Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer
File:                     ccd15fe1-96e9-45ad-96fd-22041e11ce8d.cer (raw, json)
Hash identifier:          /XUBGC9s31+p+NI2PGTd+O6frczw12RBy6+2FUxqvq8=
Subject key identifier:   17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858456F909AF2C9C44C56ED114C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:52:10 +0000
Certificate not after:    Wed 08 Jul 2026 16:52:10 +0000
Subordinate resources:    IP: 103.109.82.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:90:9a:f2:c9:c4:4c:56:ed:11:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Apr  4 16:52:10 2024 GMT
            Not After : Jul  8 16:52:10 2026 GMT
        Subject: CN=ccd15fe1-96e9-45ad-96fd-22041e11ce8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b6:63:4f:92:53:f1:1e:34:53:99:c2:93:bf:
                    7d:68:f1:4c:c1:b3:69:92:f8:b2:bd:bf:69:cc:2d:
                    05:7d:23:92:23:42:74:83:81:b6:b6:e2:8e:72:8c:
                    a9:fa:72:e5:19:91:25:0c:6e:87:42:45:1c:04:43:
                    02:77:03:90:49:ba:19:48:8a:28:66:88:f6:42:f3:
                    45:05:44:48:2c:c3:52:ce:3d:94:f4:20:70:2a:17:
                    a0:1f:62:9a:8b:47:db:84:f8:59:bb:63:b0:26:13:
                    02:05:5c:a3:38:1d:1f:7c:7c:4d:73:18:f1:f3:a2:
                    0c:f1:68:90:03:54:eb:06:e0:13:72:a2:1a:29:0f:
                    03:ea:9d:2f:b7:7b:f4:c1:f4:e8:b9:60:d2:21:0c:
                    7b:e2:e3:49:4d:8b:ab:c0:22:f4:d0:e2:e6:87:ce:
                    6a:93:22:5c:6a:ea:a2:09:49:37:67:9e:fa:ea:35:
                    38:ec:f9:46:fa:29:34:68:58:20:55:0f:8b:ac:22:
                    74:49:01:72:4a:f6:b2:ff:12:5c:6d:5b:62:75:8f:
                    6a:61:1f:ae:40:50:e8:7d:78:eb:fe:8c:ed:da:af:
                    4c:d5:6b:96:a4:4f:d3:fb:e6:a0:43:b5:46:87:72:
                    78:b0:97:62:f9:d4:ad:1c:a7:42:72:0f:cd:ba:de:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EE:3C:2D:9C:CA:34:82:F3:DB:9B:32:CC:4A:EA:E2:49:0D:10:C5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ccd15fe1-96e9-45ad-96fd-22041e11ce8d/ccd15fe1-96e9-45ad-96fd-22041e11ce8d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:69:8e:36:ae:23:11:cc:5d:e5:eb:58:19:f0:16:58:6d:2f:
         b5:52:0d:f6:3d:ce:f2:9c:47:1a:fc:38:e0:16:73:ab:9d:b7:
         39:25:9e:ad:0d:01:99:45:a4:14:80:1a:83:18:6f:4b:df:8d:
         db:9e:0a:0e:55:d2:b6:3a:ae:00:b9:80:65:8f:b7:d9:5c:27:
         cd:51:2a:13:3d:86:54:3b:de:2a:3f:16:e7:a5:96:9e:1e:db:
         75:17:09:89:f1:88:39:8d:39:9c:ea:68:de:31:00:50:ce:db:
         7f:0b:16:f1:fc:6e:01:5e:4c:aa:eb:75:13:aa:1b:ed:31:e0:
         76:c5:85:a1:5f:6e:74:bb:a4:22:6a:15:55:4b:a2:43:7d:0d:
         f9:37:4a:06:63:fd:73:e0:9f:09:c7:22:6b:52:74:f5:d2:b0:
         27:f9:93:e7:59:c8:25:ac:c2:1e:eb:d8:24:fb:00:70:4e:66:
         e3:be:4d:19:ce:44:24:e9:95:dd:2a:6f:a8:5c:54:87:63:09:
         26:30:4c:08:40:d9:35:25:8e:0a:bf:31:94:76:5c:74:24:a5:
         28:84:b1:29:30:d9:6f:97:76:1a:9d:f7:da:b3:80:25:d0:19:
         ad:e3:87:6d:f9:e1:2c:52:07:07:00:0b:5a:20:b8:01:15:c7:
         81:ca:26:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----