Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer
File:                     c3cd4625-6034-4b3b-9d8b-5417ca97c839.cer (raw, json)
Hash identifier:          /jYfAnLcrTBVeirVF/nJtcWU8c6UGoAgLVQ+oFIM2eI=
Subject key identifier:   96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841E4834812C5D6EF4252E3AB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 12 May 2025 19:06:39 +0000
Subordinate resources:    AS: 397750
                          IP: 104.232.42.0/24
                          IP: 2602:fc78::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:48:12:c5:d6:ef:42:52:e3:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May 12 19:06:39 2025 GMT
        Subject: CN=c3cd4625-6034-4b3b-9d8b-5417ca97c839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:ca:d2:a6:2d:42:67:11:78:f0:a5:a0:e8:
                    4d:85:58:e5:6a:a1:4e:0e:3f:f4:e4:19:ea:4a:3d:
                    60:e1:60:b2:79:0c:ac:91:6a:d8:bd:22:96:e3:06:
                    a0:65:41:f7:1d:be:b7:fb:b8:cb:05:1d:4f:30:94:
                    61:4d:67:4f:23:04:4f:88:ef:ad:b3:61:9e:0f:20:
                    09:05:ad:9f:8c:53:b9:43:3d:f8:83:53:30:fe:a7:
                    0d:2f:6d:11:f4:21:ea:47:bf:43:11:d0:02:5a:f8:
                    bf:20:68:ad:3e:28:1a:59:04:ca:d0:dc:e1:25:cf:
                    d5:12:20:62:8c:e6:0b:ac:ca:16:66:d1:99:02:48:
                    9b:b1:0f:87:62:b6:9d:bc:8d:f5:4b:74:40:41:8b:
                    a4:45:ae:c4:78:24:cb:a1:0c:4d:ba:db:6e:47:eb:
                    b0:9f:7d:7a:e6:79:06:85:bf:13:96:50:e0:de:dc:
                    f1:57:40:2e:f9:d5:2f:31:b4:62:66:7a:54:dd:72:
                    3b:4b:bd:f4:8b:37:6b:5f:68:42:09:96:c6:c4:00:
                    e8:92:d7:80:52:dc:b6:ec:cd:82:78:2f:8f:6e:97:
                    0b:73:67:9d:98:35:55:b8:24:d1:b5:dd:a1:ed:a1:
                    ef:66:07:9c:aa:a1:64:9a:5a:39:52:8c:d9:86:0d:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E4:ED:6E:9E:3F:8B:8D:AE:BF:BA:BB:08:21:A3:C3:9B:D1:6E:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3cd4625-6034-4b3b-9d8b-5417ca97c839/c3cd4625-6034-4b3b-9d8b-5417ca97c839.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.42.0/24
                IPv6:
                  2602:fc78::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397750

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b8:5d:47:5f:24:ef:c6:91:39:9c:c6:e7:d5:a3:8e:67:8f:
         45:07:21:c6:a0:d6:ba:a7:7c:06:09:75:a1:b9:ec:da:5c:8e:
         9e:f8:55:be:18:54:e4:3b:f9:4f:ec:37:a3:87:52:80:16:88:
         37:bd:08:3c:73:0a:fb:f7:b1:5f:11:6e:22:fd:88:df:a3:4c:
         bb:67:62:8d:e9:1b:b2:6f:47:60:00:48:9d:b7:95:7c:64:4c:
         bd:0d:b8:98:19:ee:c8:de:fd:a6:3e:5e:c5:e1:1a:45:c6:0f:
         46:68:7d:8e:7d:fb:80:6b:d9:08:f8:fc:3a:0b:a7:ba:cc:64:
         15:64:9d:c0:54:8a:61:f0:42:ff:6f:d2:ab:fe:a6:0b:f4:23:
         59:95:4f:9a:b0:79:56:ec:82:28:c4:5d:c5:95:60:0a:35:33:
         f7:32:07:38:13:36:b0:d8:2f:f3:d1:e5:c9:b1:3d:20:22:e5:
         f7:dd:70:8f:f7:36:70:24:f6:fa:73:c2:e1:05:ea:67:56:f1:
         ca:44:fc:2a:42:70:92:99:fc:f3:ad:7e:cb:b6:39:73:c9:b4:
         ab:57:86:85:b4:61:2c:e8:a8:c1:4d:9d:16:4b:32:78:8e:00:
         ef:90:32:00:7c:67:93:0a:88:8c:e0:37:fc:bf:a5:e5:99:a7:
         68:55:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----