Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer
File:                     77258d44-b15b-4045-943b-356f0becdaa2.cer (raw, json)
Hash identifier:          v1X0stSXu3vZy/kZkpx3KCBM/1MJeUie7qpTFyMREwU=
Subject key identifier:   6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584505DF6695C6012FE7AE12CC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Feb 2024 20:15:14 +0000
Certificate not after:    Thu 21 May 2026 00:45:21 +0000
Subordinate resources:    AS: 399554
                          IP: 107.161.40.0/21
                          IP: 170.117.224.0/20
                          IP: 209.35.144.0/21
                          IP: 2602:fc43::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:df:66:95:c6:01:2f:e7:ae:12:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 26 20:15:14 2024 GMT
            Not After : May 21 00:45:21 2026 GMT
        Subject: CN=77258d44-b15b-4045-943b-356f0becdaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:2a:e7:60:51:c8:65:92:a2:16:11:57:67:
                    20:aa:38:a9:6c:b7:07:85:56:e2:43:7b:17:28:bc:
                    47:8a:84:ae:d5:e1:a2:05:24:a4:a8:a4:0b:e1:ac:
                    a5:b0:67:af:f3:e3:b3:72:10:9b:a7:58:be:59:69:
                    1f:3b:14:e8:8d:6f:d4:68:7e:62:47:e9:a4:a2:e3:
                    b6:d3:ed:d6:9e:60:a5:47:b4:96:73:4c:4d:29:8b:
                    19:ed:da:a7:e7:73:fb:df:8b:3d:dc:32:92:2e:06:
                    16:af:46:fa:38:de:60:53:e0:0c:52:d7:c3:b5:54:
                    01:7b:e1:12:f2:5a:ca:c1:92:01:30:84:20:c4:57:
                    39:28:9f:64:06:56:0c:bd:11:a6:1e:ab:b2:b0:4f:
                    2c:b9:d9:59:fb:d1:f8:2f:bb:6e:ab:b9:f3:5c:14:
                    98:53:1c:e5:16:88:2a:99:8a:0f:c1:33:a2:3e:a0:
                    82:5d:8a:96:6c:30:5e:0f:9e:32:d2:2e:56:82:61:
                    f2:b5:9f:1e:8b:71:e3:47:55:2f:1d:a9:b0:74:95:
                    d6:00:42:c3:b9:da:17:6d:95:1b:00:0e:3d:1b:df:
                    82:b3:39:47:71:b7:dc:2c:15:c2:4b:60:de:75:f1:
                    00:54:57:27:93:df:a6:20:43:df:77:44:14:74:2d:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.40.0/21
                  170.117.224.0/20
                  209.35.144.0/21
                IPv6:
                  2602:fc43::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399554

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:87:67:f3:79:27:2d:5f:d0:63:58:9e:f8:41:64:c0:26:8c:
         35:80:38:e0:1e:41:35:3f:a5:03:1e:6f:80:0b:2c:aa:1b:cf:
         ce:f5:6b:79:f5:ad:94:4b:d2:35:20:28:e0:55:1a:e2:2b:29:
         e1:3f:50:d8:f4:b5:b6:3e:eb:23:9d:1a:c0:c1:92:a7:a9:ee:
         17:d3:d6:13:d5:c4:ba:ec:a9:2a:b5:88:bb:5d:09:2d:3f:7d:
         b6:cc:6f:d6:38:e8:18:80:cb:13:2f:d3:13:c1:9d:cf:3a:75:
         5d:fa:dd:3e:66:47:4d:43:11:d3:84:4c:64:72:a6:9c:46:1e:
         d5:c1:6a:ce:5b:d6:14:34:4e:9b:19:b4:84:6a:50:a4:fb:f2:
         75:2c:1b:c0:a7:53:9e:a1:da:26:cf:15:d9:ce:b3:5e:3c:e3:
         cf:2a:51:99:5b:ee:0a:ec:74:08:e1:e8:e2:37:81:ca:ac:54:
         0a:9f:5b:cc:1b:da:25:34:7e:e8:f5:18:db:ef:3c:80:bc:6e:
         10:7d:6b:15:57:72:29:9b:ad:65:c3:02:ab:0e:12:98:4d:39:
         f8:d4:11:6b:31:8e:be:8c:92:f0:e1:f4:59:5a:11:5f:2f:9a:
         3c:80:2f:85:75:93:57:de:c4:a3:17:4c:b5:84:c9:32:93:e0:
         b6:32:06:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----