Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
File:                     f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer (raw, json)
Hash identifier:          QX9UvzKBStPgqyj5opkGJA5OID7gxBPJrW6wj9frApg=
Subject key identifier:   6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584628BC96A9E92561EBA48864B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Jun 2024 00:45:19 +0000
Certificate not after:    Sun 13 Sep 2026 00:45:19 +0000
Subordinate resources:    AS: 14464
                          IP: 131.109.0.0/16
                          IP: 2604:a700::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:28:bc:96:a9:e9:25:61:eb:a4:88:64:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jun 10 00:45:19 2024 GMT
            Not After : Sep 13 00:45:19 2026 GMT
        Subject: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:07:73:9e:93:f7:8a:ae:5f:19:00:8d:38:
                    f8:27:5d:f9:1d:b1:43:f4:65:99:5c:ad:12:1f:3f:
                    f5:58:25:13:51:87:30:60:c6:9b:64:87:e5:c1:ca:
                    aa:82:68:b6:1a:87:32:9c:89:7f:db:6b:70:1f:a9:
                    5a:a8:54:cf:e0:29:76:85:88:ef:b0:d9:84:8f:0e:
                    4f:34:23:8e:9d:4e:c3:72:45:99:0e:c2:a0:d8:0e:
                    aa:71:1e:89:1d:f1:a3:f0:df:a3:a5:5b:f5:3b:47:
                    41:23:35:f9:90:5a:5a:6c:8b:0f:9e:07:07:02:c4:
                    a4:e1:a9:f0:55:a6:f6:26:2d:6b:f9:2d:ec:34:df:
                    81:fb:7f:ee:e6:6f:62:82:7e:2a:97:87:6e:99:cd:
                    84:bf:2b:30:6c:24:8f:a9:7d:ef:ed:bb:51:71:16:
                    eb:45:45:06:18:ab:1c:20:bb:9b:df:d7:30:6d:82:
                    0a:dd:eb:3d:59:fe:d9:9e:f9:4e:fd:89:71:ef:7f:
                    b3:66:cc:0d:7f:0c:77:09:8e:e6:e2:98:6c:2a:c3:
                    e0:13:ea:a1:b0:0c:00:6c:14:72:64:b1:e5:a8:ce:
                    0e:53:de:54:ed:f0:65:83:cb:2f:87:86:21:c7:b2:
                    bc:c4:1c:b4:ac:59:f9:57:b2:2f:64:4b:4e:70:01:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.109.0.0/16
                IPv6:
                  2604:a700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14464

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:57:f6:60:79:dc:93:bf:9e:4e:a6:f6:04:2c:20:88:ab:61:
         ab:11:7e:96:60:fc:9e:16:a2:87:8a:32:56:a1:5b:e2:29:04:
         ea:d2:5f:e0:d3:df:c6:5d:69:7a:c3:66:0a:8d:6f:2e:f9:5a:
         77:b1:9e:1f:f2:c6:e4:5c:63:df:db:8a:80:ec:8d:33:6b:c4:
         ba:1d:68:ea:e6:43:70:7f:d3:50:82:cf:37:72:e1:88:c4:86:
         8b:61:bd:a5:ab:aa:35:90:e8:2e:66:bf:1b:b1:de:81:06:1c:
         dc:29:e9:43:f6:f1:04:76:a7:bb:58:ea:9d:00:0b:de:fb:cc:
         27:56:d8:5f:d9:18:79:39:d1:5f:3a:d5:ba:ee:c9:45:69:18:
         6f:4e:12:d8:b3:ec:d1:db:1a:60:45:71:a5:1f:e9:94:bd:2c:
         e8:79:9e:38:94:76:78:8f:32:6f:a0:52:d6:ec:89:2f:15:c3:
         f9:4a:28:92:99:5b:4d:7b:df:7e:c9:b1:00:54:44:fa:c4:0f:
         3e:56:4d:ea:f2:10:ef:79:61:5a:d1:fb:b2:ac:88:89:d8:92:
         16:83:25:e1:f9:c5:d1:d1:bb:28:f6:32:72:37:15:d6:c1:e1:
         79:1f:35:9f:21:2b:87:68:de:61:fe:28:5d:50:4c:ac:a5:7a:
         32:03:9f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----