Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer
File:                     aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer (raw, json)
Hash identifier:          uCPEUPsBKXO974okkgRLkG2mLVPUB29AtxcQrKjxgiM=
Subject key identifier:   92:3F:C0:B4:62:A6:2F:B6:14:8F:72:2F:7F:3B:0F:C1:B5:CC:F1:E9
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584503B88D59447474EE841604A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Feb 2024 01:45:21 +0000
Certificate not after:    Sun 31 May 2026 00:45:21 +0000
Subordinate resources:    AS: 400817
                          IP: 2602:296::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:b8:8d:59:44:74:74:ee:84:16:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 26 01:45:21 2024 GMT
            Not After : May 31 00:45:21 2026 GMT
        Subject: CN=aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d5:fa:b5:d8:b5:08:28:c3:1a:9d:d9:d9:2c:
                    9a:83:2b:17:d3:ac:eb:80:f9:a4:dd:c5:13:56:bf:
                    64:c0:95:f2:c8:2a:a6:8a:d8:dd:86:3f:f3:bc:2b:
                    a0:86:71:ab:a0:ad:76:d9:ef:95:d5:7d:29:97:c3:
                    68:7d:09:e7:e1:11:65:9f:37:97:fd:3e:bf:3b:0c:
                    c1:b0:fb:be:0d:4d:76:51:d4:d1:65:52:3e:ff:8f:
                    ef:73:35:db:98:83:a4:cc:ad:4a:2b:9f:ce:7b:e0:
                    89:b6:a4:03:7c:fc:bb:b3:02:23:35:23:25:ff:4b:
                    5a:50:20:9f:a2:34:07:14:ab:7d:65:17:53:96:82:
                    af:aa:95:d9:22:f4:ef:1b:81:6c:0d:3b:67:b5:7b:
                    fe:0e:0f:ce:51:41:36:5c:ae:05:f6:b7:ec:8b:77:
                    98:dc:12:11:fe:a1:01:44:49:7a:11:e9:52:95:93:
                    bd:8c:c1:fd:66:1d:76:84:fa:99:21:2a:b7:64:42:
                    d1:f0:01:44:26:a6:f9:7d:f7:ce:2e:4a:b6:43:d8:
                    75:b2:3b:18:c7:f1:b6:cd:96:57:a8:b1:90:d9:0a:
                    91:d4:65:dd:e3:4c:a3:f8:9a:38:f9:24:79:1c:f9:
                    70:f8:72:f6:1d:4a:67:78:d1:be:37:a5:c2:0d:74:
                    fd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3F:C0:B4:62:A6:2F:B6:14:8F:72:2F:7F:3B:0F:C1:B5:CC:F1:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:296::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400817

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:77:ac:49:30:bd:71:fc:b6:00:56:91:0e:74:71:7e:36:
         11:59:30:57:42:d0:52:f1:2d:c4:f8:a5:78:7a:f5:ac:9c:e2:
         ea:e3:60:ab:84:4e:b2:38:5f:bf:38:37:28:97:60:84:8a:3d:
         23:ea:72:b2:b6:94:c3:5e:53:e0:bd:b4:fa:b2:f3:92:c2:50:
         44:af:f5:cb:87:64:06:3f:a5:f6:d3:85:1e:f6:a6:4c:25:53:
         95:d7:1e:1f:44:28:d5:35:e5:98:ce:06:b8:48:99:ff:77:c3:
         24:f2:27:73:20:3b:45:46:13:03:5f:13:6c:35:f8:a9:53:8b:
         ce:98:a7:a6:e0:93:94:b6:08:b0:84:fb:e0:f9:a1:f3:b8:89:
         91:d1:6e:1e:d9:c0:c3:85:0c:e4:24:5f:dd:f7:9e:40:83:76:
         cf:cb:f6:ee:a0:45:db:47:c6:2b:e4:68:62:87:11:c6:be:e6:
         04:b4:5a:ea:54:0b:49:5b:32:0f:b9:c7:94:6e:52:62:b8:77:
         6b:df:86:d0:7a:1a:e3:5d:e2:69:3a:d7:a9:4b:1b:b1:43:a9:
         bf:c2:63:d0:f5:9e:c4:77:32:05:df:51:87:8d:d4:6a:b0:df:
         0a:9e:cd:0f:70:06:e8:d6:1f:50:f6:dc:f6:81:71:e7:49:d0:
         cb:ce:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----