Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer
File:                     99b49bb6-2782-4a82-829c-d4b94eb646f1.cer (raw, json)
Hash identifier:          ASonwH+ME96sfh6Omt1nJHYp097VgVnYvFygQ5CcsnE=
Subject key identifier:   D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285842104CB3CFA4F4A04407752DE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 May 2023 11:32:44 +0000
Certificate not after:    Tue 02 Sep 2025 11:32:44 +0000
Subordinate resources:    IP: 23.154.120.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:10:4c:b3:cf:a4:f4:a0:44:07:75:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 31 11:32:44 2023 GMT
            Not After : Sep  2 11:32:44 2025 GMT
        Subject: CN=99b49bb6-2782-4a82-829c-d4b94eb646f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:48:2d:d9:9c:07:ca:58:fd:8a:c2:1b:02:3f:
                    7e:3e:df:9d:c9:86:f1:df:20:c8:92:2b:6f:3a:23:
                    bd:b1:33:37:13:7d:33:06:23:eb:c8:d6:6a:7c:ae:
                    1f:0e:d8:4e:26:d7:99:be:e9:8c:ea:3f:86:d9:8f:
                    ae:4a:34:1b:ff:a2:b2:53:b4:ac:88:38:2c:3b:66:
                    87:97:b1:d1:0d:7c:05:4f:38:11:14:9d:27:19:79:
                    46:c8:e9:e5:10:7d:cb:9d:c6:95:33:36:8a:7f:18:
                    dd:ce:52:b0:6f:42:3b:79:ca:b4:f4:c0:0e:d1:0d:
                    96:e1:87:5f:ec:e4:df:4c:be:ee:55:02:b8:6d:bf:
                    c2:f9:67:28:e0:3d:1d:0a:ea:10:cb:09:d6:ce:a8:
                    00:05:55:8d:73:58:a5:93:9b:40:9e:1e:d3:04:8b:
                    ec:34:64:34:4f:72:56:e6:f0:24:64:6f:41:6a:e8:
                    32:be:61:15:90:ae:57:31:9f:97:eb:03:b1:b1:08:
                    97:72:70:d2:7c:38:e6:83:94:b5:b1:1b:3c:11:c2:
                    6a:24:b9:6d:55:6d:c6:9d:15:47:7e:48:03:17:20:
                    e4:a8:72:b0:f3:a8:6c:67:e7:37:2a:c9:6d:3f:70:
                    91:d6:9d:12:d8:4d:e9:36:eb:d7:ea:26:87:78:b1:
                    8e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:6c:0f:c0:fd:f4:7c:63:33:d7:68:0e:a7:bc:9e:5f:26:62:
         26:03:e0:55:dd:99:47:c8:47:36:03:66:3c:2e:75:e8:b2:cd:
         10:03:87:04:0b:74:c4:e9:e1:db:3d:b0:18:c2:57:73:14:4f:
         63:7b:f9:68:cf:7e:26:a6:fb:a2:85:5e:14:9e:00:dd:41:7b:
         09:05:b2:f3:ad:ab:ca:bd:85:14:5b:91:21:bb:81:1f:31:ee:
         d2:4c:c9:f9:68:9f:f8:ed:f5:0c:a2:98:5a:7c:61:99:41:17:
         67:97:4e:8e:05:eb:5e:24:9f:38:94:8d:e3:0e:d7:c8:17:de:
         08:0e:f3:81:1d:5d:90:3e:79:9e:08:09:42:55:92:b0:59:77:
         3b:58:5c:64:6a:12:48:ae:b1:82:95:b6:48:20:c7:d7:7f:ed:
         83:3f:fc:3e:35:2f:15:99:ef:a3:6e:34:ce:4f:14:b0:cf:31:
         05:33:d6:39:68:35:72:35:2d:3e:d8:62:7a:ce:d2:35:bb:29:
         5c:a7:26:86:83:81:8a:98:ac:39:67:d4:81:a1:12:7b:75:c1:
         16:91:e7:27:ee:51:a5:22:a5:17:4b:5d:46:4b:dc:10:90:56:
         8f:d4:d6:65:ac:fe:ca:7b:7c:c1:8b:02:3c:fb:6e:5f:56:0d:
         79:3b:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----