Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb.cer
File:                     97916c1f-c888-441b-ba14-786bf9f69cfb.cer (raw, json)
Hash identifier:          1fptoJIUpk/qqFxIsmsbnxoVIybhW/kL5+dGhn62nno=
Subject key identifier:   E8:AC:7A:7B:F7:3D:66:E7:D8:0F:8F:FD:34:04:0D:D3:F4:33:DC:07
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285841E48352483A27BDA2A5920700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/97916c1f-c888-441b-ba14-786bf9f69cfb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 22 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 394279
                          IP: 216.73.187.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:52:48:3a:27:bd:a2:a5:92:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 22 19:06:39 2025 GMT
        Subject: CN=97916c1f-c888-441b-ba14-786bf9f69cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:0b:70:7b:d6:bc:cf:de:6a:68:ea:ae:52:
                    c2:dc:bc:53:e6:42:4d:1e:c0:d1:d4:a7:fa:3a:4f:
                    b8:9f:ae:df:e8:91:59:ec:11:07:18:88:02:7c:de:
                    c8:fb:a7:03:1a:0e:02:a8:e6:b2:df:71:c3:6a:13:
                    bf:e3:e2:df:82:ea:a3:6d:1e:3e:00:ab:a2:43:db:
                    d0:35:7d:31:5d:aa:88:2e:2e:ad:ad:0c:2c:0e:8a:
                    8a:a4:23:5f:35:00:16:96:c4:b4:36:f3:c7:f9:90:
                    d8:63:d6:06:e1:a4:1c:03:9d:fa:3e:c6:fb:07:28:
                    ec:11:7d:e0:a4:50:31:ad:d7:28:66:88:e4:ad:c7:
                    10:b1:8d:bf:15:41:d2:a4:97:2f:93:3f:52:07:ac:
                    e9:e0:80:6d:58:b0:75:20:a0:f6:09:83:e7:56:8d:
                    62:4b:53:05:d2:68:76:89:e5:52:99:5e:6e:84:84:
                    d5:a1:32:3c:d1:48:cf:eb:e0:7b:4a:58:13:ff:e4:
                    81:da:b6:87:b7:6c:fc:51:f3:55:76:0c:aa:bb:7c:
                    a4:10:d3:18:30:0c:91:c5:7f:61:9a:a9:73:c2:78:
                    84:62:63:2a:f4:56:8a:0f:36:e2:6c:65:25:4c:90:
                    52:93:87:94:48:51:89:69:a2:2a:87:83:73:78:9d:
                    73:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AC:7A:7B:F7:3D:66:E7:D8:0F:8F:FD:34:04:0D:D3:F4:33:DC:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/97916c1f-c888-441b-ba14-786bf9f69cfb/97916c1f-c888-441b-ba14-786bf9f69cfb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.187.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394279

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2f:00:d5:96:e1:47:3d:53:e8:f3:a8:05:8c:9f:f7:65:88:
         a4:04:e7:a7:8b:3e:a2:99:7f:4d:c5:96:f2:82:a6:8e:2c:63:
         99:22:47:9e:8e:32:c5:7a:fd:ad:0e:62:77:18:95:eb:e0:cd:
         30:a1:50:e9:7e:bd:7b:2a:25:5c:48:53:3f:0b:73:60:61:35:
         be:c8:73:2e:29:c5:88:9f:76:52:35:20:21:30:f6:88:d3:73:
         ff:c8:88:a1:c9:a8:1c:fe:71:a8:78:a7:43:57:55:5d:93:2b:
         4b:f8:92:be:4f:8c:e0:7e:fd:e2:90:53:5a:e8:a3:f8:48:e3:
         06:39:69:ce:b9:4b:5d:8d:49:e1:2d:9b:fe:d0:08:41:0b:62:
         ce:bd:b6:98:3c:d6:89:c6:46:29:95:d2:30:37:dc:e5:82:3f:
         e2:62:b3:93:df:83:2a:5b:67:dc:e0:25:df:c9:7d:b6:32:b1:
         5d:37:85:48:f4:3a:e0:46:54:31:21:38:47:29:fb:bf:40:e1:
         1a:52:9d:f7:00:11:f3:d5:76:fb:c0:71:63:38:8d:c7:31:f2:
         49:0c:9b:7b:dc:12:98:98:e5:fc:a2:3a:88:a6:6e:34:fc:98:
         8c:a0:cf:eb:b9:20:89:63:f7:22:3c:a0:d7:3a:e8:61:d5:61:
         99:17:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----