Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72b6cb9c-1aba-4672-92cf-5163717b9220.cer
File:                     72b6cb9c-1aba-4672-92cf-5163717b9220.cer (raw, json)
Hash identifier:          IdqY666suQxrhj1yz92lTsLASH1fQTAm1yOa95JpjK4=
Subject key identifier:   63:64:39:85:21:E9:FF:CF:3B:05:40:D6:E6:7B:AD:C0:02:44:F3:58
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285843F7B6D74A04F2B244ADA16B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72b6cb9c-1aba-4672-92cf-5163717b9220/72b6cb9c-1aba-4672-92cf-5163717b9220.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72b6cb9c-1aba-4672-92cf-5163717b9220/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 22 Nov 2023 01:45:16 +0000
Certificate not after:    Tue 24 Feb 2026 01:45:16 +0000
Subordinate resources:    AS: 62998
                          IP: 2606:dcc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f7:b6:d7:4a:04:f2:b2:44:ad:a1:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Nov 22 01:45:16 2023 GMT
            Not After : Feb 24 01:45:16 2026 GMT
        Subject: CN=72b6cb9c-1aba-4672-92cf-5163717b9220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:67:43:0b:93:1d:04:33:7e:d7:e3:61:99:9c:
                    89:8e:ee:01:9c:8b:1f:5e:3e:4c:52:dc:b6:e0:45:
                    bd:39:38:e2:a0:b3:52:65:d3:02:ea:a9:f0:b5:72:
                    c2:d8:5f:df:ff:43:fa:8e:9f:1d:aa:ec:9d:f0:97:
                    b7:00:72:1b:bf:d7:bf:48:37:58:fe:1d:07:34:70:
                    91:5b:5a:b9:3a:93:ac:5b:5b:fb:64:c4:50:a0:31:
                    29:b3:ae:d5:4e:6e:01:d3:71:a0:b2:08:97:4d:6f:
                    f4:7d:37:46:d3:27:37:45:5e:c7:72:d3:2f:58:b1:
                    ae:3b:23:d3:49:c8:f0:6f:b0:c9:ba:27:8c:4a:32:
                    af:46:13:22:0b:d5:69:68:75:7f:d8:9e:5c:a4:a4:
                    d5:9d:e0:03:b6:91:b4:e3:f5:a6:b3:cd:47:7e:d3:
                    86:fa:10:22:88:cf:7a:0b:b1:73:3a:85:41:3e:a5:
                    2a:e5:9a:84:20:93:f7:ab:7c:d1:08:a0:a9:86:17:
                    7d:f7:b3:c7:c5:e5:06:44:ef:87:70:48:0b:f2:0f:
                    88:27:5a:1c:f2:8d:86:14:8f:3f:3f:97:82:5e:18:
                    b4:f5:b8:72:c0:f2:83:36:9c:fb:4e:fe:ba:b1:ca:
                    f9:5f:f5:df:0f:79:f4:2c:35:a5:03:76:77:3b:c5:
                    0a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:64:39:85:21:E9:FF:CF:3B:05:40:D6:E6:7B:AD:C0:02:44:F3:58
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72b6cb9c-1aba-4672-92cf-5163717b9220/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/72b6cb9c-1aba-4672-92cf-5163717b9220/72b6cb9c-1aba-4672-92cf-5163717b9220.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:dcc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62998

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:ca:68:13:8c:e3:bb:ff:58:df:04:12:25:b7:54:83:98:
         d8:07:39:0c:b6:a3:83:16:a6:fd:09:e1:39:7c:9e:8c:e6:41:
         fb:26:39:97:d3:89:89:fb:a1:30:ff:f9:58:71:00:b9:23:e9:
         47:fd:c4:a4:87:42:59:cd:82:d2:28:9a:0e:4a:d6:f3:8e:64:
         a3:0c:6c:47:e7:74:c8:f5:99:9c:f0:38:22:3c:2b:bc:ae:94:
         32:23:89:95:5e:c0:6d:e9:f0:bc:8f:0b:e4:3f:4c:05:0d:06:
         6c:d5:63:83:cb:d3:64:f8:3b:a8:6e:d7:d9:a4:41:ac:c3:c2:
         4e:1c:73:5c:96:27:e2:6f:91:18:13:66:fd:79:8d:d4:bb:f2:
         8b:4e:d6:76:81:60:66:00:36:ea:2d:32:f5:6d:36:2a:51:a2:
         91:10:bc:6f:d0:1e:ef:43:3d:4c:92:c8:07:42:93:0b:6d:cf:
         d1:2e:5d:bf:65:5d:12:d6:8a:65:1f:da:77:5f:3e:54:17:db:
         ee:3d:35:77:92:f7:78:10:c5:78:cb:0a:eb:83:6f:d3:18:64:
         36:7b:35:9e:66:7b:44:5f:48:18:ba:47:fc:bd:4c:fc:d0:a6:
         04:82:94:41:a3:f8:63:aa:a0:4c:a6:3c:d5:1f:6b:f3:ac:5f:
         8e:19:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----