Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
File:                     a4e67936-c857-487d-93df-2dff7fa79988.cer (raw, json)
Hash identifier:          f8XRK+VnwyrxYkbsVz1AjpN6vGg9l3l/RB9XT3zurzc=
Subject key identifier:   16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858483D37ECEA380CBA05F9496400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Dec 2024 18:23:53 +0000
Certificate not after:    Mon 22 Mar 2027 17:23:53 +0000
Subordinate resources:    AS: 19940
                          IP: 66.114.64.0/19
                          IP: 72.0.224.0/20
                          IP: 216.16.144.0/20
                          IP: 2606:8800::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3d:37:ec:ea:38:0c:ba:05:f9:49:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 17 18:23:53 2024 GMT
            Not After : Mar 22 17:23:53 2027 GMT
        Subject: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:30:94:4d:5d:a0:b4:01:83:3b:88:31:3f:
                    ac:e4:be:ec:a4:8d:b6:ff:3a:d3:47:f9:ee:19:35:
                    72:02:44:a1:1c:56:be:60:b2:d2:a0:f2:1e:58:0d:
                    03:4f:b1:ba:ec:4c:59:c8:de:12:52:24:2b:b6:b0:
                    cc:c5:52:2c:1b:76:70:12:22:1d:68:30:05:4a:c7:
                    43:50:37:b1:fd:0d:63:04:61:c1:a9:3b:79:c0:81:
                    32:8b:71:df:fa:b0:63:e1:2c:41:0d:be:09:a7:af:
                    1a:31:3c:7b:0f:26:7d:ca:89:cd:ea:a1:5b:81:c3:
                    18:4d:0e:3b:c9:ed:34:cc:38:b6:68:a5:0a:20:c4:
                    e4:b2:4e:8d:ac:a7:7f:ad:8d:ba:a5:28:6a:48:fe:
                    95:59:b2:9a:dd:17:11:f7:bc:ff:9d:71:c6:39:f3:
                    58:73:da:6c:72:be:3d:23:64:28:a6:36:1b:3f:f1:
                    8b:fd:87:3f:9f:19:f3:5c:64:95:58:25:a2:ee:8e:
                    0a:f5:8f:60:cf:e6:9b:f9:b6:57:f1:74:3d:8f:e9:
                    39:2f:98:fb:b7:bf:ad:c9:76:6e:c0:a0:5a:f4:29:
                    ac:df:30:ea:ef:63:97:d7:0b:ab:a0:56:60:fc:d6:
                    a4:33:e0:e0:1e:94:9d:82:55:f5:30:af:8e:99:ea:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.114.64.0/19
                  72.0.224.0/20
                  216.16.144.0/20
                IPv6:
                  2606:8800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19940

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:b1:5f:72:3d:ce:82:a1:21:ab:22:0f:da:61:49:31:bb:c1:
         5a:e1:e9:ae:18:45:7d:55:54:f7:1f:e9:67:8a:b9:4d:b1:da:
         e7:b2:7a:e4:9e:08:d4:8e:04:ee:06:56:eb:aa:5d:fc:45:bc:
         49:91:2d:26:cd:f1:be:69:6b:04:4e:a4:b3:a3:e0:19:9f:8e:
         e4:8b:34:ce:10:b4:dc:45:71:42:a2:b3:45:f4:41:7e:a2:d1:
         56:60:0a:ea:a6:66:f8:89:6c:46:2a:4a:54:8c:e5:a0:41:dd:
         4d:81:62:46:c8:b7:99:10:13:d5:89:a7:0a:e5:86:31:e4:d8:
         08:00:ed:c8:d3:6f:4c:b1:11:94:44:86:7d:c5:b4:70:0d:1a:
         27:6a:7b:d1:2b:f5:fe:80:9c:4c:73:a2:90:26:21:da:35:82:
         f2:37:8d:35:8c:ce:e7:db:3e:55:0c:24:7e:a7:e3:ca:4d:c2:
         3e:3b:64:37:c2:1c:3e:91:22:3b:64:fb:08:8e:5a:70:d0:d4:
         0c:fe:db:a3:f5:94:a6:e8:6f:7d:f9:53:04:ea:3b:8c:94:43:
         ba:0e:6d:1a:5f:9c:43:c4:e4:d9:57:63:b3:c9:b3:be:d2:b8:
         ad:1c:82:a0:b0:74:38:e6:b3:9f:b3:d9:95:43:0f:73:f9:9d:
         7c:8f:c6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----