Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer
File:                     c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer (raw, json)
Hash identifier:          o2jUcW8m2MkoP7fBLH6oiBypX1HKJklKZxiyLtXC38w=
Subject key identifier:   B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858420115F05327B3E71C6CA75900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 May 2023 00:45:16 +0000
Certificate not after:    Thu 28 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 10967
                          IP: 151.140.0.0/16
                          IP: 165.130.0.0/16
                          IP: 207.11.0.0/17
                          IP: 2601:e000::/24
                          IP: 2620:105:a000::/44
                          IP: 2620:1be::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:01:15:f0:53:27:b3:e7:1c:6c:a7:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 26 00:45:16 2023 GMT
            Not After : Aug 28 00:45:16 2025 GMT
        Subject: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:fd:c0:45:40:72:71:8d:0e:c1:72:0d:29:
                    ee:82:e8:83:bb:b9:4c:f8:2c:7b:ef:6c:37:a7:3d:
                    f0:68:06:e5:c7:4a:6a:15:08:8c:80:fd:6d:c8:5e:
                    80:bf:d6:e2:7a:b2:d9:55:9e:93:d5:84:1e:ff:ff:
                    73:ad:54:bf:bd:be:5c:04:cd:77:87:08:a7:a0:6b:
                    be:63:4a:36:6e:ea:0f:21:0a:1c:1d:74:b5:84:05:
                    48:35:2f:b0:8a:02:e8:04:8a:46:88:6c:b2:c9:a3:
                    ac:84:b5:6c:2a:78:d8:1b:a8:18:18:27:5e:16:f5:
                    55:a5:21:b0:7a:f2:58:e9:1d:95:29:b4:3b:3d:93:
                    31:50:25:08:11:15:91:66:5a:a0:a5:10:64:6c:f9:
                    8b:0e:db:ff:5f:bd:e9:d8:fd:24:7a:d9:0a:13:d7:
                    b3:53:23:b1:28:74:f6:de:de:cb:22:37:71:f2:24:
                    b1:14:4e:17:94:21:c2:f9:75:44:76:d6:75:b4:ab:
                    21:20:8d:69:ca:fe:00:41:91:98:5a:ef:4a:d5:39:
                    5a:6a:84:95:bd:35:c0:a1:30:ce:8f:ea:fd:9d:a6:
                    87:b5:b3:55:69:3d:4b:6b:5c:1d:65:c4:bc:1c:fb:
                    27:a5:3c:c9:8c:1e:8a:94:07:17:e7:de:24:7c:2a:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.140.0.0/16
                  165.130.0.0/16
                  207.11.0.0/17
                IPv6:
                  2601:e000::/24
                  2620:105:a000::/44
                  2620:1be::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10967

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a4:20:9f:53:6f:78:85:02:0a:fd:75:6e:b1:cb:8e:da:e8:
         65:8c:f8:b7:5e:1e:17:c2:03:20:07:99:ed:b2:38:f5:a7:aa:
         a2:5f:2e:16:e4:e7:40:1f:eb:6f:58:af:f9:26:f6:b2:9d:b0:
         b3:47:bd:0f:78:53:ea:e0:c1:5a:8a:8d:0e:6a:6d:a8:a4:5b:
         ad:2d:bb:a8:87:a9:70:a1:b6:19:65:df:5d:73:ca:82:49:c6:
         fe:37:50:ed:3d:c9:9a:f4:f7:88:1e:81:dc:e2:4a:38:a8:f4:
         d7:24:2c:ce:82:c5:48:4e:35:75:e5:8f:9e:dc:ce:b3:cb:03:
         a2:62:fd:c5:8e:02:a5:c7:c3:98:0c:cd:8c:c4:da:31:fc:1b:
         49:92:25:48:82:b3:94:10:88:60:e6:f0:6c:36:ad:39:b1:02:
         5b:51:fa:9a:89:93:94:7e:d6:00:d2:c8:7d:94:bb:5c:ac:1a:
         c6:0b:f1:24:a1:26:ef:ce:ac:a4:c1:55:f9:4a:27:a3:c5:25:
         40:d8:8b:73:ec:76:2c:1d:cd:b5:05:93:0f:a4:df:8f:00:2b:
         6a:dd:05:e1:90:e9:1f:b2:d0:ca:45:8b:8f:5d:87:5c:25:80:
         0e:3b:ff:a3:cf:91:8e:7b:54:df:e1:1e:b0:6a:a7:69:ec:a7:
         a0:01:fe:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----