Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d.cer
File:                     1ec223ee-1e0d-426c-9970-c00985634a4d.cer (raw, json)
Hash identifier:          0pGGqIdiB8SK3gnWa1Ic10L0OKIizqpSUMyyrGul468=
Subject key identifier:   62:6C:A7:99:7F:B8:32:3B:58:22:5C:7E:37:93:AB:B0:DC:2B:B3:2A
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858483E79083B661B6304FE1B7120
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/1ec223ee-1e0d-426c-9970-c00985634a4d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 18 Dec 2024 05:10:52 +0000
Certificate not after:    Tue 23 Mar 2027 04:10:52 +0000
Subordinate resources:    IP: 205.166.50.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:79:08:3b:66:1b:63:04:fe:1b:71:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 18 05:10:52 2024 GMT
            Not After : Mar 23 04:10:52 2027 GMT
        Subject: CN=1ec223ee-1e0d-426c-9970-c00985634a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:d5:36:54:85:aa:66:b1:8b:9f:0c:d6:1c:
                    5a:cb:63:f5:de:81:a6:b4:7f:cc:17:ad:a2:bf:92:
                    05:a7:8e:3e:82:40:20:f6:4e:13:39:0b:c2:26:9f:
                    4f:79:1a:bd:84:d0:9c:36:92:09:ec:9e:09:04:76:
                    c3:f4:69:c5:f8:22:c9:61:e7:d8:ab:ed:bf:bb:ee:
                    0a:88:c6:e1:c3:aa:d3:36:6d:99:b4:29:d4:41:03:
                    b8:dc:d2:88:30:b6:8b:8e:e6:47:ba:2a:e0:0d:1f:
                    11:35:c3:2b:c0:5c:e5:a5:17:ca:dc:07:00:b2:14:
                    2d:8b:9d:5f:dd:29:56:75:42:65:8c:d3:54:26:92:
                    c0:2d:95:7b:0e:ee:c8:73:cd:cf:1b:1d:21:26:47:
                    7b:28:27:9e:08:15:b7:40:c5:56:d0:ae:6e:1a:fd:
                    39:01:13:bd:a2:25:a4:e2:c1:bf:07:f7:c7:3b:2a:
                    e1:07:b5:84:01:f7:a6:2d:c0:b3:80:29:90:a2:b4:
                    71:bf:8f:ea:fc:22:a3:91:5a:e8:99:e8:26:00:8e:
                    00:d6:ff:9d:ed:ea:9a:48:ed:0f:63:c8:b8:7b:da:
                    3f:90:96:9a:c5:06:26:1b:90:ee:0d:90:17:d8:cd:
                    91:47:3b:f9:13:ff:16:db:8c:1d:b5:6e:9a:37:80:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6C:A7:99:7F:B8:32:3B:58:22:5C:7E:37:93:AB:B0:DC:2B:B3:2A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1ec223ee-1e0d-426c-9970-c00985634a4d/1ec223ee-1e0d-426c-9970-c00985634a4d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:c8:f3:3e:f8:02:79:e8:0b:a7:a9:08:38:87:da:c6:06:7f:
         df:ae:17:22:bc:29:43:34:a4:6b:03:b2:d9:8d:42:b3:77:78:
         1e:33:19:50:a9:92:da:f1:7b:28:2a:a0:b8:33:a5:4b:fd:c0:
         4b:47:0b:92:96:3e:93:66:5d:a6:05:d6:4b:93:ee:af:68:0d:
         8b:ad:40:a4:de:d4:f4:d9:c8:84:cd:96:dc:df:f0:6e:bc:cb:
         d1:f0:a6:a9:62:72:13:65:d3:14:2e:11:fa:6d:73:f4:b9:2c:
         b1:a8:75:4c:fc:81:8b:4f:7c:f2:02:27:d0:bb:17:ab:74:d3:
         96:ac:44:9a:43:94:15:6d:03:a6:f0:b8:1d:24:e3:f5:9e:71:
         49:38:14:f6:33:53:ea:2a:1c:86:1e:c2:94:eb:fe:8a:9a:23:
         cb:08:da:47:b3:c8:7f:c9:69:36:54:b8:86:37:3b:cb:a7:bf:
         67:4a:7f:12:69:14:73:a4:db:f9:22:09:bf:62:a7:ef:d6:b3:
         a1:93:d1:f8:4a:28:d0:4f:cd:17:93:52:c5:b1:26:d3:d2:2e:
         0e:ec:f8:fe:80:a8:67:a2:b4:fc:1b:7e:cf:e4:88:7d:5c:fa:
         d8:69:e1:60:9e:92:07:8d:92:28:91:0b:d0:d6:e1:38:e3:ea:
         ef:d1:37:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----