Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.cer
File:                     48912ebd-72b7-4f0d-a6bc-40bc4403bce9.cer (raw, json)
Hash identifier:          J+FjNwsnfLuEZbiyHU5gqbzH0CtuU1Wy8B+vLfGGFPA=
Subject key identifier:   CD:5A:71:52:E4:D8:1E:47:EB:4F:86:EE:47:2F:5C:EB:73:6C:C8:AA
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841F055D2FC0352F1801DB50FA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 20 May 2023 00:45:15 +0000
Certificate not after:    Fri 22 Aug 2025 00:45:15 +0000
Subordinate resources:    AS: 36127
                          IP: 134.195.52.0/23
                          IP: 2602:805:6000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f0:55:d2:fc:03:52:f1:80:1d:b5:0f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 20 00:45:15 2023 GMT
            Not After : Aug 22 00:45:15 2025 GMT
        Subject: CN=48912ebd-72b7-4f0d-a6bc-40bc4403bce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8b:45:7c:6b:d8:f3:8e:5e:51:76:c2:ec:2e:
                    b1:50:ac:c5:d3:2e:3b:49:19:37:de:db:68:60:b4:
                    92:fd:b5:3c:c1:20:d9:9e:ae:56:63:d5:a0:90:c6:
                    cc:a8:3a:43:55:bc:8b:a7:fa:af:f3:fd:21:ff:2e:
                    b7:99:03:d9:85:78:4f:7f:f4:dc:b9:ac:a1:9d:c9:
                    66:41:59:1c:0f:40:68:26:c0:7b:01:e7:47:d3:8b:
                    19:ea:5d:44:5c:c8:8c:b7:90:38:ad:ae:0c:7d:4e:
                    59:7a:d2:50:00:15:13:8f:42:25:b5:de:03:24:c8:
                    ea:cc:f0:ea:94:68:b1:52:af:62:13:ac:b2:bd:92:
                    c1:51:24:b3:cc:31:02:da:dc:05:1f:7f:88:aa:8f:
                    7f:bb:fb:39:b9:94:77:bc:67:db:fa:5c:00:a7:64:
                    58:ab:b9:8c:96:f4:71:30:8c:be:03:03:2f:be:f7:
                    bc:cf:10:84:12:5b:e2:37:fa:9c:b1:7a:14:c8:d3:
                    21:63:3d:94:7a:81:68:ba:23:2d:c1:88:0e:e7:e9:
                    6e:dc:2b:66:a6:09:d5:44:93:49:41:63:17:4a:51:
                    ce:70:9b:b4:a3:0e:75:bf:d2:f1:59:3d:16:71:ea:
                    1b:e6:4b:84:5a:66:e2:2f:8d:f3:46:b8:2e:2b:2d:
                    9d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5A:71:52:E4:D8:1E:47:EB:4F:86:EE:47:2F:5C:EB:73:6C:C8:AA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/48912ebd-72b7-4f0d-a6bc-40bc4403bce9/48912ebd-72b7-4f0d-a6bc-40bc4403bce9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.52.0/23
                IPv6:
                  2602:805:6000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36127

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:33:f0:57:78:fb:23:3f:15:0a:d7:f5:bf:cb:29:0a:36:
         4c:b8:4d:58:14:08:cd:0a:c6:a0:d7:78:e0:39:62:c0:8a:6e:
         87:6d:2a:2f:78:39:88:a3:64:0d:6c:8f:48:8b:e3:bd:d7:78:
         29:fa:f5:86:57:de:92:65:c1:4c:27:8a:1e:d6:99:4a:23:0d:
         f3:29:f2:30:c1:6e:54:8b:51:20:39:73:20:cb:52:30:74:24:
         bc:b3:f2:4e:bc:02:8c:01:7b:b1:72:e7:62:c2:d8:22:67:96:
         bc:39:88:fa:a7:c9:f3:0f:3a:fa:6f:9d:17:6f:7a:3f:83:66:
         c7:c6:58:53:4a:3c:c8:9f:32:6f:2e:ab:28:3b:87:b3:32:9c:
         3f:9b:db:72:ef:c7:69:5a:db:da:10:63:e8:c6:84:b6:67:0c:
         f8:ed:82:8c:e0:39:69:a6:50:ef:af:07:0b:7b:37:99:2e:49:
         0f:0f:46:22:53:32:04:41:eb:72:77:c0:2d:0f:e2:82:d9:b5:
         f2:e4:dd:76:5c:61:66:39:36:48:3e:c0:c1:a7:74:23:af:c8:
         c4:da:e8:5f:36:a3:5b:f5:eb:3c:3b:be:39:01:fd:71:ec:9f:
         27:98:27:3e:0a:90:0f:b5:49:63:9e:66:20:e9:75:21:4e:47:
         b0:7d:73:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----