Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7.cer
File:                     3025c657-32e7-49d2-ab95-71634243f0d7.cer (raw, json)
Hash identifier:          TG0F+JGOjrTNjviaf7EAC1AjVMQcHAjOxr0BJSfr2a0=
Subject key identifier:   48:88:16:C1:70:F8:BF:DF:85:BB:D1:58:F8:37:95:0D:63:7E:96:E8
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858439B787CF20EDE585B38470E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 20 Oct 2023 00:45:15 +0000
Certificate not after:    Thu 22 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 14241
                          IP: 216.11.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9b:78:7c:f2:0e:de:58:5b:38:47:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 20 00:45:15 2023 GMT
            Not After : Jan 22 01:45:15 2026 GMT
        Subject: CN=3025c657-32e7-49d2-ab95-71634243f0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:93:10:d1:18:95:c9:52:ec:28:d6:cd:73:
                    20:55:a2:f3:cf:13:23:20:6a:63:2d:a7:43:ec:30:
                    3f:9b:2a:64:30:bb:7b:a0:f3:ae:f0:fb:44:9a:42:
                    a8:85:6c:eb:a2:1e:67:8a:de:94:c8:2e:ff:ad:34:
                    03:48:0a:76:e3:1c:ea:a8:5d:f8:47:a0:81:a9:6a:
                    4c:d6:04:56:09:18:98:c2:45:57:0b:08:da:72:e9:
                    e3:d0:22:e4:f6:34:50:10:6b:d3:d5:b8:31:02:4c:
                    6f:41:dc:e8:22:f1:fc:72:31:22:4a:80:4d:7a:86:
                    44:98:97:e9:4c:6d:1d:3d:0e:1f:aa:a5:3c:04:08:
                    fe:0d:47:f5:69:6f:5e:68:ca:2a:01:60:93:9b:14:
                    c9:bc:61:71:a0:94:ab:a1:5f:a8:9d:c2:1c:62:d2:
                    1e:90:f1:c2:f0:b9:d3:b7:72:1e:2d:c0:85:7c:a8:
                    7a:06:0f:64:cc:8b:7e:25:86:b0:11:5b:86:49:80:
                    71:ec:4d:18:84:0c:23:46:a6:ec:7b:04:ec:e1:8d:
                    6a:5c:59:12:ca:2f:51:3b:aa:09:3d:aa:db:d8:8d:
                    a0:45:99:59:40:09:b7:fc:5f:e3:23:8c:d5:70:55:
                    46:7b:9c:10:d7:b2:e3:69:2b:67:ad:79:28:83:1d:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:88:16:C1:70:F8:BF:DF:85:BB:D1:58:F8:37:95:0D:63:7E:96:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3025c657-32e7-49d2-ab95-71634243f0d7/3025c657-32e7-49d2-ab95-71634243f0d7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.11.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14241

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:26:75:50:ab:90:2a:1c:d7:72:ae:08:8c:f2:1c:c3:ac:
         97:14:97:c2:f4:af:19:ec:71:97:47:ea:c9:a3:bf:f2:7e:bb:
         7f:25:0f:59:6b:44:85:29:df:31:5c:87:81:84:09:7f:13:3e:
         04:4f:b8:3b:83:74:02:8e:25:cd:3d:a2:1f:56:29:05:0d:83:
         91:34:84:2a:af:62:0e:81:ec:f3:a0:9d:c1:93:e6:65:be:fd:
         ee:fe:5e:5e:8d:d1:3e:a7:ca:5f:f8:3f:fc:b1:19:5a:5d:2f:
         b8:56:59:59:5a:74:24:78:cc:2f:79:b0:e7:fa:cc:bf:43:bd:
         33:08:e7:38:cc:88:a8:60:40:2b:ca:ce:b6:5f:ab:01:01:7b:
         a9:b3:2d:50:7b:c4:75:05:a3:a1:18:0e:f8:5e:c7:f2:32:ba:
         f7:aa:da:43:e1:c3:69:d7:6d:da:60:10:99:ef:e2:28:70:c5:
         67:88:63:d7:3b:8a:1a:5e:d5:ad:7d:36:83:87:b6:c1:99:72:
         4f:13:48:1a:13:a4:e4:bf:bf:4a:14:56:2e:c5:61:5a:85:bf:
         0e:08:73:89:f5:a5:fc:b2:73:14:1b:35:e2:7e:22:e2:ea:86:
         a9:55:77:47:c5:f1:5b:9e:21:4e:46:f1:38:0a:70:17:d4:5b:
         be:f8:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----