Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer
File:                     ea022514-ea9e-4ceb-9d1b-9768bee36a4f.cer (raw, json)
Hash identifier:          NzNjLmqNIT4/FLv1fF9EoYovCKJCW5lBd94NfTJWoT0=
Subject key identifier:   28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584402E193125BCED9E3619E5500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 26 Nov 2023 01:45:15 +0000
Certificate not after:    Sat 28 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 54429
                          IP: 23.146.168.0/24
                          IP: 2602:fd94::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:02:e1:93:12:5b:ce:d9:e3:61:9e:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 26 01:45:15 2023 GMT
            Not After : Feb 28 01:45:15 2026 GMT
        Subject: CN=ea022514-ea9e-4ceb-9d1b-9768bee36a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:72:34:97:de:80:f0:58:35:2c:81:ea:ef:
                    a6:d9:4c:21:7a:23:d3:a4:e2:63:c4:f5:f1:1f:17:
                    6f:b1:3f:7b:1b:aa:58:87:ce:1f:db:c1:56:d8:2a:
                    9b:a2:f8:16:4f:46:23:5e:14:8f:5a:29:9e:58:24:
                    eb:15:ca:65:98:fb:0a:33:bd:88:1d:45:7a:53:5e:
                    4c:fc:9a:d6:3c:1c:28:3e:6c:a8:5f:0b:19:d0:34:
                    1d:2c:10:c8:15:a3:10:73:cb:1c:5c:71:59:be:71:
                    0e:75:a2:fe:b6:3e:b3:3b:3a:7c:3a:25:31:3c:68:
                    c7:66:3d:f4:e1:1b:ab:2f:54:ac:0b:63:ae:03:41:
                    aa:c2:03:cb:a8:e3:0a:58:b4:74:fb:13:04:0c:f6:
                    6f:39:ac:17:fc:37:cf:02:0e:e1:d8:60:09:51:be:
                    2c:ca:f4:f1:01:ac:97:59:93:10:0b:2d:de:d2:2f:
                    ca:66:5e:79:9c:08:7d:a2:3f:79:dc:0a:54:a8:ca:
                    ce:0c:df:51:88:c3:1e:02:b3:a2:b4:c3:7f:50:83:
                    f0:cd:da:31:2b:ff:60:ab:ff:e9:03:2b:24:5a:23:
                    ad:e9:d2:1a:3f:75:83:e2:46:23:2e:bd:10:7e:69:
                    d0:43:95:bb:c5:74:a0:3c:8e:6b:c4:0e:48:f2:ec:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:40:C2:01:D0:76:E5:E1:F9:F7:34:2B:32:37:58:E3:DC:7B:D8:7D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ea022514-ea9e-4ceb-9d1b-9768bee36a4f/ea022514-ea9e-4ceb-9d1b-9768bee36a4f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.168.0/24
                IPv6:
                  2602:fd94::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54429

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:dc:f1:8d:d7:0d:e8:70:1c:67:e2:57:ff:ea:bc:0f:7c:c8:
         f2:0c:68:46:df:9d:fa:e6:f6:01:a8:d4:4d:d6:23:6e:08:33:
         74:8e:e3:36:69:0a:c3:55:44:71:10:ed:75:20:32:01:db:cf:
         ee:bb:19:1f:d0:11:6b:7c:57:77:b2:e2:98:0c:36:27:03:5c:
         a7:9b:c2:8e:24:c4:76:35:55:de:e9:e9:c4:17:88:e3:a2:e9:
         35:50:7f:5f:a4:a2:7a:c7:78:11:3e:56:e1:8a:49:40:a1:5a:
         8e:c5:79:30:7a:a1:08:22:06:6f:f0:fb:28:6d:69:98:ca:28:
         28:7e:f4:2d:04:a3:7d:b7:91:7d:c7:86:73:81:0b:95:bb:6b:
         61:f7:ca:29:77:23:64:22:1c:4b:8a:c8:ca:60:6d:88:6a:26:
         d0:da:6f:30:cb:6a:6e:b9:61:ba:5f:5f:89:ec:44:c7:1e:97:
         d4:5f:e9:29:3f:b5:33:3d:8b:a0:72:7d:2a:a3:97:f3:d9:c6:
         82:43:62:56:43:90:4d:be:fa:81:8d:a1:28:e9:cd:c4:be:3d:
         71:56:d4:2d:b0:92:e7:62:6d:99:5a:20:44:82:3e:37:da:81:
         5c:84:45:98:0b:95:eb:2d:a3:18:68:46:13:a0:2a:9a:0d:64:
         00:34:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----