Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer
File:                     d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.cer (raw, json)
Hash identifier:          wOePU6zxhCHsvPxhIpWZVh2xH95giFyA3Xbol4oSzXw=
Subject key identifier:   CD:AC:48:51:9E:78:0B:88:20:9E:96:6F:F6:98:4E:A6:8F:44:84:30
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285842F3F7818DBBA847A6A0CF9100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 21 Aug 2023 00:45:23 +0000
Certificate not after:    Sun 23 Nov 2025 01:45:23 +0000
Subordinate resources:    AS: 693
                          IP: 129.74.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f3:f7:81:8d:bb:a8:47:a6:a0:cf:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Aug 21 00:45:23 2023 GMT
            Not After : Nov 23 01:45:23 2025 GMT
        Subject: CN=d0930e1f-1a25-4d85-8ca1-12fed5aa27fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:d9:84:65:29:cd:df:c7:5e:c1:2e:2b:88:
                    7e:13:50:7d:0f:7c:71:82:a8:4b:09:ba:db:2a:1d:
                    6b:ad:5e:dd:8f:23:b5:00:a3:da:ad:0a:e1:89:3c:
                    19:ce:99:da:d7:6a:6c:8a:5e:a0:b6:47:1e:b9:8d:
                    46:36:44:7f:3d:c1:1e:d3:36:1c:61:05:fc:dd:01:
                    ee:0c:53:10:ea:bf:59:6b:f5:c1:7a:2a:df:a9:6a:
                    79:e9:e7:75:e8:e3:15:71:3d:06:2a:0a:c7:e8:a8:
                    28:00:62:db:e7:c0:4b:5f:15:1a:dc:8c:16:8e:02:
                    fa:10:01:d3:0a:9d:9c:4d:8d:79:73:0a:ff:cf:fb:
                    c1:88:f9:da:0f:85:8b:cd:7d:c6:ac:11:63:54:da:
                    72:2b:16:1b:43:d9:3b:ea:32:7b:5b:8e:d1:a6:94:
                    4e:98:3a:e7:0b:c6:90:c5:f4:2c:cd:bf:10:80:f7:
                    52:38:36:e0:ce:57:67:ab:3d:f7:0d:c1:c5:4d:f9:
                    48:ca:81:33:b0:3f:b2:72:61:99:6c:b3:73:0f:7e:
                    25:74:47:0e:a7:6c:9c:b1:22:93:f7:bf:f2:30:c4:
                    aa:2e:fe:5b:3f:2d:5d:5e:56:78:45:0c:e2:da:79:
                    e5:9a:d9:7f:ff:26:65:45:dc:4f:9e:5d:42:57:04:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AC:48:51:9E:78:0B:88:20:9E:96:6F:F6:98:4E:A6:8F:44:84:30
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd/d0930e1f-1a25-4d85-8ca1-12fed5aa27fd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.74.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  693

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a0:8d:34:65:0d:cb:e4:14:11:d9:68:35:50:bf:43:0a:5c:
         6d:24:78:e2:06:50:ce:b0:9f:49:82:04:fa:44:c0:6a:09:b2:
         aa:c9:ae:10:dd:50:b1:30:25:5e:53:3d:90:e3:55:78:b1:ab:
         1d:f9:19:a5:7c:93:e9:25:8f:51:32:48:0b:92:5d:85:51:76:
         04:26:0a:51:a1:5f:c8:af:41:b7:f4:79:8f:1f:2e:23:bc:d1:
         58:6c:24:77:5c:8d:19:26:12:9d:db:12:d4:a0:61:39:0f:8d:
         00:15:78:83:c1:21:6c:18:fc:e1:79:8f:7a:4d:c1:10:b8:3b:
         e1:82:66:2c:f6:c6:b0:54:8b:e5:dc:37:34:09:9f:ab:f8:61:
         0d:bf:e5:91:ab:f3:01:d0:04:2a:0c:7a:8f:a6:ba:92:55:65:
         14:cd:05:ee:07:67:95:ce:b8:f7:0e:1f:13:eb:cd:49:2f:09:
         56:19:c1:27:31:22:34:69:c1:be:d0:48:13:4b:18:7c:b2:63:
         bf:3c:68:c0:6b:4a:2c:fe:f9:66:ad:d7:b4:4a:15:99:11:d7:
         a1:36:e7:fe:bb:9e:15:5f:78:f1:89:02:f4:26:3c:46:f8:39:
         d7:1c:1d:a0:5c:1e:56:cb:a7:ff:c9:3c:f3:03:85:73:3c:22:
         ef:6f:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----