Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer
File:                     2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer (raw, json)
Hash identifier:          9XwKscswA9jonPgZQMJMN1kbeWYPsOEE9zG0xp0jjEQ=
Subject key identifier:   5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858425C32EAC859B48DDD61059300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 27 Jun 2023 16:02:13 +0000
Certificate not after:    Mon 29 Sep 2025 16:02:13 +0000
Subordinate resources:    AS: 394947
                          IP: 172.83.86.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:5c:32:ea:c8:59:b4:8d:dd:61:05:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jun 27 16:02:13 2023 GMT
            Not After : Sep 29 16:02:13 2025 GMT
        Subject: CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:29:f5:5b:87:83:93:82:d0:9a:23:2a:59:
                    65:23:54:a2:30:4b:5b:76:5c:85:03:96:7f:20:d2:
                    45:fa:32:a3:34:39:27:20:f9:b8:37:17:a6:6d:6c:
                    b6:2e:2a:ce:ee:1a:43:27:ca:b2:bb:d7:9d:26:7f:
                    44:bb:d1:22:53:c9:89:0e:33:0e:dc:47:58:9c:68:
                    25:dd:21:70:2a:f0:4e:45:6e:80:1a:6f:f7:79:15:
                    2e:91:83:c7:52:17:cb:e5:74:8e:18:8e:75:5d:50:
                    59:88:ca:da:b5:29:c6:ac:79:0a:8b:a1:bd:07:80:
                    8a:60:e0:25:9d:92:8b:51:84:52:db:24:a5:de:62:
                    4e:3e:b1:87:03:69:e9:77:8d:0d:78:2f:64:bb:d0:
                    26:d0:5a:38:15:1d:e3:51:2c:43:38:9e:53:09:b3:
                    4c:63:c4:91:c3:ec:4f:be:0d:46:67:6f:44:95:06:
                    61:56:21:0f:cd:cc:29:e9:82:7e:57:53:0f:6b:80:
                    f2:e3:8d:14:a1:96:19:2d:fd:71:73:02:ed:68:02:
                    95:5b:e6:a8:5b:7e:74:53:ec:1d:1c:fe:a5:55:60:
                    48:f6:2a:07:09:10:73:fd:7a:46:8b:38:a8:a4:c3:
                    66:da:34:00:2a:10:8a:33:b3:6f:61:96:c1:65:6a:
                    85:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.86.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394947

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0c:6e:ba:02:fd:73:1c:5d:df:cd:5f:c0:7c:4f:76:4d:64:
         79:6e:d0:eb:78:5d:ce:7b:54:33:81:b1:08:3f:4c:14:2e:eb:
         89:82:f5:e0:ec:0b:1f:99:bf:f5:ee:c0:b9:26:12:31:72:bb:
         da:f6:f4:a1:09:e5:39:93:1a:90:01:5f:51:6e:26:ee:53:15:
         9f:ed:f9:be:bf:93:db:d1:04:d9:83:19:89:11:25:80:2a:91:
         26:40:02:00:a1:a2:93:59:e0:9f:47:43:14:9b:49:27:85:97:
         b8:d0:9b:e2:a8:a7:d7:b4:6b:ae:97:a1:8a:fa:cd:cd:dc:e7:
         3b:f9:62:5f:56:6b:32:b4:ed:96:94:c8:a4:96:49:db:14:7c:
         59:eb:ec:7e:04:d0:f4:35:82:e0:6d:cc:66:0e:64:65:37:48:
         fb:ac:58:27:bd:8e:43:bc:da:10:35:cf:a0:4c:27:c4:42:9a:
         c3:a1:8c:74:31:4f:b4:ae:2d:43:c8:2c:68:a4:39:14:06:59:
         c9:53:20:17:2a:ca:b0:17:c8:50:87:83:4f:59:8d:f5:e2:cf:
         af:36:60:25:f9:8b:f2:df:f8:e5:5d:75:eb:5d:9d:f9:5a:0f:
         cf:14:be:58:88:fc:02:b6:39:9e:df:a8:36:be:43:cc:fa:f5:
         0d:0e:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----