Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer
File:                     7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer (raw, json)
Hash identifier:          6Fi6K1iMoOzuzw4NqAG0JUGKmVsOhgjLNcVap5RNqKk=
Subject key identifier:   C1:29:7B:36:8E:A8:37:B2:9C:C0:02:2D:37:41:46:E4:A4:B6:07:1B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858462D79CB11E6C845A46D98F900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 11 Jun 2024 17:29:47 +0000
Certificate not after:    Mon 14 Sep 2026 17:29:47 +0000
Subordinate resources:    AS: 401162
                          IP: 130.51.120.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Oct 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:79:cb:11:e6:c8:45:a4:6d:98:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jun 11 17:29:47 2024 GMT
            Not After : Sep 14 17:29:47 2026 GMT
        Subject: CN=7ae65634-ea60-4e81-b4f1-309c9aa6bc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9d:70:24:a4:c4:e9:7e:e1:bb:00:b8:06:2d:
                    2f:bb:a9:67:51:a5:c6:67:1d:8c:99:45:b1:60:72:
                    bc:81:c9:78:7c:8c:94:c6:1c:8b:4b:a7:4b:8e:b7:
                    94:ee:90:b3:92:15:b2:68:53:82:18:f1:74:28:c9:
                    f1:f5:50:ec:ce:e1:d5:10:33:90:b9:31:b5:57:21:
                    5d:8f:bf:1f:77:ed:9d:71:4c:f6:8f:80:ed:57:75:
                    a0:37:13:d2:67:a7:20:ee:32:b5:70:80:31:06:40:
                    8c:08:f0:d4:3f:f3:11:4c:45:94:14:a9:33:ea:51:
                    3c:c7:04:14:0d:36:44:bc:ae:98:d0:b2:4f:9d:1a:
                    dd:9c:b7:88:b5:69:ef:d4:b3:87:af:d8:1c:a8:57:
                    7d:b7:61:13:a6:c3:a9:ee:9c:ae:22:01:94:31:48:
                    97:0d:da:a1:1a:ff:c4:48:e7:68:41:68:98:50:bd:
                    02:96:bf:74:c0:d9:ce:d7:d2:f8:7f:8a:2a:c6:c7:
                    22:56:81:b4:50:d6:84:9e:73:e4:06:4d:ba:16:7f:
                    04:20:cf:34:dc:4e:36:db:20:55:fc:bd:35:e0:e4:
                    67:bc:54:75:54:d1:d3:71:8c:b3:52:9c:fc:69:2c:
                    93:cb:db:48:71:ec:4a:93:22:da:be:a7:61:bd:17:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:29:7B:36:8E:A8:37:B2:9C:C0:02:2D:37:41:46:E4:A4:B6:07:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.120.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401162

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f8:10:8d:99:5d:44:60:6a:da:33:27:89:99:9f:51:03:5c:
         9a:0b:b3:77:17:bf:ab:d8:bc:61:71:da:3c:a0:21:d4:d8:b2:
         38:b7:f9:84:d0:de:43:f4:0e:f5:ab:f3:33:a9:40:6c:eb:88:
         aa:6e:20:d1:6f:c7:dc:b2:d7:61:e2:8a:a4:74:dc:e5:5a:f9:
         1e:e7:f0:84:44:5a:dc:ba:4f:d2:7a:8f:27:15:0f:b1:83:5e:
         c7:9a:8e:19:38:73:93:c2:c7:c5:7a:66:aa:33:c7:1e:58:4c:
         d3:8d:c4:40:a4:33:e5:4f:6e:9a:5f:05:8c:46:ae:a9:d6:59:
         05:79:8e:1e:3e:7d:88:14:07:b9:30:d4:70:8a:b6:73:6b:ea:
         0a:54:02:56:d2:d9:90:62:2a:03:42:92:39:ed:07:c8:5d:2b:
         a6:ab:8d:d1:83:d2:65:ae:9f:1e:f3:d6:88:93:fa:e6:a7:33:
         ef:76:07:07:67:d1:50:f5:f9:d6:51:b9:e6:72:86:02:c4:9f:
         7b:da:ad:a6:e2:20:28:29:8b:aa:db:9a:19:e5:9c:3e:72:6b:
         d5:88:1a:cc:ab:5a:6e:bd:31:e4:b5:8c:96:97:5d:48:fb:0c:
         a2:11:9d:4a:5d:79:c0:29:2c:4f:3e:2f:ab:d9:35:68:33:4f:
         99:f5:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----