Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5.cer
File:                     2d723287-d624-4178-939e-a7d8be3facc5.cer (raw, json)
Hash identifier:          xZnFeLhdli6Duo2Mvggy6vN2xhWCGB4E4Thl66rkATE=
Subject key identifier:   60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E4834C227D70DEBADD8BC400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 10 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 29796
                          IP: 199.27.212.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4c:22:7d:70:de:ba:dd:8b:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 10 19:06:39 2025 GMT
        Subject: CN=2d723287-d624-4178-939e-a7d8be3facc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:f2:91:3d:55:7d:26:d4:66:c2:3b:6c:96:
                    88:cc:5f:7d:35:af:d6:91:50:e2:e4:ac:0b:54:54:
                    a8:66:10:a2:23:59:66:32:be:d9:be:08:1c:c2:b2:
                    0c:fd:d5:d9:73:39:80:f2:5f:f8:f9:55:f0:d8:92:
                    6b:8c:aa:48:d5:fd:d4:5d:9c:c6:9a:30:c5:ac:28:
                    bb:58:69:de:6f:ec:5e:f3:67:fc:ac:61:db:8d:b8:
                    3b:55:50:7f:ba:e6:b7:c2:be:ba:16:7e:58:31:d2:
                    13:41:80:fe:af:dc:a3:f4:5e:f0:1f:9f:e2:1f:b2:
                    8c:d8:dc:69:63:79:a2:30:c4:aa:7a:ca:5a:36:d3:
                    20:85:05:3b:f5:0e:5f:9e:0f:b5:28:e7:7e:8c:42:
                    ec:58:6b:67:b1:31:0c:05:97:3d:e6:55:9a:8e:9d:
                    be:f0:40:d6:e2:65:70:a4:c2:ed:b7:e4:4a:aa:11:
                    8b:61:43:5f:d9:d0:1b:d8:12:9c:e9:50:a5:3f:e7:
                    3e:9c:db:39:b4:15:90:22:a8:f2:67:e1:03:55:66:
                    2a:94:91:4e:0e:a1:11:b9:15:19:d2:1e:c4:99:92:
                    f2:3b:6a:a0:c9:20:54:86:f9:c6:69:73:c0:a8:4d:
                    28:be:da:55:e5:0c:5b:10:dc:55:e0:5e:b8:30:5e:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FE:55:AA:98:5F:DF:A9:77:3B:FB:81:3F:53:9E:60:0A:A5:A5:D5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d723287-d624-4178-939e-a7d8be3facc5/2d723287-d624-4178-939e-a7d8be3facc5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.212.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  29796

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:bd:69:b8:85:e6:d0:a9:a0:25:f8:6b:48:60:0c:36:4a:de:
         3e:b9:57:11:54:16:57:74:f3:97:b5:b7:2b:ca:b4:0e:1b:72:
         69:d8:2a:61:63:4a:7a:30:3d:2d:e1:49:3c:4a:57:3a:95:b0:
         0e:a9:73:cd:ea:26:c2:26:b9:c4:f7:6f:bc:48:8a:65:fd:e7:
         5d:63:b7:2b:7f:c5:21:b1:02:0e:05:9c:ff:67:9f:72:27:09:
         6a:0a:a0:11:18:21:fa:ab:31:d7:e3:9c:4e:23:ed:5e:15:81:
         dd:fe:f2:45:5a:3d:97:78:d9:6d:08:f3:10:6f:99:85:c0:51:
         e1:4c:47:29:c0:1a:c9:20:c9:f9:80:5c:7f:b7:5c:89:30:16:
         1c:c6:92:6c:77:b5:74:29:5e:27:52:de:15:3e:cb:97:49:72:
         43:3e:70:b7:47:16:ca:58:a5:fa:52:6b:ee:8e:51:bb:d9:a2:
         86:9c:3f:dd:98:d4:c3:cd:95:43:c6:36:c2:62:9b:99:0f:31:
         89:67:56:34:57:dc:85:e1:e0:f2:be:e5:96:16:e8:49:41:89:
         d5:4c:07:cb:93:f6:a6:69:a2:5d:68:77:28:38:fc:c9:1c:20:
         84:d8:99:88:74:7c:f1:c5:23:4e:dd:12:b3:c4:ce:a8:6e:b5:
         c5:f8:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----