Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff.cer
File:                     872ab566-07c0-4d6b-ab98-45aed75350ff.cer (raw, json)
Hash identifier:          WaE740lG9g8bf2FtFSYt+PDJk1GHyOuNn29AFVKioDM=
Subject key identifier:   BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16ECD4C1FB2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 23 Aug 2018 12:09:09 +0000
Certificate not after:    Wed 23 Aug 2028 12:09:09 +0000
Subordinate resources:    IP: 184.169.128.0/17
                          IP: 2620:107:3000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4c:1f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug 23 12:09:09 2018 GMT
            Not After : Aug 23 12:09:09 2028 GMT
        Subject: CN=872ab566-07c0-4d6b-ab98-45aed75350ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:37:49:d1:ea:7e:cd:e5:c3:c7:dc:d2:4d:
                    b4:f8:04:f8:a8:25:65:7e:02:03:51:17:e3:79:c1:
                    80:d7:50:4d:34:93:26:c9:ab:41:8b:f6:57:84:23:
                    6c:5f:2b:97:c1:a7:96:97:28:a0:cd:d2:6c:9c:dc:
                    5d:40:5e:6d:a9:3f:ab:a8:3f:56:79:db:ed:6e:3d:
                    ba:34:6f:b8:21:1a:57:4b:60:2c:dc:f8:8f:de:20:
                    b1:0d:59:03:f6:af:b2:90:ab:f0:6d:ef:ec:55:a6:
                    97:4b:6b:bd:3b:8c:b1:66:be:e3:88:12:0f:3e:b2:
                    d4:3f:a5:ad:5c:37:2e:aa:20:a4:8d:05:43:82:95:
                    e7:5d:29:ea:64:aa:24:e5:60:77:5c:a8:ef:32:0f:
                    9e:61:5d:6d:7a:9c:4c:25:9d:8a:b1:95:66:95:df:
                    8b:23:19:3c:4f:fe:b3:fb:eb:51:6e:d3:eb:e2:4f:
                    cb:96:ac:e5:83:f9:a5:62:55:e1:60:26:16:e6:ed:
                    ae:90:dc:23:da:0e:5e:71:b4:77:6e:18:f8:b4:fa:
                    d6:9a:5f:ae:fb:ab:d5:97:78:05:69:ec:52:42:68:
                    00:dc:2d:a2:37:c6:ff:79:ad:79:c8:3c:d0:7d:1b:
                    67:a2:e3:42:3e:fc:8c:a3:21:98:8f:c9:7f:c8:5c:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DE:A2:76:5E:C6:F2:C1:C6:DA:16:E7:B8:20:85:D5:AD:11:67:F0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/872ab566-07c0-4d6b-ab98-45aed75350ff/872ab566-07c0-4d6b-ab98-45aed75350ff.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.169.128.0/17
                IPv6:
                  2620:107:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:dd:74:1a:e8:bd:93:ee:73:aa:97:ba:04:b4:df:21:e6:
         d6:e6:8d:e3:34:cc:3f:5e:8e:fd:a8:63:ff:3a:57:7b:a7:e1:
         f3:55:21:8c:3a:b1:70:c6:2c:1d:fb:50:2c:5d:aa:32:6f:8f:
         84:7b:cb:b0:1f:54:80:83:bc:27:f0:61:c9:f7:19:a6:24:76:
         a9:14:4a:9d:e3:e6:a0:1c:03:9c:59:f4:62:be:77:50:dc:5d:
         1a:00:30:b3:a6:96:ea:7a:e2:47:57:ee:d5:f0:34:8b:60:8c:
         d2:55:c7:b5:0a:80:40:80:e1:6e:4b:9d:da:76:2b:e9:3e:72:
         6e:bf:a5:19:45:72:96:a2:f2:2d:97:4d:23:84:24:6e:5a:6f:
         40:a7:93:35:e5:a7:47:4c:a0:c0:8c:92:ed:8e:95:bb:dd:41:
         7d:15:44:bd:2e:60:1e:30:92:f6:01:6a:3b:91:73:1d:1d:36:
         84:c4:7b:02:de:31:b1:1f:59:99:ef:35:0e:07:06:2c:74:f1:
         21:4a:dd:ae:28:86:f5:7f:50:3d:fa:12:fc:e4:46:e7:0c:7a:
         bb:30:7e:b7:b6:6c:e6:f0:13:62:c2:ea:61:5a:bb:86:e7:7b:
         7a:21:17:69:53:4f:1f:03:25:53:c7:e0:a5:c5:8e:b3:fa:4a:
         3a:f7:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----