1e:ef:
         07:54:03:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----