Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb2b9a9d-859f-4c2b-92d7-77b15c837143.cer
File:                     eb2b9a9d-859f-4c2b-92d7-77b15c837143.cer (raw, json)
Hash identifier:          xsdE0r0fwW7OHL2WLaWqOJ3dN0pwm+sANgQ5KNu5St0=
Subject key identifier:   E8:0B:F7:5B:9E:A0:F8:27:3E:49:3D:B0:DF:5B:69:89:51:ED:74:BA
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584398ADCC112B7C08DA302931A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb2b9a9d-859f-4c2b-92d7-77b15c837143/eb2b9a9d-859f-4c2b-92d7-77b15c837143.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb2b9a9d-859f-4c2b-92d7-77b15c837143/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Oct 2023 00:45:15 +0000
Certificate not after:    Wed 21 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 394264
                          IP: 192.229.21.0/24
                          IP: 2620:16:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:98:ad:cc:11:2b:7c:08:da:30:29:31:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 19 00:45:15 2023 GMT
            Not After : Jan 21 01:45:15 2026 GMT
        Subject: CN=eb2b9a9d-859f-4c2b-92d7-77b15c837143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:3b:3a:23:75:70:db:65:88:bb:88:50:09:
                    23:41:a4:ee:a8:71:e7:a9:f1:d1:37:f5:62:b7:3e:
                    e7:b5:d5:f8:5d:b4:e5:48:73:6b:d0:d5:da:29:29:
                    16:cc:40:08:f0:9f:e3:b5:2d:f3:f3:30:07:e3:f7:
                    5e:fe:42:de:7c:55:21:b5:a6:3a:a2:d7:01:0f:64:
                    52:5b:8f:3e:76:f9:83:51:f0:d6:ec:d6:5e:1f:64:
                    64:fc:0c:ef:d4:88:cd:17:46:b1:a4:a3:00:d8:40:
                    fc:c1:66:8f:64:d8:5b:f8:1a:fc:2e:fc:7d:da:9b:
                    8d:6c:e7:6a:98:a4:58:93:2e:b2:8f:21:b9:20:5a:
                    c1:0b:be:f5:34:fa:10:01:0b:5e:92:61:d4:9f:92:
                    72:c8:1d:e3:04:5b:6e:f3:f4:d6:c2:3c:4b:18:0f:
                    61:f2:66:39:c7:5d:65:af:c6:52:57:05:38:1d:8d:
                    2c:c1:ee:19:bf:b6:47:8e:86:6d:51:bd:77:4f:dc:
                    c5:f0:e6:b5:8b:dd:7e:df:aa:15:8a:50:58:4b:a5:
                    23:40:db:65:5b:67:bc:c7:7a:49:16:b1:ae:b2:84:
                    31:a9:60:ba:73:75:47:28:77:51:23:11:a6:93:d0:
                    54:e4:1f:00:9b:29:0d:bf:ad:d2:b6:b5:30:e2:4e:
                    41:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0B:F7:5B:9E:A0:F8:27:3E:49:3D:B0:DF:5B:69:89:51:ED:74:BA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb2b9a9d-859f-4c2b-92d7-77b15c837143/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/eb2b9a9d-859f-4c2b-92d7-77b15c837143/eb2b9a9d-859f-4c2b-92d7-77b15c837143.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.229.21.0/24
                IPv6:
                  2620:16:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394264

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d2:a8:2f:90:ca:b4:34:16:ce:12:9c:dc:83:f9:f3:d9:f0:
         a3:d0:c1:a9:e2:ad:15:5b:9b:8e:89:ad:3e:4d:5f:6f:f8:29:
         e3:b9:d6:0d:7c:96:22:51:95:57:de:52:30:d0:51:ac:ae:43:
         4f:31:31:0b:c3:2d:9e:8c:52:d2:11:39:51:58:e5:5c:c1:0e:
         17:e5:fd:00:da:5a:b1:3c:e6:4d:fe:b7:e3:a2:99:aa:21:d9:
         de:bf:58:96:a9:ac:a1:79:3e:cf:c5:0d:38:5e:a2:8f:83:6d:
         b1:ef:73:0c:1e:60:b7:d6:37:e0:57:a1:58:f0:5a:7f:e7:68:
         1c:71:f7:82:a0:66:61:e7:66:e5:ca:01:99:d3:a5:99:2f:44:
         b5:79:6f:60:89:f2:f1:6a:70:9a:0e:72:58:2d:cc:23:08:ce:
         86:3f:be:fd:ac:78:33:f0:54:82:4a:78:0b:d1:1e:65:8b:e6:
         37:76:5b:be:23:fb:54:a0:f6:f8:06:10:9c:aa:9d:df:45:be:
         df:d3:10:03:4d:dd:e6:e1:b3:5d:df:9e:6b:dd:15:51:de:37:
         d7:c2:3b:51:74:1c:72:c5:80:ad:05:cf:c8:e6:b9:12:39:68:
         3f:c0:47:a2:67:4e:09:3a:da:cc:5c:b6:c2:54:2f:01:d9:2c:
         da:52:0a:10
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----