Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
File:                     5dd53d9e-382d-4f16-b9d4-08067d598d81.cer (raw, json)
Hash identifier:          92McvWJxuaf4GXyBdJHiyLdQzXue9d1S0otaI4gJ1nU=
Subject key identifier:   8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285843501812FD437FB7EF5034AB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 23 Sep 2023 00:45:22 +0000
Certificate not after:    Fri 26 Dec 2025 01:45:22 +0000
Subordinate resources:    AS: 2635
                          IP: 87.250.160.0/19
                          IP: 192.0.64.0/18
                          IP: 198.181.116.0/22
                          IP: 2620:115:c000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:50:18:12:fd:43:7f:b7:ef:50:34:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Sep 23 00:45:22 2023 GMT
            Not After : Dec 26 01:45:22 2025 GMT
        Subject: CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:50:f4:32:19:c3:f7:1d:18:63:5b:c8:0f:
                    63:46:53:d0:b5:1a:f8:ce:ce:3b:8e:16:88:56:89:
                    9a:2d:06:9c:3a:aa:61:3f:a3:b8:dc:02:55:6a:d8:
                    9b:de:15:17:24:b9:c3:71:25:a1:67:7d:58:8a:16:
                    09:2a:6d:28:43:45:76:e6:30:2c:b7:a0:65:5c:1d:
                    29:54:b9:87:e9:1f:23:fe:9e:7f:9f:05:d3:a4:fa:
                    0a:23:2b:1b:33:bc:03:09:18:9d:24:03:c2:30:06:
                    42:86:fc:27:72:ee:1e:c8:49:1e:cc:a8:6c:87:70:
                    57:31:4d:a8:be:ac:5c:65:fb:3b:b3:43:6e:fa:5f:
                    eb:4d:d7:05:d8:52:52:a2:fb:df:7b:0e:92:ce:b0:
                    fc:6f:e9:95:6b:1c:3e:29:93:18:48:b0:70:4e:b8:
                    d6:0f:84:c0:db:e4:05:4f:d4:f1:84:ba:06:0e:91:
                    c5:6d:7f:72:b1:6d:29:23:0d:78:da:f6:3d:71:56:
                    c9:59:4f:34:7d:40:80:0e:7e:0d:ff:fb:cd:fc:65:
                    7f:7a:9f:b8:21:fa:17:87:07:7e:31:ee:66:b3:e4:
                    cd:7b:45:8d:fb:e0:54:76:6f:f9:04:07:2b:70:98:
                    2b:db:76:57:cc:d3:71:8e:66:85:ef:dd:a9:3d:16:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.250.160.0/19
                  192.0.64.0/18
                  198.181.116.0/22
                IPv6:
                  2620:115:c000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2635

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:1f:12:37:4d:1a:be:02:93:3c:02:0e:ae:4c:65:6e:78:ec:
         f3:2f:b1:3a:cd:15:50:25:d6:bf:21:6a:34:a3:2d:70:72:e2:
         6b:98:c9:e9:b6:50:e2:04:67:27:32:c4:dd:84:e7:46:ff:06:
         a2:f4:90:5b:c1:3a:c4:b4:da:51:a3:43:cf:ef:30:ac:25:96:
         0e:81:5e:5a:b3:22:20:a4:75:bb:b2:b0:b5:89:d1:9d:ea:9a:
         bf:45:10:3f:01:55:05:78:92:22:88:bb:97:ea:71:78:71:c6:
         67:b9:19:d5:06:3d:46:75:49:ed:07:14:bb:d8:41:64:70:13:
         24:f2:00:6e:48:87:59:8f:a4:04:83:0f:80:11:ac:9c:e2:6e:
         60:af:1e:df:3b:3c:dd:63:45:83:f8:e9:6f:10:04:fc:fd:ac:
         b9:00:0f:79:ad:7e:6e:7d:86:c2:71:77:f2:5f:38:14:9d:eb:
         93:46:9d:50:90:1d:6e:7b:49:99:2a:64:0d:0a:e1:b3:55:ef:
         f9:0b:ce:48:07:de:89:6b:07:9d:24:2b:85:fe:98:29:fb:65:
         65:48:32:85:1c:2f:9f:27:3e:f5:ea:71:af:cf:7d:2c:9e:b5:
         70:df:54:c1:f4:76:1e:ad:25:fe:86:79:ab:1f:11:a1:45:1c:
         35:79:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----