Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer
File:                     32e58881-6422-4e0d-9578-7c256d9f70bc.cer (raw, json)
Hash identifier:          eu066Yso3m4c9ngcWU9taIlxeyTkbjNiBowy3n7F/kg=
Subject key identifier:   F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285847FFC7FD915DB9BEE297638C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 25 Nov 2024 18:14:02 +0000
Certificate not after:    Sun 28 Feb 2027 18:14:02 +0000
Subordinate resources:    AS: 398191
                          IP: 216.225.32.0/19
                          IP: 2607:c7c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:c7:fd:91:5d:b9:be:e2:97:63:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Nov 25 18:14:02 2024 GMT
            Not After : Feb 28 18:14:02 2027 GMT
        Subject: CN=32e58881-6422-4e0d-9578-7c256d9f70bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:75:02:e0:d3:7c:03:3d:13:83:1f:64:54:47:
                    05:c3:62:fc:15:37:a3:7c:e0:5d:ba:4c:df:3b:83:
                    c2:99:35:12:d4:4e:2f:0d:5a:0a:50:7d:16:92:e8:
                    a8:be:cd:84:8c:8d:b8:a3:86:53:93:7f:ff:eb:59:
                    39:ce:f3:e3:d0:ff:7f:54:fa:70:5b:2f:6e:cd:11:
                    c8:0f:fa:6a:b8:64:df:ee:72:3a:e6:a6:2d:ba:9c:
                    1a:8b:72:71:2c:be:07:31:ef:da:75:df:ed:de:d3:
                    4f:fd:95:59:c8:a8:0c:e4:a2:ed:4f:5a:0c:b0:ca:
                    88:44:b1:ec:7b:86:83:b0:ed:25:78:56:f0:09:78:
                    68:4a:21:df:e6:6e:95:ef:cf:de:82:05:2c:23:6c:
                    cb:d0:ac:e1:d9:52:f6:a3:41:11:a8:d2:4c:d0:81:
                    70:55:2e:5c:c3:05:cb:f9:d4:19:57:11:ec:26:5e:
                    07:8a:8d:d2:2e:b9:db:d3:1a:cc:ff:7f:4a:32:06:
                    12:dd:a3:86:47:df:b8:dd:86:d9:4f:ef:66:05:db:
                    bd:14:37:74:15:98:e9:29:1d:e4:b0:43:6a:0b:27:
                    de:ea:0c:5a:c8:d6:bc:25:ae:8d:8b:04:2e:d4:3d:
                    39:f9:40:f8:57:d7:21:f3:a9:25:b3:d5:2e:6d:2e:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.225.32.0/19
                IPv6:
                  2607:c7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398191

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:07:5b:25:53:05:5f:6c:7e:1b:ff:93:66:ed:ed:bd:d8:6b:
         5a:be:6e:ca:07:b0:a4:66:d3:a9:7d:7f:cb:11:80:d6:e3:6a:
         28:ed:ba:3a:49:29:ab:b2:8e:08:52:c7:58:b5:0d:5d:4b:14:
         fd:79:a2:00:92:2a:a4:e5:ff:a3:b1:bc:d1:43:0f:66:11:ae:
         1a:e0:81:be:52:fc:0b:90:e3:7d:05:c1:13:61:7e:e8:f4:95:
         07:41:09:9b:b0:03:33:64:6c:bd:bc:15:43:fa:bf:f0:f5:bf:
         27:fd:3c:89:4f:49:62:6b:9c:2d:86:7e:05:18:26:da:71:74:
         89:c5:b7:11:35:03:2a:76:b9:29:c6:76:ad:a2:8a:9d:4a:af:
         f5:36:d6:04:86:59:15:e8:8c:1d:6c:00:c3:6b:c8:ce:fc:24:
         91:28:02:48:0e:1d:66:08:cf:64:0d:4d:4d:ff:c5:ba:f8:41:
         ac:ed:54:85:a0:cb:35:7d:c3:38:d5:66:40:1c:66:3c:58:e3:
         a0:ff:2a:83:37:d3:4a:8b:19:db:2b:8b:56:56:97:e1:40:f7:
         b8:e9:78:87:1b:e9:8b:cb:b1:43:39:06:ce:b9:0d:e2:69:28:
         91:a5:09:8c:97:40:b8:8f:03:f4:33:83:53:0d:31:24:90:8a:
         3b:cd:74:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----