Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
File:                     e179ce28-23c7-45e1-9b0e-d90358c94f57.cer (raw, json)
Hash identifier:          ScYlWuV2+ds20XWBeZrHGtD9cay/q+UjtKwBdtiFa08=
Subject key identifier:   D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841E780E96B810A01630F704C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 May 2023 20:49:48 +0000
Certificate not after:    Mon 18 Aug 2025 20:49:48 +0000
Subordinate resources:    AS: 46539
                          IP: 23.159.144.0/24
                          IP: 2605:cb40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e7:80:e9:6b:81:0a:01:63:0f:70:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 16 20:49:48 2023 GMT
            Not After : Aug 18 20:49:48 2025 GMT
        Subject: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:fc:02:e6:58:ef:30:bc:5f:71:b3:e7:81:
                    4e:ac:0b:53:f6:87:63:01:b9:60:06:de:b0:ed:ba:
                    9a:4b:9d:ad:99:77:cd:c7:b1:a5:12:68:1c:36:4a:
                    e1:6f:e5:18:e2:a6:98:63:d6:6d:5e:23:18:b0:9b:
                    6e:59:8a:b6:69:b0:36:2f:7e:dd:33:1d:bf:b9:05:
                    5e:b8:f8:b7:e2:e0:67:2e:ca:fb:8c:1d:a6:62:7c:
                    60:31:fd:d7:49:03:2c:a4:c0:a4:0d:a0:5a:0f:3b:
                    e5:f5:fc:40:ca:f5:e0:71:16:40:7f:ba:95:8a:6a:
                    45:e1:3b:ef:0e:e6:4a:96:50:78:bc:8f:7c:ba:56:
                    7e:1f:25:25:77:ee:3c:5b:cd:9d:4e:e2:fd:65:a7:
                    c9:14:14:64:60:8e:d1:4f:e4:41:c7:7a:21:2a:30:
                    80:79:5d:74:89:86:8d:a1:e9:a3:28:d7:2c:00:96:
                    b1:02:3e:d8:a9:c8:bf:75:08:d3:81:20:31:3d:86:
                    d4:ed:9f:79:ff:57:e7:f0:76:82:17:0b:aa:f9:5d:
                    ca:b7:20:1b:74:8e:74:a6:ef:a3:ec:f8:b1:e1:b7:
                    63:75:27:66:fa:14:0d:63:c5:74:c8:42:6f:62:65:
                    14:be:b4:4f:fc:e0:6f:4b:bf:8e:45:08:52:44:8e:
                    ff:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.144.0/24
                IPv6:
                  2605:cb40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46539

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:4c:bc:4c:50:d9:19:91:3e:38:65:07:ed:5b:3b:b6:2f:
         81:e0:4a:fd:09:3e:35:5a:b7:41:ed:3d:f3:d7:24:b8:cc:2f:
         94:10:03:ce:28:0b:1d:01:d2:8b:0a:0c:dc:12:5b:a0:cb:f0:
         f8:4a:59:03:4d:f5:20:7d:1c:ec:7c:f4:2d:fe:1b:f7:de:73:
         f1:82:0d:4f:4e:11:46:b1:20:a9:08:15:23:5e:95:e0:49:6d:
         0c:5b:e2:ac:18:cc:12:8f:6c:00:16:b1:24:a0:1e:fb:65:72:
         35:6a:45:4c:64:b2:19:8e:56:d2:b2:0f:76:83:97:d4:5c:db:
         4f:27:82:24:50:da:84:87:4f:81:7a:d4:20:82:0e:58:1e:6c:
         8d:46:c9:62:5e:05:34:81:2f:ed:f1:b3:92:f6:a1:88:8b:25:
         a0:20:24:42:67:70:79:fe:d7:77:48:9c:75:8b:93:74:4e:d4:
         54:c9:e9:5b:e3:77:bb:6d:7e:f8:85:27:59:b2:ed:8d:31:10:
         ca:a7:25:ce:ea:b5:ee:61:c2:d6:09:c5:79:73:ee:02:21:95:
         9e:30:c4:c6:02:ec:b6:fc:59:17:3d:c4:41:e5:3c:1b:f3:dd:
         64:ba:ac:b0:9d:6c:43:ab:b0:b0:e0:aa:48:66:4b:25:a1:58:
         87:cf:89:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----