Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer
File:                     a38ff47f-825f-4455-b429-60f899d42ec6.cer (raw, json)
Hash identifier:          loXGOjzR7qDo/cVzSijB0Sm2ZFqygxtJTMlHyMlqS8k=
Subject key identifier:   5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584708135EF3FC679598A16562C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 29 Aug 2024 00:45:26 +0000
Certificate not after:    Wed 02 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 399840
                          IP: 192.43.246.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:08:13:5e:f3:fc:67:95:98:a1:65:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 29 00:45:26 2024 GMT
            Not After : Dec  2 01:45:26 2026 GMT
        Subject: CN=a38ff47f-825f-4455-b429-60f899d42ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:62:5f:52:48:e4:f2:0c:79:4b:c1:90:41:
                    a2:b5:fb:23:a2:39:ad:c7:de:3b:9e:dc:02:a7:20:
                    4e:e8:de:61:03:62:eb:5e:e6:ce:46:e7:a7:2b:4e:
                    34:a5:5c:9c:1a:d3:3b:4d:5a:73:13:ec:53:eb:be:
                    28:9d:61:96:aa:4d:b9:5d:5d:75:7d:a9:70:5c:10:
                    cf:89:3a:6c:be:9f:07:1b:2e:4a:4c:02:00:12:87:
                    b2:4e:6d:2a:57:6f:90:b4:ef:98:dc:8d:7b:1c:c6:
                    84:6a:83:96:7f:ec:7e:48:e2:a3:ea:65:db:68:1d:
                    31:b4:f0:79:87:a2:ba:16:1b:eb:8a:c8:ad:08:91:
                    57:20:1f:89:90:78:55:17:7e:e0:ca:23:d4:6d:c6:
                    68:52:a8:a2:10:59:29:4a:f8:c5:0e:d2:c1:a1:50:
                    a2:c3:2a:ab:78:5d:00:5a:cc:87:b2:53:21:a1:d3:
                    73:39:42:85:32:16:a2:17:f4:8f:a2:0f:26:02:26:
                    3b:1f:19:df:6d:89:78:20:d6:60:de:cd:11:a0:b5:
                    ea:3a:80:6e:71:6c:24:e2:e1:73:af:f4:fa:ce:cc:
                    34:a9:52:12:8a:a8:42:35:56:94:65:e2:fd:30:26:
                    20:a3:b5:df:48:a6:77:49:be:f8:2d:25:2e:cd:a3:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.246.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399840

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c9:f8:6f:41:f9:88:14:d4:f7:09:d2:aa:9d:75:46:45:f2:
         3c:a1:d1:f4:d2:3c:ea:a2:36:9c:76:94:bc:18:46:44:c4:08:
         8f:c1:54:7a:68:2a:fb:89:4b:04:8d:77:89:a2:86:01:50:df:
         82:9b:91:04:4a:ff:cb:ae:aa:57:d9:1f:91:db:bc:d8:de:ae:
         bc:e8:f5:fb:e0:c9:19:61:8d:c8:40:8e:aa:ce:92:fa:fa:b0:
         dd:ca:31:4e:2b:fe:ae:27:59:4a:56:3a:a1:a9:17:43:d2:6a:
         71:94:65:a0:2a:98:08:22:05:09:68:f5:d9:b5:4a:17:a9:02:
         ed:5b:95:51:05:78:22:9d:b2:ab:b8:9c:17:25:bf:2a:a8:cb:
         23:64:a6:33:f9:2b:30:42:02:33:54:72:95:3a:1f:e3:84:da:
         65:fc:5c:1f:49:fc:fa:74:ca:10:eb:d5:a1:db:a4:8e:04:14:
         f9:77:5d:e5:7f:69:8f:60:62:fe:4c:14:dc:be:4d:40:e6:97:
         f5:2d:c1:b5:a0:13:59:d6:aa:45:41:9e:02:09:8b:52:49:34:
         4b:4c:64:7c:4f:35:ca:e5:65:a5:50:5b:50:40:16:60:e6:a0:
         26:0a:c4:81:4e:1c:9d:49:74:f6:91:f6:c0:18:a6:8a:9c:c4:
         e6:00:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----