Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.cer
File:                     8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.cer (raw, json)
Hash identifier:          8Gfgq4cOOx7JQpzQtLh7IS31LQ9dmI/VScpbCzVc3zw=
Subject key identifier:   AF:15:BD:2C:0D:A3:CA:B6:C2:CE:1B:97:AF:FD:2A:D4:C3:8D:3A:76
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858483D167AD63CD2F08C81FF95C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Dec 2024 17:16:29 +0000
Certificate not after:    Mon 22 Mar 2027 16:16:29 +0000
Subordinate resources:    AS: 395297
                          IP: 23.130.12.0/24
                          IP: 2602:f78d::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3d:16:7a:d6:3c:d2:f0:8c:81:ff:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 17 17:16:29 2024 GMT
            Not After : Mar 22 16:16:29 2027 GMT
        Subject: CN=8661935e-ae6c-488e-9f2d-5b3b4daaf1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8c:1b:4f:0e:ba:e6:b4:85:a9:73:b1:c9:fd:
                    3d:6c:8a:97:4b:34:7c:2e:a3:88:36:fb:1b:e6:3a:
                    9d:f1:ee:e6:80:71:18:31:ff:e4:6e:ee:28:a1:60:
                    f9:80:35:e9:07:6c:74:5d:8a:34:34:0e:0b:5e:f7:
                    b1:73:8f:87:e9:6f:db:1b:a9:64:7f:4c:c0:0b:b5:
                    e6:8d:52:64:ba:88:77:0b:7c:a0:a1:3c:f7:1c:db:
                    bd:b6:81:8e:48:d0:f5:8c:87:eb:b2:00:13:40:a7:
                    b0:b8:7a:d7:1f:7c:81:9d:fb:7d:40:8a:34:e1:53:
                    c0:cf:ae:ba:5a:cf:b4:ae:f1:7e:16:8b:2e:3f:4c:
                    ed:c2:49:99:60:bb:b7:ac:b3:8a:90:30:1e:a5:0a:
                    75:42:d0:a8:13:1a:3c:1c:d0:6d:24:c5:52:7f:8f:
                    88:32:30:f3:f2:ea:29:6a:31:96:df:f4:eb:be:ce:
                    0b:3a:8d:bb:90:d7:a1:40:b4:7a:61:dd:0a:7b:2a:
                    39:65:e0:1f:87:f6:08:aa:e8:c5:00:3f:95:d1:2a:
                    1d:de:79:95:72:d6:e4:4e:ab:1b:6e:95:12:42:fd:
                    ec:31:aa:e4:29:69:42:8d:1c:d2:b6:16:17:c7:04:
                    34:e4:a1:d8:3a:75:18:c0:99:8d:d2:c3:b8:43:c8:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:15:BD:2C:0D:A3:CA:B6:C2:CE:1B:97:AF:FD:2A:D4:C3:8D:3A:76
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6/8661935e-ae6c-488e-9f2d-5b3b4daaf1f6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.12.0/24
                IPv6:
                  2602:f78d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395297

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:16:75:0b:62:08:9c:ef:08:0f:4a:5e:97:07:af:a5:6d:30:
         90:57:77:67:8f:7b:c4:33:04:ae:cf:fe:c5:fa:78:89:68:00:
         b4:0b:44:c1:11:ab:c8:e4:d8:85:fa:b1:9f:b4:7e:20:32:d6:
         16:b8:59:42:47:0e:d0:47:98:26:17:64:45:b5:34:09:3e:c7:
         65:62:76:23:bb:d0:1f:86:6d:c5:ec:cc:2e:05:81:a9:3c:cc:
         ff:41:25:89:17:53:3f:c5:3d:fd:62:6a:9f:49:8f:39:82:31:
         1c:79:0c:0a:75:36:a3:e4:c1:d3:fc:b8:95:24:0b:cf:51:13:
         c0:4b:5f:77:28:90:cd:7d:29:ac:0c:af:72:66:94:83:1d:b9:
         bf:3f:fd:a3:d1:f2:27:7a:05:b6:e5:fd:96:96:12:d5:b3:54:
         34:13:2c:2d:a8:dd:ba:cd:9d:c4:e3:56:03:8a:66:fd:f1:2e:
         97:8f:60:ef:1f:9c:36:2c:61:a4:f1:96:5e:fb:75:ca:75:00:
         a4:2e:bf:1a:c8:f5:f2:41:20:f8:0f:ca:4b:db:95:5f:9f:ae:
         d3:56:cb:3c:d8:ce:b3:8d:80:7c:b8:f5:27:72:d4:5f:a1:b6:
         da:e8:0f:66:f1:a4:eb:89:57:0b:2f:d6:70:96:ef:e9:29:59:
         08:5d:72:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----