Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.cer
File:                     053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.cer (raw, json)
Hash identifier:          mWzpNJCB7C+3WddLIt2P0VyFpWWX+Yi8xJPs9uIxtRs=
Subject key identifier:   A2:38:04:7B:3D:F8:16:BC:AA:B0:AE:33:5D:98:04:5C:1B:DF:14:74
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285844CEAD8CF53DBA050A4E0651C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 07 Feb 2024 01:45:20 +0000
Certificate not after:    Tue 12 May 2026 00:45:20 +0000
Subordinate resources:    AS: 557
                          IP: 130.111.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ce:ad:8c:f5:3d:ba:05:0a:4e:06:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb  7 01:45:20 2024 GMT
            Not After : May 12 00:45:20 2026 GMT
        Subject: CN=053b9d11-14bb-4f24-8ea4-1d2cac24a2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f2:f0:ad:8c:4e:27:28:86:0c:25:9c:7d:c2:
                    95:2b:86:c5:ac:36:8a:5e:3c:1b:65:70:1b:5b:b6:
                    7c:8d:bb:df:c8:a0:b9:76:f5:31:a3:77:0b:35:14:
                    d3:2c:c5:3f:19:2b:e1:e7:05:97:ba:b5:9d:41:a3:
                    5f:bb:8e:da:fd:4d:ed:84:58:c3:7a:f1:23:85:cf:
                    65:3c:ec:7d:d9:fc:21:fe:e6:d7:c5:3d:7a:3a:db:
                    d8:ff:44:6d:43:77:08:ef:59:0d:55:a6:12:e0:f2:
                    ad:30:56:88:ee:08:cc:40:aa:ca:6d:ef:86:f3:dc:
                    2c:c9:06:17:04:cf:8d:27:17:91:86:7f:c2:42:1c:
                    fc:c5:94:0d:34:6f:cc:3d:c5:40:a6:b1:20:60:1d:
                    57:a2:e3:e1:6c:00:10:bf:88:ab:56:b4:2f:ab:76:
                    a2:44:ec:35:bf:16:10:f4:ec:4f:a9:6b:84:ce:4a:
                    0d:c2:41:3f:42:6f:ca:b8:f7:5c:07:d5:56:14:4e:
                    22:c5:2c:a7:8b:7e:04:eb:5a:96:f4:a9:c3:74:96:
                    4d:2d:da:cc:bc:7a:f8:33:6d:1b:7b:c8:c4:d8:16:
                    61:d4:ec:2b:71:51:95:28:89:c9:29:21:7a:59:fb:
                    44:1d:87:ea:6b:aa:91:13:a7:ab:05:59:f1:d3:4c:
                    b3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:38:04:7B:3D:F8:16:BC:AA:B0:AE:33:5D:98:04:5C:1B:DF:14:74
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd/053b9d11-14bb-4f24-8ea4-1d2cac24a2dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.111.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  557

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:40:25:99:42:ee:45:35:0c:91:65:29:6d:d4:27:56:c2:b8:
         a5:8d:09:26:4d:cc:08:ce:0f:a8:26:3d:df:47:44:a7:43:46:
         6f:ed:02:c8:79:9b:31:44:77:f6:25:c8:8d:68:59:74:17:ea:
         eb:59:f4:8f:03:f2:f9:0d:3c:db:0e:83:27:61:39:75:e3:94:
         9f:dc:ee:bf:62:20:af:53:aa:f2:37:82:d4:36:95:5d:e7:80:
         1a:ab:67:7e:ca:b0:53:2f:c0:bc:6e:49:b2:78:5f:ba:8a:8f:
         45:c2:6f:b0:73:7b:87:e9:0f:6b:0f:be:99:58:e2:37:65:eb:
         06:c8:8d:db:d9:64:6d:a3:a6:bc:d3:1b:41:ad:b0:34:ea:bb:
         de:2c:19:b5:c8:25:eb:a8:c4:bc:44:6a:76:0b:18:4e:3d:74:
         41:f8:af:a0:9d:34:a5:18:38:dc:8f:d8:49:5d:08:26:3d:a5:
         51:3c:57:77:e2:14:b4:b0:b8:d2:3b:6b:c7:36:81:70:66:a6:
         5e:3d:00:a9:92:96:43:db:0f:e3:00:95:22:38:13:23:98:71:
         59:17:c3:3e:2d:06:a4:26:06:1e:94:2e:54:23:cf:16:a0:a5:
         e0:97:c7:28:9a:50:3c:7e:e3:30:cc:53:72:8f:45:40:8b:8b:
         30:0e:25:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----