Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1943f3-39d6-44cb-a6fd-67152b745e91.cer
File:                     9e1943f3-39d6-44cb-a6fd-67152b745e91.cer (raw, json)
Hash identifier:          zQuxkLc/vvYYZjLhmQBkCFlfhc5gX9FW9rYCAhLv0FM=
Subject key identifier:   CC:EC:3A:49:8A:77:47:E8:82:69:EC:5F:F0:22:6D:FF:6F:24:BA:C7
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285846F1BDE4DA76E5B6B906E209E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1943f3-39d6-44cb-a6fd-67152b745e91/9e1943f3-39d6-44cb-a6fd-67152b745e91.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1943f3-39d6-44cb-a6fd-67152b745e91/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Aug 2024 00:45:26 +0000
Certificate not after:    Tue 24 Nov 2026 01:45:26 +0000
Subordinate resources:    AS: 63392

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f1:bd:e4:da:76:e5:b6:b9:06:e2:09:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 21 00:45:26 2024 GMT
            Not After : Nov 24 01:45:26 2026 GMT
        Subject: CN=9e1943f3-39d6-44cb-a6fd-67152b745e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:50:3b:66:68:5b:51:93:09:24:2b:e6:91:
                    f2:4a:60:2a:3c:b0:07:d5:f0:60:ae:2f:c3:92:2a:
                    4d:a9:84:3b:f6:ae:9c:f3:dd:cb:61:28:b5:81:f1:
                    1a:bb:b0:d8:9d:d2:29:7b:d3:af:22:8a:4c:c7:c8:
                    3c:35:25:f8:10:f7:a7:37:46:88:cb:c5:13:de:40:
                    4a:c9:49:1c:2d:71:5f:35:79:72:c5:b1:18:35:9e:
                    c2:ed:f8:3c:66:b4:df:ce:fa:6e:2a:4a:a9:ea:a4:
                    02:8e:b1:a5:75:7e:31:cf:32:9e:10:d8:42:d9:bb:
                    27:17:78:b9:cb:88:31:79:58:18:32:84:55:21:08:
                    5c:13:37:44:e2:49:85:0e:7c:13:ec:db:2a:35:df:
                    b0:f4:10:4b:d7:e1:b2:8d:f8:1a:aa:6e:af:0e:4d:
                    90:bb:37:48:fb:ae:c8:1a:c8:c4:0c:77:db:0f:cf:
                    03:84:2c:e5:36:3c:19:b7:5e:06:13:48:75:7d:bd:
                    d2:62:99:13:bc:f9:db:6d:fa:82:7f:d2:73:bd:4c:
                    51:83:fc:9c:30:00:be:d9:5c:47:61:d6:18:8e:81:
                    43:a7:cd:0b:08:df:a3:37:85:95:c7:0c:35:26:ae:
                    51:86:54:fc:9e:b8:77:07:60:49:ec:d7:52:3a:06:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EC:3A:49:8A:77:47:E8:82:69:EC:5F:F0:22:6D:FF:6F:24:BA:C7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1943f3-39d6-44cb-a6fd-67152b745e91/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1943f3-39d6-44cb-a6fd-67152b745e91/9e1943f3-39d6-44cb-a6fd-67152b745e91.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63392

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:55:d9:8e:04:0d:f3:c9:67:c2:91:b0:eb:0c:fc:3d:f2:57:
         18:1c:0d:88:dc:08:c7:3d:62:49:7e:96:59:4d:24:eb:d4:37:
         39:7f:46:e4:67:ec:5f:86:23:8a:a6:ac:8e:f6:ca:7a:22:6a:
         d0:15:f9:d6:12:44:a1:7a:5c:46:ec:d4:0c:c0:89:cb:c9:8f:
         5b:82:ef:7b:b2:da:64:92:e2:9b:17:22:8a:7b:17:18:4b:cc:
         f7:c2:79:70:cd:60:05:6b:42:f7:9a:69:5b:93:e6:8a:42:69:
         36:5a:2a:d9:14:5d:c8:df:85:fe:6f:fe:d7:d9:ee:63:d8:cf:
         c4:8a:e3:a5:02:61:b1:68:a4:28:de:bc:37:9b:88:e3:bc:0c:
         ac:00:85:10:46:5b:b9:0e:ad:0a:4f:35:92:1e:a7:a9:a9:e2:
         03:e0:d6:f7:c0:ab:5d:16:6e:16:ae:09:71:bf:19:56:18:7f:
         73:aa:83:91:d5:41:57:60:8d:a1:50:37:c6:f1:20:b6:5c:96:
         0e:93:c2:18:7a:41:5e:24:65:4e:6e:ad:5e:83:bc:47:97:bc:
         45:d2:74:b9:69:78:9d:78:94:7f:1e:a9:57:f6:4e:43:38:9e:
         69:df:7b:c7:63:a6:c4:b3:1c:a8:b7:cf:92:67:69:e0:e9:70:
         b8:7c:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----