Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890.cer
File:                     8cce0cef-88a2-481a-91e3-c005827c7890.cer (raw, json)
Hash identifier:          ZKylgiTyPwdAFO2hnA51hnksPjNvqH71Zxe5zY9pbqs=
Subject key identifier:   4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285844DCA2F8BE04F32A20C95DFD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Feb 2024 01:45:20 +0000
Certificate not after:    Sun 17 May 2026 00:45:20 +0000
Subordinate resources:    AS: 18935
                          IP: 23.149.216.0/24
                          IP: 2602:fa96::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:dc:a2:f8:be:04:f3:2a:20:c9:5d:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 12 01:45:20 2024 GMT
            Not After : May 17 00:45:20 2026 GMT
        Subject: CN=8cce0cef-88a2-481a-91e3-c005827c7890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f6:75:c7:61:95:53:06:0a:6c:9b:7a:16:9e:
                    64:a7:6e:43:f7:57:7e:17:a1:3b:a2:87:5d:a6:dd:
                    39:de:49:a9:3d:cf:1f:c6:70:2f:82:50:f2:7a:e5:
                    4c:72:6a:18:cf:8e:2c:38:c8:61:6c:e5:0e:44:87:
                    54:ca:22:5d:e9:cf:77:42:a4:4b:b2:98:4b:05:19:
                    1f:db:bc:ba:29:52:f9:a4:f6:17:53:fd:b0:16:33:
                    36:af:ae:f1:da:18:34:83:63:ac:72:27:11:28:69:
                    59:dd:49:77:d8:f8:f8:a1:f3:53:53:5a:89:00:89:
                    62:4b:e6:19:0d:3b:6b:72:09:ff:9a:aa:2b:af:fe:
                    f5:cd:40:ea:d8:c6:2d:76:8a:57:36:c9:e2:9c:55:
                    c3:b1:cd:a0:86:48:52:bd:5c:b4:20:88:06:46:af:
                    83:ad:7d:e3:6b:cc:0e:ef:46:d6:70:ab:47:25:e8:
                    65:89:13:67:7b:00:18:0d:b6:a8:7a:2e:74:7b:ba:
                    1e:25:3d:25:0c:bc:48:93:3d:25:92:ab:d8:fc:99:
                    88:4c:17:b5:2e:60:65:5e:5c:2b:e2:93:9f:b4:40:
                    f0:0f:4d:f9:a5:a9:9c:40:97:39:85:4d:3a:92:34:
                    20:89:80:5f:e3:72:db:34:80:e9:a4:43:19:fe:fe:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:53:07:3E:C4:1A:A8:D0:2E:E5:D2:14:65:0B:A5:AA:16:2B:CE:B9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cce0cef-88a2-481a-91e3-c005827c7890/8cce0cef-88a2-481a-91e3-c005827c7890.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.216.0/24
                IPv6:
                  2602:fa96::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18935

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:bb:66:c6:00:9f:c8:fd:45:4f:08:48:2a:bc:27:fc:31:5e:
         6c:53:a4:52:79:98:fd:06:45:47:4a:7b:a7:f9:83:10:bc:06:
         03:d6:af:5c:a0:b5:e5:d5:c9:51:35:3c:6a:f9:46:e7:37:36:
         ff:60:cd:47:f2:c1:ce:8f:65:09:65:68:7e:e3:3a:a6:c4:bd:
         f3:16:cb:42:07:c0:4e:30:9e:30:0f:ff:14:e8:07:73:01:a9:
         23:6e:40:1c:84:82:a4:0e:eb:c3:fc:bc:82:fe:51:c5:9e:86:
         c7:6d:ac:34:7b:99:3b:a5:29:52:d1:36:47:1c:ec:f2:89:58:
         b0:c7:da:c1:a3:4b:b5:2d:99:5b:d2:4f:d9:f4:06:82:19:a4:
         d2:96:35:ce:65:d0:24:72:50:09:ca:65:f0:0b:46:be:c6:f0:
         c8:58:cb:dc:c6:be:b4:c4:c4:cb:4b:fb:a5:55:22:37:da:6d:
         5a:d9:55:6e:2e:83:0a:26:a6:6f:e0:78:ca:7e:53:1c:f6:1d:
         02:8d:29:00:b8:8e:0c:46:7e:2e:51:ef:54:46:7f:c1:7f:80:
         2e:da:5b:80:df:5e:71:27:27:e1:9a:0c:51:b8:b9:07:be:9b:
         8e:aa:22:02:a1:d9:61:22:05:9e:b3:0e:f9:72:1c:7e:39:3b:
         6d:5c:93:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----