Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4.cer
File:                     8b56caea-2136-4342-baff-6f31268d4cc4.cer (raw, json)
Hash identifier:          ZJ+riBbAgkoTZ9pnhUT7gvJOQzBuffonTRP9fz93htI=
Subject key identifier:   5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285843A10DDA2168F36526E59AB460
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 22 Oct 2023 00:45:15 +0000
Certificate not after:    Sat 24 Jan 2026 01:45:15 +0000
Subordinate resources:    IP: 23.146.24.0/24
                          IP: 2602:faaf::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a1:0d:da:21:68:f3:65:26:e5:9a:b4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Oct 22 00:45:15 2023 GMT
            Not After : Jan 24 01:45:15 2026 GMT
        Subject: CN=8b56caea-2136-4342-baff-6f31268d4cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0b:d1:4d:5a:d2:d9:d1:ea:e6:2b:64:4c:8f:
                    80:9b:a6:6e:d6:b9:27:a7:3d:e0:d9:94:84:1c:ef:
                    5c:af:26:c8:6d:20:f8:28:c8:24:01:2e:a0:59:e5:
                    82:9c:61:ea:94:2b:e0:30:c6:9d:5d:a7:1f:84:ad:
                    65:4b:86:8e:37:c6:ec:62:ba:3f:91:86:8e:e8:6a:
                    ab:95:67:0d:f7:3c:34:57:2c:83:6d:80:19:80:5b:
                    fb:6e:2c:d6:8f:c8:93:1f:0e:80:15:3c:52:1d:9b:
                    21:d2:2b:d6:69:3e:68:8d:a7:b7:5a:27:17:ed:5e:
                    8e:f8:6a:14:25:2b:fa:68:78:97:d0:24:45:94:42:
                    f7:26:a0:94:50:f6:71:42:30:12:86:fa:71:dc:50:
                    55:84:36:41:6b:fb:c1:ac:a7:40:97:96:68:7b:7a:
                    cf:63:c5:ef:f1:87:ac:67:60:b6:15:4d:78:df:55:
                    70:60:31:ca:3f:25:ae:ae:8b:46:5c:94:7d:69:c3:
                    31:3b:20:1e:e1:dd:00:31:38:7f:52:5f:8b:f3:c3:
                    09:e4:5a:a1:33:e0:36:5c:81:1e:ce:84:92:fb:20:
                    ed:e1:f3:0b:af:c2:59:65:dc:54:15:a7:db:99:9c:
                    17:aa:ae:0c:fc:f8:fa:81:d5:f5:ce:12:da:aa:df:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:94:69:3D:08:CE:48:82:15:E6:39:96:71:21:23:0D:90:A8:C3:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8b56caea-2136-4342-baff-6f31268d4cc4/8b56caea-2136-4342-baff-6f31268d4cc4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.24.0/24
                IPv6:
                  2602:faaf::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:06:76:b3:4d:70:9e:15:22:a2:7f:1c:60:92:fd:e8:07:10:
         8d:a3:fa:9d:20:f7:93:58:d5:c0:87:75:6e:9c:22:10:03:d0:
         e4:10:ce:83:29:76:1c:40:9b:70:9f:6f:61:0d:9e:0a:e5:43:
         29:ed:db:f9:ed:84:6d:b2:e6:7b:b2:35:e4:c8:40:43:17:58:
         e6:54:7c:63:dd:05:71:1a:c7:e2:5c:01:70:7e:aa:07:92:99:
         1b:8b:f0:87:d0:07:75:0c:26:18:87:b0:3c:84:ba:8e:b5:b2:
         65:34:f7:cc:df:43:85:cd:d9:b3:de:9e:44:0f:63:01:79:29:
         c8:4d:ca:9b:1d:8c:6b:05:e7:c6:c1:eb:77:47:23:e1:c7:42:
         5e:b9:fc:39:3c:ef:36:e9:95:88:1a:bd:22:d7:e7:d5:d3:6e:
         ee:50:0e:c2:fc:fe:61:51:eb:3c:b0:d0:a4:62:25:94:97:16:
         d4:53:16:e7:da:73:42:b7:1b:92:96:9e:24:8b:c6:27:56:5b:
         fe:d7:46:f3:ef:da:78:5f:39:58:dd:bf:1c:17:7f:7c:80:b0:
         3e:92:de:59:04:5e:27:fc:09:91:45:22:81:e4:ad:8e:49:88:
         54:fd:b8:c1:36:a4:c0:f5:21:d4:5c:75:4f:85:fb:95:17:61:
         27:55:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----