Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer
File:                     a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer (raw, json)
Hash identifier:          9p+0/61Ll22NQtYNJavlRJb7bPfP2Ikc8b7+Zzx6o20=
Subject key identifier:   ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858433C8D48680685CBE40F805840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 16 Sep 2023 00:45:22 +0000
Certificate not after:    Fri 19 Dec 2025 01:45:22 +0000
Subordinate resources:    AS: 46634
                          IP: 206.220.200.0/22
                          IP: 2620:1a:2000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:3c:8d:48:68:06:85:cb:e4:0f:80:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Sep 16 00:45:22 2023 GMT
            Not After : Dec 19 01:45:22 2025 GMT
        Subject: CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:08:db:38:bc:42:43:60:34:f0:9f:dc:44:67:
                    ae:d1:46:9f:bc:2b:ce:7c:52:f5:91:0e:16:e9:b9:
                    5c:43:38:a8:12:6f:1a:15:39:0d:f6:22:06:e0:17:
                    bd:f1:fb:cd:f4:ed:75:77:d2:e7:e8:3c:f9:96:47:
                    5e:cb:da:a1:3e:83:db:4b:d8:a6:7d:db:0e:21:d0:
                    54:b7:a8:9a:39:05:21:c5:69:02:bb:9a:de:f4:35:
                    fb:c4:da:fd:f6:19:ee:32:23:a5:64:4c:51:4e:19:
                    3d:e4:1f:90:3e:16:11:ea:09:04:61:06:b8:5c:6c:
                    60:12:86:ef:42:ef:30:5d:15:e6:c6:56:01:a4:d4:
                    37:23:70:44:72:39:98:76:b3:94:b3:3b:9b:c7:c6:
                    c5:cc:37:25:cd:47:a7:af:e4:f4:1c:09:5c:66:aa:
                    af:26:45:22:d9:a4:89:59:2f:7b:65:85:37:e4:ce:
                    44:ac:2a:37:96:d8:50:73:d8:20:2c:30:72:51:3e:
                    8b:2a:0d:4b:b0:73:49:5e:63:82:36:01:d3:d1:de:
                    1c:69:ee:a2:3f:e1:db:e2:8e:47:08:0d:1a:bf:75:
                    97:0a:a9:88:6c:58:fe:db:72:d2:1c:0c:de:b5:7c:
                    82:2a:da:9a:e4:84:48:76:f3:a8:4a:7b:28:06:86:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.200.0/22
                IPv6:
                  2620:1a:2000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46634

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:32:2d:3a:79:6c:98:a9:bf:23:3a:96:35:a9:33:73:1e:3d:
         bd:8a:43:de:0c:25:88:71:60:3e:08:f6:06:8f:7b:37:ec:3f:
         cd:c4:ed:5b:49:bb:5b:99:8d:15:53:1d:b0:60:ad:eb:66:54:
         9c:9c:c8:b4:e0:7b:b2:f9:07:f2:06:65:16:11:5b:35:82:9b:
         de:b6:53:54:1d:57:8a:c4:73:84:dc:7e:fb:9c:60:0e:aa:b6:
         de:ff:cc:d0:fb:95:fd:3f:1c:e6:f2:f8:12:e1:93:4d:30:7b:
         3b:77:8f:35:eb:80:b3:09:b8:8a:36:b3:29:9e:28:7d:3d:ee:
         ed:bf:00:9f:e4:25:ef:50:08:89:e1:05:d3:76:8f:56:ae:8f:
         60:12:9a:bb:22:30:5c:17:32:30:6c:2c:1c:26:ad:88:93:a0:
         df:c7:92:26:5c:10:84:a4:1b:4a:6d:3c:90:f2:07:0a:69:81:
         73:ca:a5:52:5a:bf:2b:a4:91:f6:31:f8:f2:c7:57:54:7e:30:
         ba:8e:e4:d6:d7:6e:bb:96:4e:50:0a:6d:80:61:7a:49:2d:5f:
         e2:d5:51:dc:94:86:88:9b:08:1f:37:92:35:e2:fc:e7:06:46:
         36:13:76:e4:7d:6b:11:67:d0:56:8b:71:79:93:3a:8c:1a:3a:
         ca:97:16:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----