Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6.cer
File:                     a38ff47f-825f-4455-b429-60f899d42ec6.cer (raw, json)
Hash identifier:          foehv8wHcPX7g9WrQKO/lkIkTPuZTnKHHTHT3Lgymwk=
Subject key identifier:   5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584202F212D7E6D2D07028B112F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 May 2023 16:44:38 +0000
Certificate not after:    Thu 28 Aug 2025 16:44:38 +0000
Subordinate resources:    AS: 399840
                          IP: 192.43.246.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:02:f2:12:d7:e6:d2:d0:70:28:b1:12:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 26 16:44:38 2023 GMT
            Not After : Aug 28 16:44:38 2025 GMT
        Subject: CN=a38ff47f-825f-4455-b429-60f899d42ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:62:5f:52:48:e4:f2:0c:79:4b:c1:90:41:
                    a2:b5:fb:23:a2:39:ad:c7:de:3b:9e:dc:02:a7:20:
                    4e:e8:de:61:03:62:eb:5e:e6:ce:46:e7:a7:2b:4e:
                    34:a5:5c:9c:1a:d3:3b:4d:5a:73:13:ec:53:eb:be:
                    28:9d:61:96:aa:4d:b9:5d:5d:75:7d:a9:70:5c:10:
                    cf:89:3a:6c:be:9f:07:1b:2e:4a:4c:02:00:12:87:
                    b2:4e:6d:2a:57:6f:90:b4:ef:98:dc:8d:7b:1c:c6:
                    84:6a:83:96:7f:ec:7e:48:e2:a3:ea:65:db:68:1d:
                    31:b4:f0:79:87:a2:ba:16:1b:eb:8a:c8:ad:08:91:
                    57:20:1f:89:90:78:55:17:7e:e0:ca:23:d4:6d:c6:
                    68:52:a8:a2:10:59:29:4a:f8:c5:0e:d2:c1:a1:50:
                    a2:c3:2a:ab:78:5d:00:5a:cc:87:b2:53:21:a1:d3:
                    73:39:42:85:32:16:a2:17:f4:8f:a2:0f:26:02:26:
                    3b:1f:19:df:6d:89:78:20:d6:60:de:cd:11:a0:b5:
                    ea:3a:80:6e:71:6c:24:e2:e1:73:af:f4:fa:ce:cc:
                    34:a9:52:12:8a:a8:42:35:56:94:65:e2:fd:30:26:
                    20:a3:b5:df:48:a6:77:49:be:f8:2d:25:2e:cd:a3:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3C:8F:D8:48:85:0A:56:14:A8:2E:65:44:59:C9:BD:A0:14:5B:66
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a38ff47f-825f-4455-b429-60f899d42ec6/a38ff47f-825f-4455-b429-60f899d42ec6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.246.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399840

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:52:6f:7b:20:26:c7:69:9f:38:57:3a:dc:a6:39:ae:a7:24:
         e8:76:df:70:9f:26:6b:75:d0:1e:1a:72:cb:1d:ce:23:29:cd:
         08:18:bb:e7:64:f5:7a:f6:dc:7f:01:fc:04:f8:f0:63:45:8d:
         2c:f1:03:2a:7b:6f:a8:ac:42:86:09:62:34:55:0b:54:75:15:
         ef:f9:08:6e:03:fc:57:02:57:e2:34:7d:da:68:0e:17:25:23:
         9c:57:88:d4:f7:1b:eb:08:e4:09:ae:f3:ea:fd:90:06:88:ca:
         d9:b9:ba:32:e9:2c:b9:99:41:43:b2:51:46:89:76:90:df:35:
         17:f8:6d:52:2c:bc:34:51:a3:cc:03:f4:c7:6a:08:ff:84:f5:
         22:32:11:0a:42:b7:5b:22:33:bc:52:e3:86:30:42:eb:0b:e4:
         30:cb:80:49:e2:fc:26:6f:b1:9d:8d:ae:1e:00:b9:5c:3e:de:
         1f:51:0b:10:60:69:0b:e0:8c:b6:8f:b8:84:83:85:21:43:a3:
         57:38:63:df:a5:28:56:d1:50:3f:e0:f0:e0:fb:49:fe:cf:10:
         af:87:50:64:ee:07:0f:7b:4f:88:42:ea:a2:07:d1:71:b8:24:
         1f:4a:aa:49:82:bb:da:c9:b6:1e:63:6e:48:0c:3b:1c:4e:c0:
         fb:10:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----