Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
File:                     bc942f68-cb33-4a05-a727-3f93e610393e.cer (raw, json)
Hash identifier:          k7fLRtkf1vgyNiwclftQVTZ/t5VZSoiOmzO9o1xL2nQ=
Subject key identifier:   FC:BB:FA:44:DE:5C:A7:DA:73:E8:8F:76:11:9E:E5:DB:26:A6:B1:F5
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858449AD3D392A3A56F83C9BC2A30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Jan 2024 12:00:26 +0000
Certificate not after:    Thu 02 Oct 2025 14:04:40 +0000
Subordinate resources:    AS: 54218
                          IP: 23.148.232.0/24
                          IP: 2602:fa9b::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:9a:d3:d3:92:a3:a5:6f:83:c9:bc:2a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jan 19 12:00:26 2024 GMT
            Not After : Oct  2 14:04:40 2025 GMT
        Subject: CN=bc942f68-cb33-4a05-a727-3f93e610393e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:3f:51:47:df:3b:4e:21:46:f4:3c:9d:88:
                    87:bb:86:ab:d7:47:e3:64:17:25:69:54:f9:cc:96:
                    f5:bc:ad:a9:c4:e6:f8:89:4c:c0:da:3c:6a:3a:75:
                    15:19:93:1d:31:55:00:f9:f5:d2:70:a9:28:6e:07:
                    ff:1b:31:d8:34:66:75:3b:ef:4a:62:89:71:72:bc:
                    15:91:dc:22:30:bf:13:39:7b:60:a0:02:06:74:cc:
                    70:22:8c:03:bd:83:19:5d:f2:83:9b:0b:ac:24:14:
                    b3:af:b2:96:87:d6:1c:1b:9d:0a:76:d7:17:5a:61:
                    32:5c:80:1d:d3:eb:59:b4:b6:8c:25:06:2f:f3:02:
                    93:8f:94:93:2b:55:15:e8:0d:64:9f:2d:20:2f:ce:
                    26:9f:63:9a:a7:5e:fd:bd:6d:da:37:37:c9:2b:c2:
                    8d:2e:8e:7b:b2:81:24:db:45:a1:ae:c8:61:7b:60:
                    dd:24:39:9b:e8:b3:88:dd:19:3f:d6:09:df:4d:f0:
                    dd:58:0b:7f:ee:12:58:09:55:1b:43:5e:fc:c2:28:
                    7b:39:3a:d3:5e:f8:6e:a5:e5:65:74:2c:fa:17:8f:
                    66:d8:8e:46:18:cc:b7:c8:a0:2e:b5:dc:f6:69:cf:
                    34:d7:a0:da:d2:d1:30:a1:5a:4e:d6:9e:19:02:35:
                    68:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BB:FA:44:DE:5C:A7:DA:73:E8:8F:76:11:9E:E5:DB:26:A6:B1:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.232.0/24
                IPv6:
                  2602:fa9b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54218

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1d:d4:3e:f2:ac:28:35:f3:b4:a9:74:81:c0:01:42:8c:de:
         60:e6:b0:f7:87:25:ec:a6:fb:42:d6:18:bf:71:99:e9:7e:38:
         c2:cc:32:88:f7:b0:b4:46:4b:7b:5f:b5:a2:28:e1:a8:e7:f8:
         86:3b:80:54:73:7f:11:8c:3a:51:87:5c:8d:f2:7c:8f:4d:bc:
         25:00:7d:4b:20:a9:73:22:cd:0f:4d:07:38:91:2a:97:ae:d0:
         5e:a5:31:70:3d:bd:61:6b:1e:53:28:05:fe:88:8e:35:97:d1:
         db:cf:18:5d:2f:18:34:48:1b:5b:0f:b4:27:b9:89:f0:ce:2e:
         4a:1f:08:0e:6a:6d:aa:d1:e3:a5:74:51:a4:16:e3:7b:60:19:
         b8:68:3b:ff:5e:55:05:98:7b:60:08:c0:f6:3d:b0:47:10:49:
         9d:eb:28:d4:85:1f:75:56:37:44:d8:75:2c:55:ee:cc:17:00:
         c3:f6:38:63:85:50:18:3d:d4:8d:81:fb:ad:62:ab:8c:d1:b9:
         de:7d:86:d7:3c:d3:ea:4a:59:0b:9d:cd:24:17:a5:87:21:a0:
         e9:a5:ac:b9:2e:b0:47:da:2e:25:73:39:3a:fc:88:45:73:46:
         f0:0f:e6:60:af:9e:67:51:14:5c:fa:c8:e8:f3:8c:29:47:4f:
         3a:ce:b3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----