Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer
File:                     5a791677-2f6b-4828-a754-1d16b76a8a68.cer (raw, json)
Hash identifier:          fea1Uci51WhKPY1f70Fj7BBvQlnmtfFzsUZ49RPuyYI=
Subject key identifier:   02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848469FAC8D63EB6CD744D7A640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 21 Dec 2024 03:15:12 +0000
Certificate not after:    Fri 26 Mar 2027 02:15:12 +0000
Subordinate resources:    AS: 46951
                          IP: 23.131.28.0/24
                          IP: 2602:f768::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:46:9f:ac:8d:63:eb:6c:d7:44:d7:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 21 03:15:12 2024 GMT
            Not After : Mar 26 02:15:12 2027 GMT
        Subject: CN=5a791677-2f6b-4828-a754-1d16b76a8a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:35:9d:cb:7f:28:28:a1:48:c4:07:fc:2f:2e:
                    a0:5f:b5:2f:b3:ef:67:99:a8:b9:a3:73:91:f5:8d:
                    ae:e9:5c:e4:72:10:ea:a8:8d:20:4a:42:20:b2:be:
                    5c:7e:45:b6:98:b2:a7:0b:ff:82:a5:a2:6e:3c:0c:
                    1d:6b:9b:3e:4e:aa:da:7c:a1:59:9b:6c:35:36:a4:
                    dc:19:9f:2f:8d:6e:b1:a4:54:d0:6e:d4:b7:67:90:
                    29:11:65:0f:e3:ff:d0:c6:7e:09:cd:7f:db:9a:a6:
                    7f:be:ae:c8:01:70:cc:88:6f:1e:70:c9:82:f5:24:
                    5f:77:6c:e8:c5:66:61:03:64:46:2d:8d:a9:e8:91:
                    b1:69:48:bd:5f:68:b2:be:76:ed:a2:a0:30:88:c9:
                    99:ef:f1:b9:da:c8:64:0b:21:11:97:b0:af:05:97:
                    98:6a:fa:af:10:9f:ad:0c:2e:1b:d6:65:d8:af:86:
                    dd:9a:ce:9c:ea:d5:1a:c7:db:9f:ac:90:4e:ad:2c:
                    95:fb:1e:2a:63:0a:35:06:42:aa:9b:b0:3c:22:08:
                    ef:bd:31:f2:90:ba:05:f4:72:d8:cb:f1:fa:18:ea:
                    25:51:56:3a:10:0e:f6:59:be:19:b8:d4:27:55:b9:
                    31:c0:bf:8c:02:9f:12:e5:40:0a:b9:cc:fc:ef:5e:
                    14:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.28.0/24
                IPv6:
                  2602:f768::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46951

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:23:c0:f1:9d:04:71:23:78:fb:12:56:26:35:eb:f0:88:31:
         64:1a:50:5c:80:94:28:33:7a:8b:9d:4e:95:53:56:c3:fa:d6:
         ec:ec:04:37:2d:49:67:31:01:9d:ef:76:8d:d5:4e:16:d9:8e:
         45:00:14:8b:ff:3c:00:d1:99:e5:a7:4f:ef:e4:e8:55:59:ed:
         24:d2:9f:a2:d3:4f:6c:5a:a1:22:05:48:37:56:21:9b:f2:22:
         09:30:40:2b:a2:fe:66:1e:ff:1f:89:0b:38:5a:27:68:19:46:
         fa:24:9f:e7:ac:1a:07:19:27:7e:90:72:5f:c3:2f:98:a9:5b:
         dc:72:52:13:ed:03:3b:84:e9:67:86:ea:9c:f2:e0:8f:94:de:
         34:70:2b:89:47:67:91:1d:d1:8c:3e:28:3f:02:8f:79:fc:ad:
         68:f5:f7:a1:da:23:94:ff:cf:98:4d:11:c1:56:36:b2:ed:f6:
         60:d5:7c:29:98:1a:7b:45:d6:e7:9b:d2:12:f4:7b:37:fa:8e:
         7c:2c:58:e6:a5:83:87:19:7f:a6:21:4c:17:98:dd:9e:4d:a6:
         e2:eb:53:9c:d2:7a:84:71:0a:1a:38:c5:9b:69:f8:6c:ec:25:
         48:b5:73:52:a9:2a:40:64:e4:b0:e0:f2:64:05:7f:8e:f9:af:
         18:58:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----