Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77a742a9-6c8b-4355-870b-eefb61f883fe.cer
File:                     77a742a9-6c8b-4355-870b-eefb61f883fe.cer (raw, json)
Hash identifier:          LODwmUlqTekWmqYQ3XBPTh7LeK0+KMlr8332UeHd5uw=
Subject key identifier:   DB:01:0A:B7:07:FE:01:97:26:3D:8D:9F:9B:C6:8E:FE:DF:B3:71:3D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842CE87464552C6A49B38676380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77a742a9-6c8b-4355-870b-eefb61f883fe/77a742a9-6c8b-4355-870b-eefb61f883fe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77a742a9-6c8b-4355-870b-eefb61f883fe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:54:21 +0000
Certificate not after:    Tue 09 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 14871
                          AS: 16410
                          AS: 63344 -- 63345
                          AS: 394926
                          AS: 395028
                          AS: 395104
                          AS: 395413
                          AS: 396065
                          AS: 396138
                          AS: 397004
                          AS: 397738
                          AS: 397747

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:87:46:45:52:c6:a4:9b:38:67:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug  7 14:54:21 2023 GMT
            Not After : Sep  9 00:45:16 2025 GMT
        Subject: CN=77a742a9-6c8b-4355-870b-eefb61f883fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:57:6b:d1:9a:26:ec:7c:b8:c9:9e:57:83:cb:
                    2c:fd:44:c4:e5:4f:07:a1:23:8b:49:96:46:11:98:
                    5a:29:eb:56:94:1f:51:8f:8d:e7:19:60:cb:32:7d:
                    2a:d7:e0:8f:a9:89:b1:ac:cc:db:c1:d2:7b:85:6b:
                    19:ae:15:f3:da:f6:10:f1:b9:1c:07:2a:94:09:a7:
                    5a:29:8b:4b:d6:86:cc:f1:df:78:5f:76:14:a0:f3:
                    e7:3d:20:74:94:77:bb:fe:39:1e:9d:95:6d:47:2d:
                    4d:b7:29:0e:83:5c:f9:f8:e0:cd:6a:24:c6:d7:c1:
                    aa:1c:7c:51:3f:3e:f4:be:34:83:7d:48:ea:68:89:
                    8e:a9:eb:0b:86:eb:06:3e:05:13:dc:08:33:d2:91:
                    ac:17:82:17:c8:03:84:b7:4e:7b:7a:1f:04:55:d4:
                    52:45:cf:70:bd:7e:7f:a9:2c:41:16:39:d3:3f:d6:
                    6a:99:4a:bf:51:dd:7d:3f:b4:05:3a:77:31:7b:d3:
                    c8:83:d1:ea:e8:d1:07:5f:8c:6c:f8:d7:12:69:ca:
                    b4:c5:0a:fc:dd:42:b1:29:53:14:e1:25:7e:85:0e:
                    c9:9e:68:f4:21:4b:b7:66:48:de:c2:f5:08:5a:f6:
                    1e:d1:17:7d:de:f6:54:c8:a9:e9:5b:b0:29:98:85:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:01:0A:B7:07:FE:01:97:26:3D:8D:9F:9B:C6:8E:FE:DF:B3:71:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77a742a9-6c8b-4355-870b-eefb61f883fe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77a742a9-6c8b-4355-870b-eefb61f883fe/77a742a9-6c8b-4355-870b-eefb61f883fe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14871
                  16410
                  63344-63345
                  394926
                  395028
                  395104
                  395413
                  396065
                  396138
                  397004
                  397738
                  397747

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b7:b9:29:e3:a3:2c:f7:c0:15:80:90:12:e0:d7:d0:4d:20:
         2c:87:b2:71:ba:30:00:30:db:13:f4:a9:17:53:bf:1c:79:5c:
         c5:39:62:53:14:b6:2d:e4:a1:2e:b8:60:83:83:c6:ed:0a:73:
         18:e1:25:cf:13:84:92:06:9b:a3:2c:d9:4f:4d:a1:af:f8:97:
         86:65:ad:e4:f1:85:cf:82:a6:ec:9b:44:de:cd:a4:32:ea:c8:
         5a:51:28:80:b7:28:09:5d:02:ec:0d:4d:b3:c8:d0:90:29:d9:
         ce:15:3d:03:c7:51:b1:33:54:aa:8e:f2:53:2d:17:1d:3a:43:
         c2:f6:8b:cb:b0:e4:22:b8:9c:a2:80:0c:5d:51:35:86:81:05:
         2a:29:8b:16:d0:93:83:30:cb:f5:2b:77:97:53:bb:5d:8b:bd:
         0f:16:47:8d:4b:05:26:ba:40:83:d2:93:a3:98:20:b6:89:32:
         a0:e0:6b:13:d4:2d:9a:78:16:e5:70:a7:ef:2d:cb:c5:4e:0e:
         dc:29:83:8d:22:8b:7c:e2:22:55:50:f9:2a:4f:2f:99:65:45:
         ae:00:98:e0:7d:4d:04:cc:05:be:d3:a8:ce:27:b3:ed:8f:cf:
         c7:73:81:b1:cf:63:9b:88:bc:35:3f:0c:c0:ee:51:75:7d:57:
         e2:6d:55:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----