Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1943f3-39d6-44cb-a6fd-67152b745e91.cer
File:                     9e1943f3-39d6-44cb-a6fd-67152b745e91.cer (raw, json)
Hash identifier:          5KCRr4KuvIAajcCIr6lkSVmjwHS4t72x340Lc0GEQU4=
Subject key identifier:   CC:EC:3A:49:8A:77:47:E8:82:69:EC:5F:F0:22:6D:FF:6F:24:BA:C7
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841ECFCEC110F38B7EC2EC351E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1943f3-39d6-44cb-a6fd-67152b745e91/9e1943f3-39d6-44cb-a6fd-67152b745e91.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1943f3-39d6-44cb-a6fd-67152b745e91/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 May 2023 19:58:42 +0000
Certificate not after:    Wed 20 Aug 2025 19:58:42 +0000
Subordinate resources:    AS: 63392

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ec:fc:ec:11:0f:38:b7:ec:2e:c3:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 18 19:58:42 2023 GMT
            Not After : Aug 20 19:58:42 2025 GMT
        Subject: CN=9e1943f3-39d6-44cb-a6fd-67152b745e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3f:50:3b:66:68:5b:51:93:09:24:2b:e6:91:
                    f2:4a:60:2a:3c:b0:07:d5:f0:60:ae:2f:c3:92:2a:
                    4d:a9:84:3b:f6:ae:9c:f3:dd:cb:61:28:b5:81:f1:
                    1a:bb:b0:d8:9d:d2:29:7b:d3:af:22:8a:4c:c7:c8:
                    3c:35:25:f8:10:f7:a7:37:46:88:cb:c5:13:de:40:
                    4a:c9:49:1c:2d:71:5f:35:79:72:c5:b1:18:35:9e:
                    c2:ed:f8:3c:66:b4:df:ce:fa:6e:2a:4a:a9:ea:a4:
                    02:8e:b1:a5:75:7e:31:cf:32:9e:10:d8:42:d9:bb:
                    27:17:78:b9:cb:88:31:79:58:18:32:84:55:21:08:
                    5c:13:37:44:e2:49:85:0e:7c:13:ec:db:2a:35:df:
                    b0:f4:10:4b:d7:e1:b2:8d:f8:1a:aa:6e:af:0e:4d:
                    90:bb:37:48:fb:ae:c8:1a:c8:c4:0c:77:db:0f:cf:
                    03:84:2c:e5:36:3c:19:b7:5e:06:13:48:75:7d:bd:
                    d2:62:99:13:bc:f9:db:6d:fa:82:7f:d2:73:bd:4c:
                    51:83:fc:9c:30:00:be:d9:5c:47:61:d6:18:8e:81:
                    43:a7:cd:0b:08:df:a3:37:85:95:c7:0c:35:26:ae:
                    51:86:54:fc:9e:b8:77:07:60:49:ec:d7:52:3a:06:
                    df:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EC:3A:49:8A:77:47:E8:82:69:EC:5F:F0:22:6D:FF:6F:24:BA:C7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1943f3-39d6-44cb-a6fd-67152b745e91/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1943f3-39d6-44cb-a6fd-67152b745e91/9e1943f3-39d6-44cb-a6fd-67152b745e91.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63392

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:73:59:ca:26:c6:17:32:7f:4c:4c:55:8e:6a:6e:da:ca:a8:
         23:3d:58:5b:b2:ee:b8:92:95:56:12:3e:d3:25:d0:b7:80:ae:
         f2:4b:b4:d0:3b:6a:b1:63:6b:bc:23:6d:cf:ee:fd:90:0b:76:
         99:3e:70:5f:6e:3c:49:1e:71:4e:9d:fd:73:46:d2:91:47:87:
         80:c0:06:8a:70:04:9c:ae:25:91:3c:5c:9a:92:36:af:d4:b9:
         1a:5f:9f:15:22:54:c2:d8:ed:15:84:80:17:79:48:73:86:90:
         d0:36:b0:72:8e:58:3e:cb:5b:3f:34:85:31:63:4b:e0:f8:cf:
         5b:0b:30:5b:3f:1d:f7:e0:ef:a0:e2:af:38:09:cc:36:c0:54:
         c4:ea:fe:85:0a:a0:01:5b:f3:0d:ea:0e:39:1a:be:d5:19:df:
         48:27:36:01:de:93:a3:99:72:c9:35:56:7b:8f:06:f6:2d:f6:
         f6:07:7e:59:73:75:66:81:5f:c1:67:81:87:a1:47:82:ad:9a:
         d8:41:b9:ef:c0:4b:67:4b:42:e8:b4:34:b2:27:13:06:e2:3a:
         e9:07:bf:4b:a3:de:75:bb:3d:63:d2:79:cf:6f:23:4d:05:35:
         3f:57:b4:c1:51:ec:e4:b1:96:4a:18:12:2d:ec:59:d9:48:2a:
         ee:23:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----