Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba.cer
File:                     f2742fee-57dd-438b-8ef0-812e02deeeba.cer (raw, json)
Hash identifier:          D3J9kIkniLhQ9GVqlMzW4cnV37vVJ2BpZqn3HWISnVI=
Subject key identifier:   9D:D4:45:B7:78:0F:22:B8:CF:9C:83:C6:51:D7:D3:76:EB:6B:7A:6D
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584668294674948690E558DD95A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/f2742fee-57dd-438b-8ef0-812e02deeeba.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 02 Jul 2024 18:00:15 +0000
Certificate not after:    Mon 05 Oct 2026 18:00:15 +0000
Subordinate resources:    AS: 40583
                          IP: 2606:d840::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Oct 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:68:29:46:74:94:86:90:e5:58:dd:95:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jul  2 18:00:15 2024 GMT
            Not After : Oct  5 18:00:15 2026 GMT
        Subject: CN=f2742fee-57dd-438b-8ef0-812e02deeeba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f1:bf:a5:0a:24:bb:5d:81:61:81:84:0b:8a:
                    24:dc:72:17:d7:fa:b4:c7:6b:b0:a4:03:34:32:31:
                    d4:07:5b:c7:e2:a4:17:fd:58:fd:9e:51:11:43:6a:
                    78:00:d8:f2:a1:0f:d3:f8:e9:99:75:2e:11:cd:06:
                    fe:2e:75:1e:07:07:ff:3a:f6:75:f6:72:07:02:14:
                    bc:b5:9d:3a:ba:15:c6:53:30:63:7e:d8:b4:c5:81:
                    f6:2f:ae:4e:63:b1:f1:f9:1a:fa:70:f4:5e:97:22:
                    17:52:21:0f:5a:76:8f:b1:58:96:c3:5c:9e:0c:23:
                    73:eb:a0:92:46:ad:d1:ca:55:c0:50:6a:f6:6d:e1:
                    8c:71:86:30:c3:28:b1:b1:e6:b1:57:ac:a7:a1:2d:
                    f6:62:7b:50:18:f5:0b:4c:8e:45:76:14:ab:89:80:
                    16:6f:2b:0c:09:de:29:23:98:6d:d8:dd:99:dc:a2:
                    f6:02:71:83:4c:a1:8c:ae:a0:ed:b1:29:47:19:d9:
                    1e:93:ea:38:f1:3f:1a:b3:a4:84:ed:3a:51:8b:58:
                    95:c4:ca:77:c8:09:c2:6d:9e:ae:b8:45:f9:70:03:
                    80:39:3d:9e:a9:9b:76:c2:6d:7b:69:f1:20:ac:94:
                    8f:23:29:f6:cb:af:e2:64:d4:91:39:c9:c2:51:76:
                    8e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D4:45:B7:78:0F:22:B8:CF:9C:83:C6:51:D7:D3:76:EB:6B:7A:6D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2742fee-57dd-438b-8ef0-812e02deeeba/f2742fee-57dd-438b-8ef0-812e02deeeba.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:d840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40583

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:10:e4:ae:02:c7:d8:81:f3:77:f0:a6:4a:1b:a3:85:0d:ff:
         82:10:c2:c7:97:2b:b7:20:08:cf:93:b0:81:d0:cb:35:e2:7b:
         47:4c:23:8a:1f:d3:f0:8c:94:8d:5d:a2:b0:e8:b8:37:db:9f:
         63:61:33:dc:f7:a8:f2:ed:c3:0e:a3:61:24:77:76:ac:ae:1b:
         c7:f3:50:3b:2c:82:b9:ab:85:4f:32:24:e8:32:4a:a7:e4:a8:
         a9:e7:ec:f2:0d:cb:62:cb:12:9d:8a:bd:36:05:9d:3f:8b:c1:
         8d:dc:64:91:97:c4:6d:df:70:0a:d1:fb:32:1b:a7:09:78:ae:
         56:fb:74:7e:3c:a1:b9:03:af:ab:bf:c7:a1:86:d9:08:e1:24:
         5b:bf:4c:a5:0f:13:ef:e3:fd:d3:9f:19:90:84:70:46:64:cb:
         37:14:8d:a9:86:1f:4c:83:e9:1c:57:8b:78:e2:9c:1b:b5:cb:
         fe:13:da:14:cd:fa:68:58:cc:85:5f:9b:91:5e:ca:7d:78:6d:
         e3:ae:11:57:85:1c:39:95:a9:c8:d7:12:df:2c:90:a9:c3:b7:
         bc:ff:5f:df:92:31:e9:9b:be:6b:0e:64:fc:21:75:c1:85:0a:
         3c:b7:5d:cf:55:ae:a1:47:13:18:b6:d7:91:32:b3:c4:83:2c:
         40:3b:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----