Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer
File:                     b150e98d-80e9-45f6-bc63-6b40a3d59e9c.cer (raw, json)
Hash identifier:          VUHXm7XmrtFH30vqFZMfvI27jS4tZ4fxGBiVriORPro=
Subject key identifier:   2B:7B:77:56:E4:AD:D2:16:5D:12:8B:55:09:D7:10:69:3D:E4:18:8F
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285846FE4DF9BDFF5E55723B945700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 25 Aug 2024 12:45:26 +0000
Certificate not after:    Sat 28 Nov 2026 13:45:26 +0000
Subordinate resources:    AS: 19680
                          IP: 23.153.232.0/24
                          IP: 2602:fa7a::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fe:4d:f9:bd:ff:5e:55:72:3b:94:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 25 12:45:26 2024 GMT
            Not After : Nov 28 13:45:26 2026 GMT
        Subject: CN=b150e98d-80e9-45f6-bc63-6b40a3d59e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:e1:ef:53:8e:78:11:9e:78:d6:fd:ea:94:
                    45:39:88:e6:b5:0d:11:ab:74:b0:70:51:82:27:d5:
                    c2:18:d3:2d:63:50:b6:41:48:09:96:54:20:0d:97:
                    80:a9:bb:31:eb:de:1e:2c:bb:b1:09:6c:90:52:f3:
                    87:5a:78:36:68:ac:57:6e:83:a5:e4:db:41:c9:ac:
                    2f:8a:0d:d1:f2:04:cc:b5:55:60:7d:86:be:5d:6d:
                    0d:41:ec:94:c5:9d:29:94:1c:11:05:89:96:a7:46:
                    b1:ca:6e:58:84:82:67:96:19:cc:cf:9d:c3:b0:ec:
                    2c:37:a6:91:2e:1a:e3:2d:22:04:37:5b:76:a6:e5:
                    6e:ad:cd:55:c1:14:cb:91:3f:5d:bf:6d:4b:3a:4c:
                    bb:41:83:42:86:c3:40:10:6a:18:94:b2:8f:84:47:
                    17:71:65:61:1b:cd:1b:58:d1:8b:25:a5:e2:0b:22:
                    81:1e:59:d7:96:d8:e4:c1:7f:e7:d2:da:30:a6:49:
                    62:ea:e0:77:f7:72:49:d3:84:ab:19:59:97:c0:ab:
                    ad:c5:37:95:8a:8f:4d:41:1c:2e:57:9b:56:fd:a6:
                    b8:cd:bd:d4:29:33:f5:11:dd:77:f8:fd:52:7c:0c:
                    8d:fb:eb:f4:77:62:ff:93:b0:c8:d4:58:3c:bf:4b:
                    02:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7B:77:56:E4:AD:D2:16:5D:12:8B:55:09:D7:10:69:3D:E4:18:8F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/b150e98d-80e9-45f6-bc63-6b40a3d59e9c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.232.0/24
                IPv6:
                  2602:fa7a::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19680

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:73:49:cb:6f:9b:79:be:dd:40:65:c1:48:91:ea:5d:de:b3:
         bc:79:18:08:6f:5c:a7:76:04:57:1a:79:30:a8:54:67:5f:57:
         3b:ad:84:d1:ec:79:31:a5:97:93:31:5f:19:bb:bb:1d:97:c4:
         e9:4f:37:44:2c:04:d9:3e:76:73:8b:0f:33:30:d2:93:10:f9:
         c2:b4:76:7c:9f:3f:20:4e:c2:8e:e2:ec:54:ff:f2:66:1a:a5:
         48:42:fd:38:ff:fb:dc:b3:e0:5a:6e:b2:4b:12:9c:27:64:e1:
         b4:94:c7:33:5a:a3:79:f5:16:cb:2e:24:e8:6b:1c:00:35:11:
         6d:a9:d5:e9:18:80:d4:ba:d1:8b:c1:95:68:bf:d8:ac:5a:66:
         8d:9a:44:2a:01:6b:b0:7e:bb:8c:1c:b0:5b:22:27:02:1f:8a:
         43:6d:54:94:43:48:a8:80:6f:4e:b2:df:73:b1:e6:32:05:7a:
         cc:6e:7b:3b:dc:38:fd:7c:ae:c3:33:14:6c:1f:68:61:ee:5f:
         2a:94:b5:5e:f1:48:6f:14:13:49:86:51:08:d2:f1:78:12:95:
         d2:c2:d7:ec:c3:46:29:e0:ed:fc:08:2e:37:ca:46:02:cd:45:
         a3:81:cb:a6:98:5f:40:23:93:b5:2b:2f:24:4b:29:7c:eb:26:
         b5:32:ff:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----