Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer
File:                     e553e5ec-0211-480d-9476-86db3dbe2182.cer (raw, json)
Hash identifier:          q5c1T5eW6cRak3v/HulkSZtEcpdsnhtfXKbHMwYpPiA=
Subject key identifier:   74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584625F1E8797ED0EFC226896A10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 09 Jun 2024 00:45:20 +0000
Certificate not after:    Sat 12 Sep 2026 00:45:20 +0000
Subordinate resources:    IP: 192.159.124.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:25:f1:e8:79:7e:d0:ef:c2:26:89:6a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jun  9 00:45:20 2024 GMT
            Not After : Sep 12 00:45:20 2026 GMT
        Subject: CN=e553e5ec-0211-480d-9476-86db3dbe2182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:0c:cc:d3:76:92:65:97:26:4e:60:78:88:
                    e2:1f:6c:5a:54:7a:31:ca:62:18:d7:de:ea:d4:9b:
                    f1:97:f9:0a:ef:95:ce:3b:e5:58:73:23:ae:53:df:
                    3f:b2:d5:01:c2:e9:4f:7c:aa:9c:47:5f:9b:79:c6:
                    5e:bf:22:18:67:2a:e4:0a:54:6a:ae:1b:5c:3c:53:
                    01:d8:b7:cc:4a:26:e9:fa:17:70:75:e1:70:b6:f2:
                    36:09:29:9c:16:be:34:ac:32:da:75:1c:4c:c2:f6:
                    32:6c:72:de:6c:15:f6:30:4e:0a:91:46:31:c4:e0:
                    a5:cd:96:01:31:3f:61:cc:d9:2f:ca:05:da:fc:15:
                    03:aa:41:87:06:5d:73:d6:2e:b7:bb:3f:88:1f:49:
                    af:8d:f5:47:a9:1f:62:47:ca:c4:49:e2:9b:d3:8a:
                    ba:3c:4d:00:af:d1:67:b1:e0:6e:11:c7:8f:e1:c3:
                    af:fd:f3:43:f2:df:26:90:d3:ac:a5:9c:3c:94:5b:
                    f4:c3:9d:ed:77:3e:b2:31:01:56:30:ec:f0:9a:2e:
                    42:67:49:e3:ea:f4:d0:69:a8:e9:86:2b:1c:ca:ba:
                    60:5b:63:20:d5:b2:86:80:b5:23:a6:68:74:92:5d:
                    07:a1:8d:4e:bf:0a:34:26:d0:49:12:65:19:14:b6:
                    49:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.159.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:e1:97:a7:5a:a4:b3:af:a0:7a:28:ec:92:5d:06:7e:1d:
         bb:89:7c:18:03:ca:6a:4b:ce:cc:ef:78:52:2b:c2:7a:ae:c6:
         68:7a:ab:19:78:5c:a9:bb:43:2a:a7:30:fb:c7:7e:91:e1:ed:
         a0:25:b1:32:4b:2f:2a:5c:06:a6:24:ee:27:88:ca:f1:cb:d0:
         f4:da:ed:14:2a:d1:ae:ea:92:dc:a5:25:8c:10:80:7b:23:e5:
         da:ba:92:5a:43:e9:69:fa:c0:af:cd:ce:03:d8:08:ac:5d:3f:
         13:0b:3b:05:0a:8f:f9:f4:eb:aa:26:d1:e0:fd:59:35:71:6d:
         ec:cf:89:c7:43:d0:d1:6f:02:8d:0a:a5:b1:42:f3:21:d1:87:
         54:fc:c6:04:0a:0d:da:fe:c8:1e:c2:df:5a:d7:1d:28:e0:21:
         4b:02:d8:e5:0d:1c:84:91:fd:30:01:9d:66:e1:21:7f:83:e0:
         1c:63:6c:fa:9d:c7:3c:ce:50:3d:70:ba:08:65:32:41:e2:b5:
         dc:e8:30:ec:e5:44:15:58:f4:0a:cf:05:e7:ee:76:ac:17:a6:
         6e:6e:b9:49:cf:45:02:a7:a5:0f:fe:96:f3:5f:dd:45:b7:45:
         40:ba:6c:7b:e3:c2:5c:a1:b2:ec:3f:b8:e6:c0:0a:2f:51:10:
         70:82:f1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----