Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112.cer
File:                     1fb5932e-f862-443b-a719-26a612c2f112.cer (raw, json)
Hash identifier:          xU4bAQyN06R4EnQiywzIPrSwTv6utKMwg6FKnnhHLBc=
Subject key identifier:   F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841E4834DDAB24848B7BE24C400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sat 21 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 17326
                          IP: 2602:fd2a::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4d:da:b2:48:48:b7:be:24:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 21 19:06:39 2025 GMT
        Subject: CN=1fb5932e-f862-443b-a719-26a612c2f112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ea:eb:78:5e:8f:ab:2d:92:50:1b:d7:b0:3c:
                    cd:eb:30:6b:25:de:27:f0:95:21:47:5f:61:83:61:
                    a6:37:34:fb:08:c9:70:62:ae:d2:24:9b:32:44:70:
                    15:1b:82:bc:dc:92:4f:bb:54:4b:aa:13:9e:4b:b0:
                    ec:c2:d4:e5:b5:93:c3:bd:71:7c:f1:af:6f:69:32:
                    2b:9c:e0:7f:c4:4d:10:64:ad:00:ae:a0:47:2c:0d:
                    6f:7d:99:44:28:46:bd:f6:ab:52:dc:f4:ae:5b:d8:
                    16:cb:de:68:72:da:97:82:3f:e2:02:03:38:3e:44:
                    53:99:a8:b0:8c:38:38:9a:48:7e:f9:fc:c8:08:18:
                    7d:af:1b:7e:1c:58:3e:05:51:02:9c:74:9f:bd:e3:
                    83:5a:9c:ec:12:fe:a0:aa:dd:d8:2b:73:28:a4:72:
                    1d:b7:e7:06:43:77:33:14:83:c4:02:1c:e5:67:58:
                    aa:f0:a6:3c:6f:1d:3d:9b:6b:cd:f4:96:41:8b:bf:
                    40:6f:40:64:b5:2f:a4:3e:be:6b:49:55:d6:b2:4b:
                    67:51:bf:14:a7:a6:1b:bc:f2:b3:07:56:e2:0d:13:
                    47:2c:a9:58:19:2f:94:5d:92:a5:e6:b0:d0:12:82:
                    ac:5e:d6:35:ee:69:ed:03:b7:09:61:fb:91:31:00:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AB:0F:90:6F:99:E6:9A:92:D2:B6:31:82:2C:59:81:14:79:AC:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fb5932e-f862-443b-a719-26a612c2f112/1fb5932e-f862-443b-a719-26a612c2f112.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd2a::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17326

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d9:83:13:76:44:21:95:0f:50:36:fc:dc:2d:1d:db:d9:57:
         a0:3b:89:f6:98:c7:16:1e:0d:ee:3f:8d:2e:b1:6c:28:d4:b5:
         4e:c8:f5:1b:4e:b3:cb:82:31:ec:12:9c:f6:68:c6:99:fd:30:
         ea:3a:51:9c:22:90:40:63:59:e4:58:d6:77:ef:78:97:a7:ec:
         13:46:a9:ec:a4:9e:7d:66:28:6c:c0:e8:41:a6:05:19:2e:ed:
         c5:1d:a1:6f:4a:7a:22:8a:77:8e:e8:b4:52:77:7b:d3:4c:fa:
         91:4c:1a:ac:e6:fa:f3:97:93:6b:e6:4c:28:89:b5:88:0c:fc:
         3a:8b:0f:15:ed:27:ab:21:ff:72:a3:10:c6:39:ff:ab:fe:62:
         5f:97:9b:73:e2:12:20:f3:d6:23:65:3a:fa:fe:49:49:89:a7:
         ce:c2:97:dc:f8:b5:e1:90:6a:30:60:47:73:e8:36:b9:31:6d:
         20:58:b6:41:50:79:8a:82:38:e5:79:ed:55:ba:08:0e:49:71:
         97:78:94:a6:24:5b:b3:a7:60:0a:f0:e0:93:28:15:ca:fc:2e:
         88:06:4b:c9:c8:e6:82:eb:1a:91:ab:68:c5:38:a2:df:72:64:
         8b:18:22:90:4e:ea:63:9b:6e:d8:b0:18:e8:12:43:53:91:c5:
         da:50:2d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----