Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0.cer
File:                     2d0d7549-19b6-40f9-862f-dc6857e17fc0.cer (raw, json)
Hash identifier:          4QZ+B32LL3J+mZpcxlopxtSjBXIt1wenwFCGtakEsoo=
Subject key identifier:   3C:A5:E0:57:50:0E:ED:BC:B4:DC:02:45:2C:72:E8:81:08:E4:90:4C
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285844FE232EA882284A432DD73300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/2d0d7549-19b6-40f9-862f-dc6857e17fc0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 24 Feb 2024 01:45:20 +0000
Certificate not after:    Fri 29 May 2026 00:45:20 +0000
Subordinate resources:    AS: 53546
                          IP: 144.86.176.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:23:2e:a8:82:28:4a:43:2d:d7:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Feb 24 01:45:20 2024 GMT
            Not After : May 29 00:45:20 2026 GMT
        Subject: CN=2d0d7549-19b6-40f9-862f-dc6857e17fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7a:bc:83:b0:1f:5c:61:d1:f9:9d:58:c9:cf:
                    5a:50:fe:14:ab:6f:70:c6:16:27:60:5f:e9:bd:2e:
                    46:d1:02:31:67:9d:5b:97:72:78:e5:82:8b:cd:98:
                    72:f7:c7:55:f9:09:97:fb:14:9b:be:a8:85:d8:98:
                    fe:28:4b:83:ab:e2:f0:b2:a0:c4:3a:f5:3d:9c:bc:
                    75:72:37:9d:51:3a:28:61:10:43:55:ee:f1:cf:65:
                    e8:f3:b9:ce:cf:e3:07:75:09:ec:4d:41:82:fc:a0:
                    6d:f1:8c:e5:c7:4d:b5:db:da:27:0a:7e:57:98:52:
                    28:fa:a9:fe:68:03:3d:d6:a7:14:49:7a:02:ce:0a:
                    da:51:3a:25:88:6c:75:9c:b3:5b:82:e4:75:a8:6f:
                    71:d2:fa:59:ca:2a:45:af:9a:7d:41:85:82:93:94:
                    c6:b4:87:a8:d3:93:aa:2c:35:fe:8f:3b:20:64:35:
                    7c:e8:9d:77:b8:9d:46:0e:ff:ea:2e:72:2f:4c:e8:
                    a7:0d:23:29:6f:c7:a6:38:81:9b:57:49:f1:0c:5d:
                    74:9e:d7:92:e0:86:8b:b1:04:28:b6:0f:ce:0c:66:
                    0c:83:82:17:b0:41:55:51:a4:0c:39:6f:ec:48:1b:
                    76:f1:c0:f1:6d:15:91:06:45:81:f9:38:b6:ba:49:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A5:E0:57:50:0E:ED:BC:B4:DC:02:45:2C:72:E8:81:08:E4:90:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d0d7549-19b6-40f9-862f-dc6857e17fc0/2d0d7549-19b6-40f9-862f-dc6857e17fc0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.176.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53546

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:99:5e:c8:56:a0:ec:29:cf:31:69:60:13:14:cd:05:99:cf:
         90:60:70:e0:7d:cb:77:5b:24:4f:d4:e7:50:e0:28:78:2a:84:
         1f:4d:65:c4:d5:6c:1b:a2:fc:c4:8c:c4:f1:1f:3b:59:67:03:
         d6:85:15:a9:4c:16:13:6c:b9:95:64:00:83:c0:fa:b9:1c:a5:
         55:bc:5f:47:96:00:8a:5e:db:f4:4d:49:dd:ab:0c:a0:a7:ff:
         bc:3a:16:1f:79:f0:3d:90:5f:1e:bc:37:6c:b7:32:7f:6a:52:
         39:29:b9:5a:dc:1e:ca:10:ca:12:17:db:d6:22:ec:d3:59:b0:
         fe:0e:91:1f:ce:f3:d0:1d:2c:d6:fe:b0:ec:03:00:35:69:8c:
         95:f3:8e:03:75:94:66:ca:14:ec:79:8b:f5:5f:7f:45:dc:73:
         ef:a8:20:ed:d7:16:99:e8:04:2e:23:72:77:52:18:3b:1c:f6:
         dd:b0:39:85:2b:2e:46:00:44:cc:f0:cd:93:b5:04:bf:c1:2a:
         e1:ee:fc:71:19:24:8b:d9:a2:bf:51:c8:3e:4f:ce:8b:a8:cd:
         a1:10:89:51:ca:33:95:75:f6:81:07:fc:02:b6:64:f4:85:bb:
         aa:e8:ae:0b:c3:0e:1e:ed:64:cb:cc:6e:2b:58:0d:99:d1:e2:
         1c:a2:84:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----