Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3433304a-051c-4bc3-82ed-2cb81d0fdd53.cer
File:                     3433304a-051c-4bc3-82ed-2cb81d0fdd53.cer (raw, json)
Hash identifier:          ycegAJ4iYVFDmhHDKkqnLUu1VQ02ASsDP4D2ebhppaU=
Subject key identifier:   17:FD:F6:8E:AA:59:56:49:8E:DA:AE:7B:49:72:11:49:E2:1E:AB:85
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858452D7B07B2B257D0106D706000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3433304a-051c-4bc3-82ed-2cb81d0fdd53/3433304a-051c-4bc3-82ed-2cb81d0fdd53.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3433304a-051c-4bc3-82ed-2cb81d0fdd53/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 12 Mar 2024 00:45:20 +0000
Certificate not after:    Mon 15 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 397103
                          IP: 23.167.96.0/24
                          IP: 2605:13c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:7b:07:b2:b2:57:d0:10:6d:70:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Mar 12 00:45:20 2024 GMT
            Not After : Jun 15 00:45:20 2026 GMT
        Subject: CN=3433304a-051c-4bc3-82ed-2cb81d0fdd53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dc:82:af:c5:30:0d:03:96:b1:7b:74:ec:14:
                    66:1f:39:c6:b8:70:ff:53:2d:ac:bf:58:25:c9:4f:
                    b7:0f:86:92:74:3c:aa:7a:0b:2f:1b:0e:12:5c:bd:
                    08:d0:eb:58:07:da:7c:a8:6c:86:71:9b:45:83:53:
                    f5:cd:2e:0d:d3:34:b4:71:26:ab:03:0d:b0:53:1d:
                    4f:53:ed:79:3f:77:7e:38:84:c4:fd:9e:e2:07:27:
                    24:58:05:f5:8b:88:eb:f5:83:7c:fa:73:6e:c0:5b:
                    22:e8:8f:65:ce:b2:85:c3:1e:29:55:44:e2:63:b5:
                    f5:37:71:d3:73:07:63:8b:6b:fa:10:33:f7:d0:aa:
                    08:4e:32:9d:d3:62:b7:fc:4c:e9:72:18:f6:14:b9:
                    a1:d6:a1:e0:ed:c2:56:60:74:80:1e:60:de:5d:03:
                    6e:8c:00:8c:bf:d7:d0:d2:14:19:c6:5d:5f:81:7b:
                    75:58:eb:bf:b7:42:58:c3:c8:95:07:7e:cf:98:82:
                    74:a7:f1:a7:c3:a4:c5:64:97:dc:08:01:e3:5d:33:
                    4a:58:de:8b:6b:64:f4:e6:95:04:32:ef:28:46:14:
                    61:ff:a1:4a:f4:73:c1:08:79:ca:b5:4e:94:cf:f3:
                    21:64:0e:f6:99:91:51:ac:42:32:39:bf:33:6d:00:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FD:F6:8E:AA:59:56:49:8E:DA:AE:7B:49:72:11:49:E2:1E:AB:85
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3433304a-051c-4bc3-82ed-2cb81d0fdd53/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3433304a-051c-4bc3-82ed-2cb81d0fdd53/3433304a-051c-4bc3-82ed-2cb81d0fdd53.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.96.0/24
                IPv6:
                  2605:13c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397103

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:32:f3:82:6c:b3:55:d1:4a:fe:9d:82:86:99:55:f6:04:d2:
         b3:8f:f0:35:87:73:50:4e:2a:b8:21:9f:ce:7a:32:59:c0:fe:
         1e:e2:16:eb:19:b2:cd:09:23:37:e2:68:c4:f2:0c:54:ad:d1:
         e3:34:6c:83:60:64:5d:88:f8:e9:38:77:ee:9d:62:41:76:43:
         a5:0b:44:5f:d5:b6:62:ba:12:e8:91:2b:26:b6:2c:09:fb:56:
         59:7e:a8:52:a7:1b:45:0c:df:5a:23:9d:7f:85:9e:0a:31:c6:
         d7:b0:f3:de:59:a4:f7:d7:77:f6:af:cf:54:b3:58:1d:25:6e:
         3b:4a:2f:c3:76:fa:31:e9:16:a6:d5:32:64:d6:55:76:fd:34:
         17:5d:50:50:34:79:95:86:f7:64:02:d9:70:4e:54:8f:27:2b:
         fb:d5:a0:ef:27:9d:2a:1f:a7:4c:aa:17:67:68:20:2c:17:ae:
         63:29:59:bb:7b:65:50:27:55:c4:6a:4f:16:34:87:af:ba:b2:
         8f:09:b2:17:40:cf:a0:87:24:2c:6c:73:21:2d:b2:0e:2c:75:
         d9:bf:81:8f:2d:c2:b3:2f:f3:7d:1b:73:b6:8c:e7:2b:c9:5d:
         0b:f2:90:a8:b3:5f:64:80:cb:a1:a4:51:ce:2d:08:7a:d1:89:
         ec:23:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----