Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046.cer
File:                     b68f393e-4233-4428-ad05-67691bf3e046.cer (raw, json)
Hash identifier:          Upwcc3AX7eTJsB3Fko12QS33zYWTvv99CmejcXMUK80=
Subject key identifier:   C2:67:C5:4C:37:AF:89:48:5B:07:7A:50:7A:80:2C:11:DD:D7:FF:2B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858420B1F46889C3D7E093A536580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/b68f393e-4233-4428-ad05-67691bf3e046.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 May 2023 15:02:10 +0000
Certificate not after:    Sun 31 Aug 2025 15:02:10 +0000
Subordinate resources:    IP: 207.251.64.0/18
                          IP: 2001:458::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0b:1f:46:88:9c:3d:7e:09:3a:53:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 29 15:02:10 2023 GMT
            Not After : Aug 31 15:02:10 2025 GMT
        Subject: CN=b68f393e-4233-4428-ad05-67691bf3e046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:84:76:21:8f:3c:82:74:42:ac:48:b8:b7:e1:
                    e3:ea:18:7e:43:ca:33:bc:92:ce:e0:c8:a2:69:37:
                    d1:15:8f:06:d0:49:0c:41:89:69:45:99:c4:00:7a:
                    87:82:83:67:d4:d8:13:b5:4a:1e:15:fb:73:39:8d:
                    a8:68:13:5c:7c:b1:2f:f1:af:45:82:4b:cd:ec:f8:
                    6d:e7:1c:07:bf:8f:75:50:c1:18:74:b8:7a:07:26:
                    22:ff:c3:43:81:86:ac:cf:f5:e7:ac:90:f1:6e:bc:
                    69:72:40:a9:9d:03:09:55:21:21:6c:b1:51:35:b7:
                    44:b8:a9:d1:a3:69:98:b0:c6:de:8d:88:65:dc:a1:
                    ef:e9:29:d0:de:81:3e:1b:1b:68:11:2a:1d:5f:17:
                    6d:54:be:3c:1d:76:3d:f6:67:3b:be:26:28:1f:1f:
                    73:4b:ad:68:0c:f2:7f:b4:bf:9c:e9:9d:f3:f1:bb:
                    33:74:70:b1:d6:5e:9f:b4:01:85:7c:6e:8a:a6:6d:
                    fb:9b:5c:27:ed:1c:00:59:3f:27:b9:0e:d2:fe:aa:
                    8f:ac:19:70:a8:49:ce:63:14:fd:68:26:cd:c1:82:
                    b6:f5:0b:18:43:cb:ac:71:cc:cd:5a:d1:b4:5d:63:
                    bb:7f:95:00:08:88:5c:76:bc:55:ac:7c:ec:6e:c1:
                    99:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:67:C5:4C:37:AF:89:48:5B:07:7A:50:7A:80:2C:11:DD:D7:FF:2B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b68f393e-4233-4428-ad05-67691bf3e046/b68f393e-4233-4428-ad05-67691bf3e046.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.64.0/18
                IPv6:
                  2001:458::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:10:94:d6:98:cc:ae:f9:b2:2c:61:68:e6:b4:1f:d7:3a:
         73:54:0c:45:b1:6d:b7:be:b3:03:fe:84:20:92:96:88:e4:35:
         87:9b:88:e8:eb:d6:91:5e:e9:91:08:ca:d9:27:1c:c1:39:82:
         42:8d:cd:fa:b2:01:e0:2a:aa:57:fa:5a:bd:57:5e:1f:f9:2a:
         3a:3f:cd:dc:e5:30:ee:76:6f:50:fc:80:42:06:2b:83:f4:bc:
         64:dd:83:e5:b0:3e:99:36:6d:6b:22:16:9d:4f:05:b6:04:3a:
         bd:5e:82:18:21:3e:ef:87:bf:06:ed:b7:e8:4f:af:dd:ad:09:
         cb:99:cf:a1:d8:3b:65:3d:c3:07:cf:5f:41:49:e7:b2:7f:a9:
         7f:c5:11:5a:45:b5:9c:3d:a3:2d:c5:d3:1d:80:71:c6:48:d0:
         7b:d6:6b:c3:e8:0a:e3:ce:bd:aa:24:20:bc:82:8a:a3:c4:f7:
         5a:4a:30:9d:08:3e:b1:4d:b1:9a:96:de:84:a2:5e:f6:34:87:
         43:25:94:9c:62:8b:67:c2:ce:a4:85:19:55:99:18:3f:da:d2:
         02:e8:18:97:03:da:6f:e9:49:66:0b:8a:01:c3:09:ae:88:8e:
         fe:2e:cd:85:6f:82:35:a4:70:33:7f:a2:f0:4a:98:28:8c:af:
         78:b4:ae:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----