Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.cer
File:                     ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.cer (raw, json)
Hash identifier:          SAypPZzE+pWByTFcH0asMkvRBVZRaKa/ufnkvTCzzqM=
Subject key identifier:   B6:D4:07:89:C5:0E:5C:90:9F:5B:82:0A:F4:FC:C7:AE:D2:87:FF:89
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285844F5C3205B80F868167B0DBF40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Feb 2024 01:45:20 +0000
Certificate not after:    Tue 26 May 2026 00:45:20 +0000
Subordinate resources:    AS: 23094
                          IP: 199.180.140.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:c3:20:5b:80:f8:68:16:7b:0d:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb 21 01:45:20 2024 GMT
            Not After : May 26 00:45:20 2026 GMT
        Subject: CN=ad2a8414-575e-4d7a-8c69-a1fd4f31ba30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:94:86:4b:cf:82:c7:08:0e:a1:1d:a9:d3:
                    9c:b8:f9:dd:78:ac:d5:4a:3b:da:b6:d3:fd:59:98:
                    20:bb:b9:b8:63:6e:07:69:f0:5e:61:35:8d:5a:b3:
                    40:a4:52:b7:05:22:cb:59:a5:5b:ff:ac:83:35:f4:
                    87:87:e5:e2:cf:1d:47:9e:63:a2:0c:db:fe:80:4f:
                    80:21:dd:3e:b7:5c:81:8c:c6:68:f1:82:02:54:12:
                    9b:f2:d9:bf:c2:bf:f6:6e:3f:d7:8f:70:a3:f8:51:
                    3e:eb:a6:e3:8b:c1:d5:1d:2f:a6:aa:07:ba:a3:d6:
                    9a:bb:18:9a:e2:22:24:86:dc:e3:33:21:44:0e:50:
                    7f:90:e7:81:78:ea:42:ea:cc:7b:79:c9:98:59:b3:
                    4a:26:e7:7b:74:f8:79:7d:1a:14:b5:f2:0d:41:cf:
                    72:d4:76:c0:f0:c7:97:42:f5:0f:24:23:cf:2a:90:
                    f6:e5:e7:30:1b:c6:fb:64:13:40:da:c5:bf:c3:1f:
                    f7:a1:e3:97:39:74:a5:88:5f:f6:8e:cf:21:7f:1b:
                    3a:53:fb:20:fa:08:9e:18:6b:b5:1c:e2:26:79:80:
                    3e:4b:47:5d:13:d1:2f:77:64:49:66:cf:ae:40:87:
                    be:c9:4a:b8:36:a4:05:83:78:9d:35:5c:99:ee:32:
                    e9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D4:07:89:C5:0E:5C:90:9F:5B:82:0A:F4:FC:C7:AE:D2:87:FF:89
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30/ad2a8414-575e-4d7a-8c69-a1fd4f31ba30.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.140.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23094

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:01:c1:fd:7f:2e:d0:ed:4a:10:a1:87:2a:50:d7:e3:40:
         ba:d9:a0:65:9a:c0:10:da:59:ce:6f:0e:23:38:2c:ca:8b:f4:
         98:c5:41:d8:e0:b5:e5:d5:f8:a3:27:52:54:a2:20:fc:c4:f2:
         46:05:8f:94:7a:83:6f:db:fd:ed:a1:46:4c:12:b1:c2:a9:a8:
         b0:e2:2f:44:ab:9f:34:8b:80:7c:62:c3:85:20:c0:25:1b:91:
         19:1d:59:ad:a8:7b:d3:10:4e:91:9d:55:b6:b0:af:0e:f7:bb:
         e8:58:a0:c5:37:75:98:b8:81:7f:93:f4:6f:44:78:66:55:d5:
         5b:71:06:88:09:fb:50:56:7f:8a:da:01:bb:ad:17:9f:6c:cb:
         ee:41:ac:8d:cc:b9:52:f1:6f:4e:06:ea:c3:98:fe:b1:0a:63:
         55:50:e5:5c:22:dd:1f:db:29:ce:e4:94:d4:50:7b:25:d5:5e:
         a1:bc:80:e4:c8:4b:80:c6:bc:2b:aa:fa:a4:e5:bc:f3:71:09:
         83:7e:79:41:c0:57:e8:bf:14:5d:3f:40:d9:09:8f:7f:53:63:
         74:28:5d:39:54:7c:17:9e:3c:de:0f:7b:f2:e6:fa:64:e4:58:
         42:d4:41:3c:82:f0:61:b7:f4:9d:ba:51:4d:8e:28:3d:34:de:
         c6:2e:74:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----