Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be.cer
File:                     0db67e40-561b-4114-ad6b-0716593573be.cer (raw, json)
Hash identifier:          08y0w5sTFTsDHsoNcf5W1LHCoo9TqtCWsPGdIcTH7sE=
Subject key identifier:   35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841E483530C74EF2EC28CD3F4C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 27 Jul 2025 19:06:39 +0000
Subordinate resources:    IP: 128.254.152.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:53:0c:74:ef:2e:c2:8c:d3:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 27 19:06:39 2025 GMT
        Subject: CN=0db67e40-561b-4114-ad6b-0716593573be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:12:4d:41:09:f3:97:85:dc:c1:ae:60:59:34:
                    bb:5b:ef:e8:08:b1:1b:c6:45:04:73:15:c2:cb:3f:
                    99:c5:7a:7f:68:5c:c4:7b:c1:3c:3d:73:ce:08:1d:
                    30:85:6b:79:a3:03:17:ef:82:ce:23:75:a7:25:20:
                    12:42:2f:4b:2f:66:06:43:f3:0c:65:04:15:29:98:
                    ec:33:22:fc:50:bd:ab:60:6f:62:fc:a2:ef:55:b6:
                    e7:fc:2a:d7:b4:90:56:f3:91:d0:9f:2d:af:63:b6:
                    69:5f:81:d7:01:6c:a3:12:2c:4e:05:45:d0:07:d2:
                    25:98:72:08:2c:23:b0:e9:a5:a8:1d:28:66:b3:49:
                    41:04:16:0c:d7:31:79:ec:2e:49:a5:d4:97:45:cc:
                    05:f3:7c:38:5d:33:d0:c6:eb:d9:eb:72:f7:68:ef:
                    3e:d0:e6:f9:47:7e:5b:1d:af:a7:80:f7:8d:1a:8a:
                    b5:a9:06:cd:e0:1b:e4:09:b9:a2:d6:66:fc:0f:62:
                    41:ee:32:ec:b4:bc:e7:ba:56:a8:b9:d2:f3:01:91:
                    17:70:9c:d2:c5:07:42:5a:d2:5b:5d:a6:39:12:b6:
                    7a:5e:72:e6:32:ca:50:c9:8e:e0:8e:a6:3b:b1:6a:
                    b3:0a:8c:19:1f:dc:07:4a:1b:a3:da:86:19:2e:97:
                    90:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:65:CA:70:E2:A5:75:5C:79:3E:8E:FF:F1:1C:9E:2D:63:A8:47:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0db67e40-561b-4114-ad6b-0716593573be/0db67e40-561b-4114-ad6b-0716593573be.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e4:45:3e:f2:83:53:a9:5f:7a:ed:66:ff:74:6b:d4:46:31:
         1f:1d:40:b7:07:e3:59:b1:a7:32:cd:fb:68:9c:a2:ee:87:5b:
         38:ad:aa:22:c3:14:80:90:98:f2:3a:99:03:a6:56:7f:e5:e2:
         9a:f0:f4:eb:51:c4:93:18:07:00:53:5b:09:7e:89:af:b8:39:
         d3:07:73:fa:f1:b6:4d:38:de:07:4d:1f:05:f7:33:cf:0a:f7:
         0e:f6:b3:cb:22:e6:57:c7:38:28:e7:b7:8e:71:73:ff:d5:2a:
         42:94:c7:cc:fb:12:b4:b0:11:c4:8c:59:e4:94:16:75:dd:09:
         54:24:77:be:32:72:70:3f:25:51:1d:96:7c:1f:b3:5c:f1:b2:
         a9:08:ba:97:f5:45:3a:ed:54:75:60:7b:e5:e5:f2:bc:e7:46:
         b7:fb:f9:ab:d6:c5:93:aa:ae:5b:fd:d3:46:b8:bf:7a:2d:af:
         38:7f:ce:b0:46:b4:e1:19:1d:6a:ef:b9:60:0e:ef:c1:54:eb:
         d8:4e:4a:c1:83:3d:e0:3a:dd:01:f1:bd:16:4e:ae:89:c6:3c:
         41:04:59:85:d3:55:4e:cf:b5:a4:98:eb:6f:d6:c9:6f:72:7a:
         6b:5a:eb:19:e5:a4:ed:c8:0c:15:ea:86:25:0c:c2:ca:6e:6c:
         21:d9:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----