Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.cer
File:                     2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.cer (raw, json)
Hash identifier:          3DbghM+j3I9FAjfwjdlIjKSpMubLex8kiywGrJmLYeg=
Subject key identifier:   15:6A:0C:DF:F9:DD:AF:A3:ED:3F:C7:FA:1F:B9:E8:AF:C0:79:E6:2A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584379F8554870CCF8F7FD0B5680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 08 Oct 2023 00:45:22 +0000
Certificate not after:    Sat 10 Jan 2026 01:45:22 +0000
Subordinate resources:    AS: 932
                          AS: 6134
                          AS: 54467

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:79:f8:55:48:70:cc:f8:f7:fd:0b:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct  8 00:45:22 2023 GMT
            Not After : Jan 10 01:45:22 2026 GMT
        Subject: CN=2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:23:90:be:20:27:9f:5c:12:bc:69:39:96:
                    84:1a:51:dc:99:b7:f9:42:3d:e5:56:56:c3:6b:88:
                    a1:9d:5c:53:cc:0c:e6:26:8a:46:fd:3e:23:17:b8:
                    57:d9:13:6e:d1:40:ed:6f:00:f6:18:6a:78:97:d1:
                    ce:29:57:96:89:83:70:c9:0f:f6:02:e4:f7:60:e5:
                    0a:e7:65:cf:7a:4a:13:35:b0:0e:3d:53:65:8a:b3:
                    fe:d2:7e:05:84:43:bf:4c:fb:2e:10:c2:cf:6b:c9:
                    e4:96:6a:63:72:89:0a:6b:8c:75:3b:02:75:63:50:
                    cf:c7:b4:41:4a:70:f8:18:3c:67:e2:ff:43:74:76:
                    3b:c3:59:b1:44:e0:e0:04:e8:10:df:80:c7:b6:03:
                    73:72:00:da:8b:59:cf:d1:b2:eb:f6:84:84:66:e2:
                    8a:7c:83:ea:ee:25:18:4a:46:c2:85:75:c6:d0:1f:
                    37:28:e6:5c:b6:ba:42:e1:3b:1f:b4:84:a4:5d:a9:
                    12:07:45:cd:25:3b:88:7e:0f:44:9b:ae:4b:43:62:
                    15:f4:2c:be:2e:5e:a1:4b:2b:be:66:67:63:07:26:
                    a9:df:ba:5e:8b:eb:d9:71:5c:00:f7:91:33:c0:58:
                    62:58:75:49:4d:a7:db:77:74:58:51:6a:6a:69:a9:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:6A:0C:DF:F9:DD:AF:A3:ED:3F:C7:FA:1F:B9:E8:AF:C0:79:E6:2A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc/2bce1dbe-f73a-46ed-8b76-b2fd51ecafbc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  932
                  6134
                  54467

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:58:fa:b0:d3:ea:ce:f0:db:41:19:57:42:34:6c:98:f0:10:
         02:bc:4c:9e:9e:cb:85:b2:da:0a:9e:56:34:07:91:4b:d2:18:
         8b:6a:5c:52:c2:1d:a5:f9:ed:10:40:0c:eb:4f:58:ef:de:42:
         f3:07:ac:57:f9:70:54:3c:37:8e:7d:cd:b3:6e:a9:16:6b:db:
         81:f7:9c:6d:11:24:13:18:a0:50:01:22:f0:89:15:7a:13:ca:
         96:67:9d:4d:66:61:29:57:a3:0c:79:c9:17:b7:a9:74:70:2f:
         cb:54:37:a6:19:57:2d:d5:83:8e:ef:ab:62:5c:54:97:b2:8d:
         ec:4e:33:75:a1:73:92:32:f4:d6:40:75:7d:b4:1b:07:c0:09:
         50:c8:49:c9:75:4b:94:fe:d9:a8:81:f2:c9:db:da:82:6e:78:
         84:c1:3c:8c:6c:0d:00:13:ce:10:6f:a3:c0:fd:33:21:ff:ab:
         26:a1:a7:f6:d0:e3:90:3c:fd:d9:96:77:ae:e9:ba:81:87:aa:
         32:33:84:7b:f2:b3:95:d8:51:2b:dc:7d:32:b8:ce:64:3e:cd:
         23:b3:9b:9f:be:c6:8a:b4:9c:4c:08:9a:6d:8d:f8:f2:b6:15:
         91:ff:d1:c9:71:e6:cd:27:79:53:00:b5:9d:e3:86:a1:10:4c:
         d7:78:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----