Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83a5e53e-dc50-4a1a-bb45-62fec63efea2.cer
File:                     83a5e53e-dc50-4a1a-bb45-62fec63efea2.cer (raw, json)
Hash identifier:          VnngqAR3O8PEcO+Q0E+r1pXkXKfP1uNnIaZSVdh5bjM=
Subject key identifier:   5B:BD:29:C9:E8:F1:53:55:CC:22:C1:83:08:8C:05:14:E9:0C:38:E5
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584500EDDCC672BFDC2940774DE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83a5e53e-dc50-4a1a-bb45-62fec63efea2/83a5e53e-dc50-4a1a-bb45-62fec63efea2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83a5e53e-dc50-4a1a-bb45-62fec63efea2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 25 Feb 2024 01:45:20 +0000
Certificate not after:    Sat 30 May 2026 00:45:20 +0000
Subordinate resources:    IP: 2620:d4::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:ed:dc:c6:72:bf:dc:29:40:77:4d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 25 01:45:20 2024 GMT
            Not After : May 30 00:45:20 2026 GMT
        Subject: CN=83a5e53e-dc50-4a1a-bb45-62fec63efea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:a1:41:c1:44:ab:1a:09:e5:b3:f1:80:d9:
                    f6:4d:25:71:f4:89:4e:00:67:9e:f9:3f:06:64:b5:
                    62:0f:73:29:3f:2e:a4:5b:1a:ef:82:54:98:74:88:
                    b5:03:27:19:fc:9b:84:47:b7:90:17:7b:95:a9:17:
                    7e:94:62:90:23:3e:91:06:2a:d8:2d:fa:d1:b8:7c:
                    f8:26:0c:14:08:55:6d:0f:a1:79:01:2b:3f:5f:20:
                    8f:d5:f4:2b:17:1e:bf:5e:e7:a5:12:34:fd:4e:4b:
                    a8:41:ab:9c:6b:46:45:ea:3e:4b:8a:ce:aa:62:b7:
                    3e:d9:68:da:5f:8b:7a:4a:f5:fb:de:3f:95:ef:48:
                    86:00:fd:7c:4c:fe:96:d4:32:55:58:02:6e:b5:92:
                    49:7e:3f:6a:8a:c5:80:90:2f:d4:8e:63:51:f6:b8:
                    55:78:fa:8a:c5:ef:0c:ee:e7:61:69:3f:84:0b:2a:
                    23:e7:d3:12:64:1e:57:f4:03:e2:15:68:0f:38:eb:
                    4a:17:ce:ba:13:b1:6f:be:a8:92:d9:63:0f:ad:90:
                    5d:46:15:a0:64:3e:13:dd:1c:61:b2:e1:17:25:6d:
                    a1:6a:bc:cb:90:2a:4d:a6:40:c7:3d:29:ce:df:f5:
                    b7:f0:68:fe:4c:74:4c:85:ca:11:0b:c0:03:da:6f:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BD:29:C9:E8:F1:53:55:CC:22:C1:83:08:8C:05:14:E9:0C:38:E5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83a5e53e-dc50-4a1a-bb45-62fec63efea2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83a5e53e-dc50-4a1a-bb45-62fec63efea2/83a5e53e-dc50-4a1a-bb45-62fec63efea2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c7:13:49:a6:1a:39:01:df:34:09:e2:c6:05:21:0c:4f:84:
         36:02:07:89:5b:04:7f:d6:16:de:12:d6:fd:30:df:9b:de:dc:
         62:66:f0:fa:33:5e:ce:f1:19:60:0f:2a:24:f5:2a:04:4c:3e:
         c8:71:fe:7f:f5:d9:e2:14:de:90:41:60:4a:cb:fc:b1:40:01:
         7d:af:0f:e0:5c:7d:44:c0:bb:7a:9b:e3:6a:cf:47:83:29:e9:
         43:cb:d9:62:75:1e:95:0d:fe:ab:cf:62:2c:52:ab:19:91:4f:
         3b:eb:87:fd:aa:25:2e:17:62:93:9f:96:9a:98:af:6a:8b:a6:
         a6:30:69:49:a4:ce:43:c9:b1:43:c1:2a:d6:2a:4e:fd:9c:9c:
         8d:6f:83:a1:b7:1e:67:72:64:8c:6d:6c:9e:b3:f7:82:c1:4a:
         b4:1f:22:bd:fe:9c:9a:96:2a:c4:3e:6c:1a:a9:94:16:8c:45:
         ac:cb:79:4a:b3:3a:c2:d1:35:9b:2f:09:ae:d5:9b:18:a0:be:
         83:7b:41:12:f9:c8:5d:bc:cc:aa:b3:21:32:3f:07:a9:6c:bf:
         21:47:ae:df:17:18:e2:22:dc:8e:b6:98:7b:3c:9b:f1:03:09:
         7c:58:dc:02:35:3d:e2:fc:61:5a:19:d1:85:3a:7f:0f:78:27:
         31:82:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----