Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bd910a80-a023-4390-9541-946646c20c08.cer
File:                     bd910a80-a023-4390-9541-946646c20c08.cer (raw, json)
Hash identifier:          UrMeJ9rHRrcVd8tAyYTYF8dsO0dSFmsDJwD6OKnqqhQ=
Subject key identifier:   8B:76:60:48:04:C6:0D:F7:D5:5A:6C:D7:1E:BF:D0:1B:F1:43:75:11
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285842D80CA4D4C0F597B0B6644300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bd910a80-a023-4390-9541-946646c20c08/bd910a80-a023-4390-9541-946646c20c08.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bd910a80-a023-4390-9541-946646c20c08/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Aug 2023 00:45:20 +0000
Certificate not after:    Thu 13 Nov 2025 01:45:20 +0000
Subordinate resources:    AS: 396440
                          IP: 2606:f540::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d8:0c:a4:d4:c0:f5:97:b0:b6:64:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Aug 11 00:45:20 2023 GMT
            Not After : Nov 13 01:45:20 2025 GMT
        Subject: CN=bd910a80-a023-4390-9541-946646c20c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:e1:42:3d:72:18:49:83:bc:a4:7f:b7:79:
                    6b:bb:83:73:99:9b:5e:dd:5d:94:a5:36:67:08:d2:
                    70:32:ab:a2:81:9a:4f:c0:53:d7:b4:4c:cf:31:c0:
                    76:ea:c6:09:41:57:c7:6c:ed:d2:6d:94:1c:b1:bd:
                    99:26:35:a6:b3:f4:46:10:c1:96:cc:d4:df:17:8e:
                    31:f5:98:dc:c3:e5:49:fa:60:d3:da:0c:9b:50:25:
                    02:ab:58:43:32:8e:9b:ce:63:6f:03:87:37:af:32:
                    72:47:42:19:b2:22:76:20:3d:f2:47:96:b7:d0:8e:
                    15:c3:6c:7b:63:e3:35:57:0c:ee:0c:35:14:6b:4b:
                    be:28:f4:f2:7d:b2:ef:84:dc:35:a5:78:67:e7:03:
                    51:18:d5:13:dd:90:45:2e:f8:72:eb:29:2b:24:88:
                    6d:c1:5b:17:f1:90:b1:e5:ca:8d:7a:9a:bd:e9:64:
                    87:70:e7:d7:99:fe:68:b4:f7:fe:f7:76:a4:43:ba:
                    b7:7d:3c:9a:6d:af:5b:e2:27:92:be:69:8c:9c:47:
                    c0:da:f9:02:3e:98:82:0e:cd:a7:25:ac:da:85:9a:
                    92:49:b4:2d:79:e4:38:57:28:49:ca:18:ee:88:89:
                    16:b9:0b:d5:33:f8:0d:5d:38:94:6a:eb:fa:2e:67:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:76:60:48:04:C6:0D:F7:D5:5A:6C:D7:1E:BF:D0:1B:F1:43:75:11
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bd910a80-a023-4390-9541-946646c20c08/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bd910a80-a023-4390-9541-946646c20c08/bd910a80-a023-4390-9541-946646c20c08.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396440

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f0:ef:2c:97:43:17:42:40:ce:42:75:c7:06:59:e5:76:97:
         ee:22:f6:bc:7e:54:ba:7c:d6:c8:ba:ae:bd:2e:b5:43:c1:cb:
         e5:24:95:55:39:3c:9b:4b:81:00:d9:fc:61:22:28:71:6e:34:
         82:b4:5c:3a:7a:2e:75:9a:15:68:e9:05:e9:47:8e:05:9a:70:
         97:a1:ab:1d:5c:dc:82:1e:3c:35:22:0e:cd:ee:7f:72:8f:91:
         3d:05:a8:6a:ea:b7:1c:fa:69:24:fc:45:08:49:18:07:7b:a9:
         ff:4c:16:db:a0:de:e7:e2:7a:70:03:91:8d:f9:76:eb:da:88:
         fc:ac:90:8b:21:e1:66:a2:30:0a:40:6b:42:d1:e7:ba:b5:9d:
         98:50:07:c9:33:67:31:6e:68:02:e7:b8:62:7c:a4:ea:76:a2:
         3f:4f:3a:61:0f:e7:a9:4a:a8:9f:e4:00:58:22:a2:0d:88:8a:
         01:30:ff:6f:d1:c3:76:09:b8:e2:58:a1:68:a6:8b:a9:d8:64:
         be:c5:77:fc:d9:78:af:7b:ff:9b:2e:8b:5f:2a:48:0c:df:46:
         52:71:1c:5d:a9:7f:ab:e7:8e:cf:10:6c:14:5e:2e:60:37:99:
         07:ef:5a:6e:63:db:14:b0:5e:ce:42:47:42:dc:8d:a6:17:3a:
         46:46:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----