Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
File:                     e601b694-6242-4b1c-a841-d0a7214cd9c7.cer (raw, json)
Hash identifier:          JICGJyyVsn1OtKDc24MFagAaL3sBU24qEKFDUnX4UQY=
Subject key identifier:   96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285846FCE8A13FFE2EF73A24578280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 25 Aug 2024 00:45:26 +0000
Certificate not after:    Sat 28 Nov 2026 01:45:26 +0000
Subordinate resources:    AS: 32982
                          AS: 46846
                          IP: 2607:f368::/32
                          IP: 2620:0:b30::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:fc:e8:a1:3f:fe:2e:f7:3a:24:57:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 25 00:45:26 2024 GMT
            Not After : Nov 28 01:45:26 2026 GMT
        Subject: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b7:9a:b7:04:46:9f:e9:be:2e:98:de:55:63:
                    30:b1:c8:94:c6:74:32:8b:20:81:2c:e9:35:78:8f:
                    cc:f0:c3:8c:4d:a2:f1:0d:70:2e:4d:5f:11:c4:a3:
                    98:e4:d0:81:7d:58:54:30:52:f5:7e:ac:8e:f0:1a:
                    cc:d0:07:17:12:ff:ae:9a:a7:b2:fe:0f:e7:2f:b6:
                    0c:30:2a:3b:a2:8d:04:1f:b6:df:64:cc:46:af:3b:
                    89:1e:9d:e7:c0:3a:d8:38:96:ef:cf:99:a5:2f:37:
                    d4:a1:87:42:50:b1:ad:5d:02:a0:b1:40:78:44:7e:
                    7f:4d:04:d2:67:45:d9:c7:c9:09:93:86:d5:77:65:
                    e0:c9:54:b2:0e:b6:59:f9:50:0c:07:12:34:44:6d:
                    c2:4d:f9:17:40:47:17:8e:4e:ba:79:84:4c:c9:5e:
                    8a:45:9e:5c:49:4a:c7:d6:a2:02:91:82:df:23:99:
                    52:68:9c:f6:ee:ce:01:31:0e:48:62:d7:36:c9:9e:
                    49:93:f0:08:97:81:ee:4d:56:45:96:61:c2:e7:12:
                    8e:40:5e:44:25:4c:aa:a2:e5:30:88:02:a5:97:b7:
                    e2:03:0a:ea:52:03:23:1e:52:37:d6:26:80:37:9b:
                    bb:ad:cc:b1:06:c3:57:db:ae:5a:ca:03:b2:c4:90:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368::/32
                  2620:0:b30::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32982
                  46846

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:84:74:38:d4:69:71:7b:d0:cf:29:37:04:e5:de:4d:6e:9c:
         37:40:e3:e4:66:03:01:5b:2b:bb:6b:73:6f:1c:c8:d1:a1:c7:
         a2:94:e1:87:f8:fc:c0:c2:0e:af:56:54:d3:63:f5:b8:ad:ac:
         fa:90:eb:a7:1e:8e:34:14:83:58:d7:c7:11:c6:08:26:d9:58:
         de:c4:71:85:81:b1:d5:8a:48:29:54:ad:98:cc:14:0c:3b:57:
         c0:6c:94:3d:d4:1d:d9:7a:02:93:1e:a4:13:f4:7e:3d:d5:e5:
         0b:d8:63:76:fd:74:b9:b2:bf:1e:ae:95:52:17:32:a7:75:58:
         b6:d8:2a:33:b7:a8:76:9d:65:bf:a8:2f:eb:54:52:90:66:21:
         df:a9:05:39:38:53:cc:41:e8:59:61:aa:23:e5:db:ca:a7:a3:
         aa:8c:de:ed:0d:1f:85:05:d4:f1:54:34:9a:e7:e9:ad:59:da:
         c5:ab:c8:b6:fd:e2:cb:d9:82:f6:47:6f:18:66:e3:5b:1a:f0:
         b1:be:21:a7:88:9c:d2:5c:c7:ca:bf:79:34:4e:a1:06:51:b1:
         d2:c3:43:71:c0:5c:7a:23:7f:e3:ff:cd:e6:bd:bc:38:f2:d3:
         40:6c:b3:ab:50:98:6e:b0:32:57:77:7f:f6:42:b3:bf:78:6e:
         48:48:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----