Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer
File:                     73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer (raw, json)
Hash identifier:          KTYizG8ivn+a66hrJlD/4pbOn1ljpPgM2vRV4WTB/3Y=
Subject key identifier:   52:7B:70:BA:7C:3B:9D:0F:59:59:42:0D:91:87:3D:5D:B9:D8:84:15
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858420115F015E8C54FC8897F9A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 May 2023 00:45:16 +0000
Certificate not after:    Thu 28 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 62643
                          IP: 100.42.80.0/20
                          IP: 108.161.48.0/20
                          IP: 192.234.120.0/23
                          IP: 2607:e780::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:01:15:f0:15:e8:c5:4f:c8:89:7f:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: May 26 00:45:16 2023 GMT
            Not After : Aug 28 00:45:16 2025 GMT
        Subject: CN=73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:65:61:1a:7a:81:eb:85:b5:dc:95:05:d7:
                    cc:22:4e:b7:86:37:f1:ad:b9:24:84:f0:46:c1:5d:
                    42:1b:c9:13:b9:c3:04:d5:83:70:d2:58:92:2b:0b:
                    62:07:2e:80:25:73:ba:ab:96:58:29:44:61:4e:75:
                    dd:b2:54:c4:e2:2b:19:33:5a:ab:cd:73:5c:61:f0:
                    4e:42:ea:e1:f7:c7:b7:47:ec:30:05:c9:b2:8d:57:
                    c6:c2:dd:92:d8:13:27:1e:48:ad:ed:46:a0:9a:39:
                    cf:4c:3e:78:53:4c:39:4c:b1:ec:3c:c8:03:49:66:
                    bc:40:cc:63:7f:f9:65:30:f2:08:cb:48:10:23:0c:
                    72:67:31:eb:b1:23:10:8b:9f:c3:e3:32:9d:0e:f4:
                    83:ab:cb:4c:ba:9d:1d:b2:d1:c0:28:d5:e9:d0:32:
                    0a:78:3c:9a:90:4c:8f:3f:e9:14:ed:88:50:87:3c:
                    a9:93:2a:23:ce:ae:c4:ea:79:2b:0b:ae:10:72:50:
                    17:d4:ae:05:ca:a2:af:80:fb:14:f8:a2:ce:84:fd:
                    74:a6:e9:48:bd:71:39:69:94:d0:ff:75:c7:ac:0c:
                    53:70:0d:c1:75:6b:56:b7:3a:01:77:40:74:d7:e0:
                    5f:dd:f2:a6:41:fc:75:76:1d:5b:2a:40:3f:ae:f7:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7B:70:BA:7C:3B:9D:0F:59:59:42:0D:91:87:3D:5D:B9:D8:84:15
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.42.80.0/20
                  108.161.48.0/20
                  192.234.120.0/23
                IPv6:
                  2607:e780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62643

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c7:96:e8:9c:61:3f:cc:11:92:a1:50:59:87:f4:33:1b:a4:
         6b:a8:c5:f2:e1:40:5e:91:81:2e:e3:fa:99:63:ef:11:f6:f8:
         ac:ba:af:94:dc:70:02:f7:c1:cb:9e:6c:51:12:26:c9:a7:64:
         03:fc:cd:53:f6:f6:70:f7:19:f7:db:5e:e8:9d:f8:3d:d4:d5:
         55:da:d9:26:2e:ff:b9:9d:c0:b3:9d:04:eb:1a:5b:f8:21:a2:
         42:3a:40:ad:98:5e:35:92:e5:e1:55:b0:2f:73:dd:e1:0c:48:
         ab:9d:c6:87:73:70:cc:9a:0e:00:fa:db:5c:d7:3c:5a:ce:02:
         08:b1:e4:f6:fc:ac:04:d5:67:3a:3a:1b:39:d5:08:f7:ba:45:
         4d:cb:6b:41:25:db:94:ae:8c:92:f9:2e:7e:b9:b9:b5:58:95:
         b2:c5:5a:59:a2:24:ee:66:3c:fe:78:85:b6:b8:82:7c:df:c4:
         dd:63:d9:6d:64:cf:ea:46:9a:ab:e1:56:d4:5a:9c:f6:f2:27:
         79:f0:c6:84:c7:e2:e6:18:c6:b1:58:18:e2:63:f9:ab:6c:0b:
         c0:ce:b2:4e:45:67:de:94:5d:3b:e5:6e:a7:3a:39:dc:72:f4:
         07:60:ed:f1:b1:fd:e5:cd:79:c4:da:74:a2:3f:6d:0c:86:71:
         f0:c9:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----