Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02.cer
File:                     04610df8-1b67-4eaf-b73b-95f345a33b02.cer (raw, json)
Hash identifier:          XfwxbNDtX+f3wPa0xmfssM/6GlxS8qsFBapMOnZMCc8=
Subject key identifier:   E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584301ECEB38E75582BC50BC1FA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 26 Aug 2023 00:45:22 +0000
Certificate not after:    Fri 28 Nov 2025 01:45:22 +0000
Subordinate resources:    AS: 18519
                          IP: 172.81.16.0/22
                          IP: 2605:fac0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:01:ec:eb:38:e7:55:82:bc:50:bc:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Aug 26 00:45:22 2023 GMT
            Not After : Nov 28 01:45:22 2025 GMT
        Subject: CN=04610df8-1b67-4eaf-b73b-95f345a33b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:e9:a4:77:a1:55:dc:1a:51:f0:5b:e7:d3:
                    fc:33:a0:57:c8:c2:25:14:f9:c0:fc:e5:72:d8:cd:
                    42:c2:dc:f2:f6:c7:84:21:23:f0:e8:7b:cb:85:fc:
                    d3:f5:0c:56:b8:34:0b:91:25:ce:f5:7e:84:4d:40:
                    4b:ce:44:47:f1:e4:e6:fb:2f:a0:14:5d:a9:21:33:
                    b7:e7:df:a0:51:2e:ca:68:2f:2b:5f:8d:51:b7:fe:
                    ef:e8:ca:a7:7b:63:fd:25:7b:76:88:bc:6f:69:3a:
                    00:5d:14:2f:24:a3:25:72:0b:7b:85:e9:c1:51:a5:
                    17:5f:c7:59:ac:d9:38:f8:05:55:55:73:87:35:b2:
                    7d:e0:64:58:a8:d2:f7:3e:f2:23:2a:b3:a6:44:68:
                    ab:61:7d:90:99:4b:bc:5a:32:38:6c:93:95:3f:5d:
                    8e:61:dc:f2:24:b1:99:54:60:85:1a:8c:2c:34:fb:
                    c8:d5:b8:2d:88:ab:7a:65:5a:b0:6a:35:97:8b:73:
                    e3:8f:bc:a5:35:30:f7:be:ed:c0:8f:30:af:c9:90:
                    5d:a6:73:ac:40:eb:0e:52:8c:69:d1:d2:9e:a6:c5:
                    ab:ba:b0:c4:30:ce:8d:70:6c:15:6f:31:bf:20:25:
                    61:31:20:63:43:c1:2e:24:f7:c9:b9:92:bc:6d:de:
                    ba:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EE:9E:CE:B2:EB:DD:AD:29:C1:BD:AC:C7:CD:DF:17:C6:99:5B:F7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/04610df8-1b67-4eaf-b73b-95f345a33b02/04610df8-1b67-4eaf-b73b-95f345a33b02.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.16.0/22
                IPv6:
                  2605:fac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18519

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e1:80:7d:2a:e9:89:3f:cc:9d:cb:c3:f9:b7:cf:ba:6a:81:
         81:3a:2d:71:ba:84:98:f7:5b:b3:9d:07:85:18:3b:ac:ae:54:
         2b:8c:f0:4a:10:0c:d7:d7:e7:f6:0b:b1:83:0a:ac:38:9c:bc:
         27:66:5b:99:c9:5d:52:c8:da:4f:f7:ee:b5:df:62:74:7c:7d:
         7f:51:70:b4:b7:db:a3:55:e0:f4:b1:48:e5:6f:d4:7d:c9:76:
         63:2d:89:36:fe:e8:25:2b:3c:b9:ea:6a:74:c3:3d:de:68:48:
         00:5b:69:db:f1:41:b8:ea:0f:3b:1c:6a:00:10:96:fa:18:40:
         f8:44:ca:6c:3f:45:c4:03:4e:6b:c2:b3:d6:1e:a5:84:46:3f:
         ca:b4:f2:5b:f7:7f:db:47:d4:c5:56:bb:4a:da:d1:1d:29:eb:
         c9:92:5e:6f:87:dc:ef:23:7a:60:ba:a4:7e:31:a0:c3:20:81:
         63:2f:d3:fd:28:df:2f:16:5f:c5:d6:fb:5f:03:55:3d:41:48:
         3a:84:8f:7e:39:f3:d0:18:2b:02:eb:e4:61:18:a9:8c:f5:51:
         0a:1f:ab:00:7a:60:c9:bf:df:04:95:c8:5d:80:e5:7c:bb:65:
         92:bb:f1:a7:21:89:b6:31:81:2e:e0:28:21:3a:ca:cb:3c:53:
         af:5f:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----