Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61.cer
File:                     9ac7679f-d727-44b3-9b13-6e689c3eff61.cer (raw, json)
Hash identifier:          1G3KwPsvhlQR64aIoqC/4ZmuOYyYpfX3Sd0ZKWT1btw=
Subject key identifier:   DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584206AB4E8DBBAD5F8DE40AC484
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 28 May 2023 00:45:16 +0000
Certificate not after:    Sat 30 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 399385
                          IP: 205.137.249.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:06:ab:4e:8d:bb:ad:5f:8d:e4:0a:c4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 28 00:45:16 2023 GMT
            Not After : Aug 30 00:45:16 2025 GMT
        Subject: CN=9ac7679f-d727-44b3-9b13-6e689c3eff61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ca:b4:06:a9:ac:99:73:a8:66:fe:ee:2f:1e:
                    69:e0:a2:e0:c9:a5:04:35:b2:9f:69:ad:c6:ee:97:
                    4e:a1:ec:65:48:ac:25:5b:bf:b2:dd:05:6d:6f:8f:
                    35:65:e0:63:43:4d:dc:16:1b:a0:20:10:6d:d0:4f:
                    93:6e:62:06:ab:78:a9:49:c2:09:3f:ba:9e:3b:ba:
                    2e:c1:34:c0:29:e3:db:eb:0c:8c:39:4d:1f:c2:17:
                    a1:9f:ea:4e:2b:40:01:26:36:2a:ed:25:37:74:b7:
                    34:44:ff:4c:ba:f0:6b:e0:9f:e6:c2:36:6c:fc:1f:
                    46:70:e8:c7:47:b1:8e:24:d1:02:d9:72:6e:a0:27:
                    5d:a8:5a:d9:16:92:a6:b8:b7:63:64:22:6d:b6:47:
                    04:78:70:94:2c:d8:99:33:38:d9:5f:61:ed:f3:19:
                    aa:79:63:e5:33:3c:e2:d1:23:01:04:e8:27:7a:a4:
                    52:e3:b5:07:d8:f0:8f:cd:1b:da:b1:da:5b:7b:f9:
                    36:47:9e:8d:24:5a:e6:d5:dc:f6:cf:7c:7e:69:6f:
                    2c:bc:b9:ee:d9:8d:83:e1:b7:a6:da:d5:dd:3b:90:
                    6e:f9:48:ef:ae:93:0d:9d:cd:42:f9:83:49:ff:d5:
                    b7:9f:af:4c:df:89:d4:9c:45:84:62:2d:0b:52:32:
                    c9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0E:3A:0B:5D:E5:64:DB:67:5C:6B:12:6A:02:C5:BB:63:D7:41:60
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9ac7679f-d727-44b3-9b13-6e689c3eff61/9ac7679f-d727-44b3-9b13-6e689c3eff61.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.137.249.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399385

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a2:55:ef:20:7b:86:a2:f8:cd:7b:9e:61:ab:c2:60:c3:cd:
         e2:c3:05:cf:b7:0b:e4:6c:85:45:0e:6b:99:8b:35:33:0e:c6:
         94:08:44:5d:11:e1:ac:c0:7f:4c:93:89:96:a7:9a:f7:ab:cf:
         50:6e:4b:2b:63:fe:4e:08:91:96:bf:02:31:de:d2:16:73:3e:
         c4:34:8d:04:8f:3a:b7:26:5d:c7:22:45:3e:bf:e3:17:50:12:
         76:c1:cb:27:04:10:f3:86:69:70:d1:92:fc:9e:74:26:68:9e:
         7e:5d:2d:5d:8a:c9:c1:cf:84:de:86:63:93:59:5f:2b:08:df:
         f5:34:8a:b5:7b:a7:d9:04:95:00:5b:e6:96:4a:76:6e:81:e9:
         f2:3e:3e:92:45:38:cf:20:4d:2e:b9:6b:d0:55:51:bf:2b:77:
         f3:d2:65:8d:ca:39:34:77:24:5e:51:ea:aa:da:fe:bf:55:2a:
         0c:76:c7:a0:e1:23:b8:41:d1:c4:82:fe:13:85:29:1f:9f:57:
         4a:51:4f:e2:1a:fd:21:3a:f6:70:3d:3b:79:63:d0:aa:5e:e8:
         32:19:2a:9c:6e:1c:db:a8:80:1a:36:8f:eb:e4:41:dd:59:b2:
         35:48:3b:0d:e3:84:3d:5c:d3:1a:77:f9:7e:a0:c7:8e:a9:4b:
         0a:0a:ba:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----