Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160.cer
File:                     5f218203-7869-4c63-a884-4946e8c91160.cer (raw, json)
Hash identifier:          CYv95/zRxq0PcKTboHLDvad26BBr+yGXQJnXsiLTjGg=
Subject key identifier:   0E:25:69:3F:D6:91:E0:C8:FA:BC:70:90:E1:73:60:A2:96:BF:F4:83
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858442CC1D4957E43BF03EE6FC9B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/5f218203-7869-4c63-a884-4946e8c91160.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Dec 2023 01:45:15 +0000
Certificate not after:    Sun 15 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 393563
                          IP: 192.43.242.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2c:c1:d4:95:7e:43:bf:03:ee:6f:c9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Dec 11 01:45:15 2023 GMT
            Not After : Mar 15 00:45:15 2026 GMT
        Subject: CN=5f218203-7869-4c63-a884-4946e8c91160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:b2:fb:09:0c:d8:8f:81:2e:97:c5:57:2d:
                    ed:69:a3:48:00:17:de:81:62:f0:fd:98:b3:5d:66:
                    99:e7:91:b4:74:0b:3b:09:08:a2:ce:5c:4c:2c:08:
                    c4:98:f8:28:f1:42:f4:94:28:c2:4b:30:b3:3e:a2:
                    a6:df:a1:91:cc:80:8d:84:21:e3:e7:19:73:ea:57:
                    01:4a:29:f2:31:9a:10:11:b3:20:20:b6:46:7b:a9:
                    06:a5:90:bf:09:6c:3c:f2:d0:e1:bf:0b:3c:af:a9:
                    4e:53:6d:1f:43:38:bc:c2:cc:d3:fe:aa:34:62:62:
                    5c:17:87:3a:21:fe:28:09:2a:be:93:0d:e8:a8:c0:
                    4d:3e:f9:1b:9a:f7:4f:68:bb:fa:17:85:31:5a:9b:
                    c9:27:83:56:a9:ad:ca:d6:7d:c9:09:77:e1:8a:e4:
                    70:61:42:ba:ba:eb:e1:6d:d2:90:cf:90:de:96:5f:
                    b8:e1:33:d2:17:c8:01:1f:14:ea:6e:dc:96:35:7f:
                    a0:fc:e9:22:33:cb:cc:bd:7e:1c:dc:ee:1b:9a:02:
                    d3:03:26:18:32:f6:ab:ed:d4:73:09:b8:68:e8:6a:
                    7b:9f:bc:74:43:01:de:a4:58:55:72:03:5d:65:fc:
                    c7:6e:33:fe:ce:df:c5:c6:e5:1b:f4:96:61:2f:a5:
                    51:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:25:69:3F:D6:91:E0:C8:FA:BC:70:90:E1:73:60:A2:96:BF:F4:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/5f218203-7869-4c63-a884-4946e8c91160.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.242.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393563

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:7d:91:bf:c9:70:0a:24:60:9f:a3:26:3a:1f:b2:bd:d2:54:
         b7:5e:72:2c:c1:63:f1:8a:72:64:94:49:88:f9:35:83:8e:99:
         4d:f8:c5:82:88:ba:41:66:dd:6f:3c:04:a1:69:a2:79:34:be:
         7d:62:a0:c2:3f:81:66:37:11:b0:fd:e1:ab:a0:6b:93:60:37:
         3d:82:7d:00:3d:1c:b3:95:ec:0f:c8:c1:a8:ed:c2:44:39:ba:
         c2:aa:fd:2e:80:8c:a4:cb:80:34:4a:b6:52:e4:17:20:cf:62:
         55:d9:f5:c0:94:df:8b:94:1c:7d:6f:2a:3a:e4:64:a5:5d:30:
         21:8f:5e:cf:8d:04:ad:83:e6:48:36:9d:b2:fb:f5:b1:5c:7b:
         48:c8:b8:61:2f:99:01:94:02:36:73:25:17:09:5c:44:80:ee:
         5d:97:7d:89:b1:57:6c:a3:fd:55:51:b0:29:f2:62:d5:69:a1:
         1f:5f:31:0a:c4:af:e4:b4:73:b6:3f:06:ba:2c:32:11:01:f6:
         ac:e2:7c:62:0d:f3:e1:08:94:d0:1d:18:67:92:fd:1a:5d:dd:
         b6:c5:d9:28:8d:8a:ef:13:e7:b2:0a:99:31:d9:91:87:24:41:
         f1:ae:ff:1f:8a:88:c6:65:f1:35:14:c9:22:b5:49:65:38:7f:
         ce:4c:15:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----