Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer
File:                     15046f6d-bd92-43fe-aa6b-1c0465361a1b.cer (raw, json)
Hash identifier:          WbNVea9c24F13jIH4n9PsYW6jgfuM4jJ+634Bjcslzw=
Subject key identifier:   BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285845BBDBE8D6B56F48796D06C040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 02 May 2024 00:45:20 +0000
Certificate not after:    Wed 05 Aug 2026 00:45:20 +0000
Subordinate resources:    IP: 23.143.136.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bb:db:e8:d6:b5:6f:48:79:6d:06:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May  2 00:45:20 2024 GMT
            Not After : Aug  5 00:45:20 2026 GMT
        Subject: CN=15046f6d-bd92-43fe-aa6b-1c0465361a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4e:9c:a9:58:7a:38:82:13:66:ed:53:bf:2f:
                    9a:4a:c3:06:b6:84:95:4a:ab:a9:8b:d9:d7:88:c7:
                    c6:fc:76:01:07:71:af:38:02:23:12:65:60:70:47:
                    61:41:90:6a:aa:73:6c:4b:09:c7:b9:a7:73:9b:25:
                    d7:f3:ee:e3:ea:e2:9c:82:a8:db:0b:00:7f:0b:d0:
                    4b:13:a6:25:95:3f:33:e5:21:44:2b:ee:5a:e7:ac:
                    1e:a9:a9:3b:f5:59:a3:c0:de:72:66:19:50:95:6a:
                    d2:be:4f:2c:83:85:5f:38:8d:8c:32:9a:e2:db:8c:
                    ec:45:2e:93:b0:c9:b0:f4:2f:91:4a:14:84:b1:a5:
                    ff:df:7d:2d:1c:4c:3b:c2:ea:e4:eb:e1:ac:be:5a:
                    8c:32:0a:09:bb:2e:f8:58:31:2c:bc:ab:e4:c4:a5:
                    34:d7:20:9a:e8:71:8a:fa:43:61:22:4e:39:e9:5d:
                    ce:f2:a3:bc:ec:12:61:6e:90:41:51:86:9d:4c:c0:
                    73:96:8e:a7:73:49:cc:b8:62:51:29:7c:a3:d3:b1:
                    00:a7:87:89:fe:a2:bf:7c:39:b7:10:dd:98:f5:7c:
                    8f:85:08:10:e3:d4:34:d0:69:75:62:4f:bd:0e:9f:
                    e8:59:30:21:69:cf:59:d3:74:40:f5:ec:ae:90:05:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4E:95:80:80:06:81:21:F2:A1:B4:A6:80:48:D7:75:5B:E7:95:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/15046f6d-bd92-43fe-aa6b-1c0465361a1b/15046f6d-bd92-43fe-aa6b-1c0465361a1b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:73:bc:b3:3b:a3:39:0f:db:16:2a:55:67:2a:51:5d:2a:
         1b:8d:62:9c:58:81:5b:c7:f5:77:ff:93:24:11:fa:0a:d1:db:
         d8:29:d3:6f:eb:61:68:d1:6f:8f:d5:5b:da:51:0b:d4:e0:94:
         9d:09:89:c0:19:4a:9c:25:50:6f:3c:b1:33:50:6f:fd:a7:93:
         09:fe:14:3e:b6:1e:f1:7f:b8:74:4f:3f:ca:9f:d7:d4:88:22:
         67:55:be:72:ff:65:30:b2:da:2a:9e:72:1b:c6:42:5c:e6:8f:
         c4:0f:de:87:26:62:ea:07:25:6a:29:c2:6e:3a:1b:f1:20:7c:
         53:cf:57:d0:ff:9d:07:01:6e:8d:82:66:f3:8d:26:8a:f1:67:
         a8:c2:d6:76:5c:54:db:a5:d9:06:16:1e:fc:38:54:74:cd:bc:
         a9:3b:e4:37:18:84:38:f0:96:cf:9b:7f:5a:18:bc:73:b4:18:
         72:54:65:10:81:33:c4:76:23:e3:19:fd:8e:e6:ff:ee:ed:b5:
         ac:f7:bc:af:2a:c9:43:81:b4:33:83:c6:66:fa:4f:d1:5a:b4:
         da:59:f9:d9:86:06:78:27:b5:0f:d7:dd:d6:0e:d4:81:e3:0f:
         8c:ff:2f:07:b3:9a:56:93:fb:5d:ec:42:76:da:6d:75:94:81:
         22:1d:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----