Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer
File:                     511ed25c-3ac7-4d86-9290-879e3813322e.cer (raw, json)
Hash identifier:          LP6fEIgQxz/eSywvqoUPIGATOzw6XBNHan9giNA4RaI=
Subject key identifier:   BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841EFE5E281B59E28C05CBD1EF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 May 2023 20:59:43 +0000
Certificate not after:    Thu 21 Aug 2025 20:59:43 +0000
Subordinate resources:    AS: 13325
                          IP: 2620:167::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ef:e5:e2:81:b5:9e:28:c0:5c:bd:1e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 19 20:59:43 2023 GMT
            Not After : Aug 21 20:59:43 2025 GMT
        Subject: CN=511ed25c-3ac7-4d86-9290-879e3813322e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:4b:39:f5:09:61:c4:83:3a:bd:2a:36:c0:
                    97:8e:55:1c:bf:7f:40:7e:b0:05:51:53:a2:e4:d7:
                    21:b1:68:dc:91:aa:28:6f:84:de:b6:21:75:8a:43:
                    9c:09:f5:ac:65:e2:d2:8a:1f:17:a9:8f:84:14:bc:
                    b0:f0:27:24:7d:5d:ed:f3:2f:0d:45:6a:19:c6:a9:
                    7c:d3:96:a9:1a:23:1c:b9:17:56:81:c6:0e:ec:a6:
                    3e:11:7e:a1:6c:70:db:d4:26:fd:e7:58:84:ab:63:
                    b6:9c:56:c3:1e:e1:ec:99:3f:f7:79:58:f3:bc:07:
                    0d:66:96:f1:6d:54:48:13:63:93:4c:3f:df:84:68:
                    c1:ce:bd:9e:8f:6e:9f:a6:df:e9:74:45:3c:e1:1c:
                    a9:b2:aa:71:ac:ce:c5:00:e8:c2:09:c8:76:e9:9a:
                    8f:86:33:16:56:58:3a:3c:e2:43:4f:3f:4d:0c:5e:
                    cc:27:ef:2f:35:c3:65:27:45:ec:61:2c:3f:c3:d5:
                    ff:50:7a:78:aa:92:db:22:6b:dd:2f:4d:96:ae:01:
                    7f:ac:0e:c8:56:b7:7c:fc:3f:fa:9d:55:69:17:a9:
                    7f:f6:6c:89:23:cf:aa:5d:94:a2:b5:21:dc:7f:1d:
                    3e:c1:16:00:38:5b:04:1e:96:e9:8c:4f:4b:ed:29:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:167::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13325

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:36:69:d2:f8:61:0f:56:f8:30:be:4c:09:6f:61:cb:0c:1a:
         f8:80:81:e6:24:01:11:c2:22:5f:b5:fe:02:6e:46:3f:b0:0f:
         ce:d6:bc:3a:50:a5:cb:19:2a:04:6a:83:75:a8:e5:a0:1a:8f:
         a3:d1:24:cc:ec:ea:8a:ac:70:87:5b:ce:b8:d5:1a:b0:32:2f:
         ca:73:f4:01:36:8c:eb:c7:03:e1:7c:4f:c8:c5:2f:59:bb:92:
         de:a4:47:05:c9:68:cf:b8:c2:f6:54:c7:84:28:62:13:d2:a9:
         91:4d:e0:25:1a:f0:b8:aa:f5:73:74:67:5b:7b:b3:7b:a8:19:
         6f:8c:b6:08:65:9c:d5:11:57:4e:e3:dc:45:1a:1c:d8:c7:64:
         2c:5f:75:21:fa:93:e8:00:f1:1d:32:e9:d8:23:67:00:34:99:
         76:d6:ba:86:68:30:3b:b5:80:b4:3b:e8:04:a9:1e:83:ce:07:
         e2:0b:41:a9:28:95:c3:cc:34:85:9b:41:07:d5:0e:ad:f2:ae:
         a5:7a:c0:f9:de:1c:90:67:22:80:b0:70:c9:f5:1c:81:bb:51:
         e3:18:fa:bc:f5:57:3b:a4:ed:70:bf:8f:7c:59:76:c1:a6:81:
         ff:79:1f:16:3b:d3:e2:43:f9:32:a2:ac:30:f5:aa:75:b1:99:
         51:0d:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----