Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer
File:                     5d74f046-ba55-4b61-bccd-7e10e81264d1.cer (raw, json)
Hash identifier:          uO+iZi9u6xOUwnJaymZQJy5uu5WDjwzEzv8bHSaJeqw=
Subject key identifier:   F5:AB:72:16:18:00:24:6C:81:77:5F:5F:68:E5:21:2A:70:97:9F:60
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841ED8B24A2F3978317E6887A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 May 2023 00:45:15 +0000
Certificate not after:    Thu 21 Aug 2025 00:45:15 +0000
Subordinate resources:    AS: 18516
                          IP: 69.5.96.0/20
                          IP: 69.58.128.0/20
                          IP: 216.134.160.0/20
                          IP: 2604:f280::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ed:8b:24:a2:f3:97:83:17:e6:88:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 19 00:45:15 2023 GMT
            Not After : Aug 21 00:45:15 2025 GMT
        Subject: CN=5d74f046-ba55-4b61-bccd-7e10e81264d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c9:e2:48:aa:55:3f:39:1e:72:a8:9c:34:36:
                    e7:dc:29:50:47:9e:f6:8b:b0:68:67:86:58:98:c5:
                    9f:b6:28:ba:05:8c:52:ed:63:52:57:ed:58:17:1d:
                    5a:7c:16:31:11:c6:55:cd:90:78:0d:5d:03:da:53:
                    a5:96:2d:79:dc:7c:c8:a1:e8:f6:ab:56:88:e5:71:
                    ec:91:ae:09:bf:d5:b1:06:b5:c5:c6:df:01:6c:99:
                    9c:f4:9d:23:8c:09:5d:3f:75:8f:dd:d0:55:17:42:
                    a0:0b:df:4e:c3:69:1c:95:29:03:ee:50:10:48:3e:
                    f5:bc:e2:5f:b5:ff:41:b2:67:23:2b:0b:e0:31:fc:
                    43:d5:d6:a2:21:9a:e5:2d:8d:e7:c5:1f:cc:a0:e8:
                    8a:ed:82:0c:8c:24:27:ac:d0:9f:2e:eb:38:eb:94:
                    5b:1f:1c:05:c2:b2:46:af:6a:a9:ee:18:0a:4c:54:
                    de:3e:bf:b7:76:dd:28:b6:e8:0e:f2:92:ad:80:4c:
                    4c:da:c9:4c:d5:6f:2d:a6:b6:11:38:9c:9a:38:38:
                    ae:ed:74:78:40:1b:46:eb:6d:4e:b4:b9:fa:5b:ed:
                    37:eb:e5:51:b9:f8:42:9d:c4:70:0f:63:24:1f:1e:
                    1d:bd:b4:82:dc:86:ed:57:77:5d:81:ae:3d:b4:98:
                    ed:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AB:72:16:18:00:24:6C:81:77:5F:5F:68:E5:21:2A:70:97:9F:60
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.5.96.0/20
                  69.58.128.0/20
                  216.134.160.0/20
                IPv6:
                  2604:f280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18516

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:14:35:13:ee:a7:99:cd:b0:94:01:73:5c:83:18:3c:c7:54:
         85:8f:37:1b:a9:1c:64:e5:87:ef:aa:68:bc:7d:5c:7b:a8:f3:
         08:55:b5:ee:88:bd:c9:68:cf:5c:1c:eb:c5:f4:7d:03:8f:57:
         21:ad:48:6c:ff:41:13:e8:ec:82:4b:b9:34:51:10:d7:99:ea:
         4d:15:a5:69:73:96:6d:83:4b:ce:8a:61:ec:c0:fe:82:70:e0:
         c4:aa:e0:e1:ff:99:50:de:33:07:54:3e:a4:05:5c:00:c8:dc:
         99:a2:3f:1e:fe:5b:0a:77:7c:bd:b3:aa:61:34:9d:5e:b1:f8:
         5f:ee:a0:61:b5:0c:22:93:f7:a7:52:2a:b3:46:7f:eb:0f:3d:
         b9:7f:8b:b3:e2:ea:ea:4c:1e:d7:0c:6f:28:bb:30:d3:e2:ec:
         db:56:75:39:62:da:ce:4d:a7:82:a2:6d:32:1d:12:9f:d1:69:
         09:e2:c7:1a:ab:9a:99:b6:70:0c:46:98:0e:3c:2a:6c:5d:97:
         52:55:9b:67:30:f4:20:97:15:d3:57:8d:32:9d:8a:9f:73:98:
         78:03:f9:15:dc:fc:33:60:2c:d7:e4:f4:d2:b2:35:cb:94:43:
         6e:43:2c:0b:76:98:69:9c:87:57:47:ac:99:2a:89:40:90:8f:
         3f:4e:7e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----