Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849.cer
File:                     a63e4741-f0d0-41ab-b0c9-866af37d6849.cer (raw, json)
Hash identifier:          qdNfogafvJDu8tYAdaoCJUjpj3c7Hgqh0Fo/3D2nDzQ=
Subject key identifier:   59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858420C40AC1E2E476EA3E4BDEB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 May 2023 00:45:16 +0000
Certificate not after:    Mon 01 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 19694
                          IP: 206.198.242.0/23
                          IP: 2620:136:4000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0c:40:ac:1e:2e:47:6e:a3:e4:bd:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 30 00:45:16 2023 GMT
            Not After : Sep  1 00:45:16 2025 GMT
        Subject: CN=a63e4741-f0d0-41ab-b0c9-866af37d6849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:89:cf:14:a4:b9:ef:84:98:de:75:d0:b8:a6:
                    70:91:1f:51:6f:2a:3a:44:da:da:13:51:b6:25:10:
                    f8:fa:9e:e3:a0:69:26:b1:aa:3f:e8:8d:74:c6:0b:
                    dc:ac:f8:27:9c:36:94:f2:4e:7d:a0:5d:97:30:8f:
                    24:24:db:d8:a7:97:f2:45:a5:a1:3c:17:eb:8b:3a:
                    91:9d:5d:9f:b5:dc:7d:84:e8:53:fb:4d:4c:2b:dd:
                    cd:e6:65:98:4f:db:e0:93:cb:32:cd:99:5e:a4:6b:
                    b2:6d:1a:37:4d:0f:c5:f9:29:98:bc:56:74:b7:0f:
                    b3:4f:3f:66:ce:80:89:fb:ad:e7:1b:5f:cf:72:44:
                    7f:92:b4:8d:71:df:b1:7d:04:d2:a1:60:59:ce:8c:
                    66:77:52:21:cc:26:6e:42:67:18:e8:ce:89:9a:4a:
                    df:19:02:18:af:3e:3a:57:81:f1:f4:c2:dc:f5:20:
                    9b:93:12:2b:20:a2:f9:04:50:56:a6:f9:03:22:9d:
                    74:6b:3f:e2:99:e4:59:2d:41:a4:bb:eb:0e:3d:dd:
                    90:a9:e3:bf:cd:b8:f3:e9:71:3d:f5:9e:18:0d:2b:
                    a3:6e:a4:67:6e:60:5a:40:aa:d7:f3:d9:0f:5c:5e:
                    23:41:b3:4d:03:4a:df:bb:98:fc:42:53:9e:29:10:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DF:EA:83:B8:E9:AF:13:F0:43:07:0E:6D:BE:F3:C7:D3:24:0D:E5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a63e4741-f0d0-41ab-b0c9-866af37d6849/a63e4741-f0d0-41ab-b0c9-866af37d6849.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.242.0/23
                IPv6:
                  2620:136:4000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19694

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:00:f9:f5:25:61:25:e5:c2:f4:96:8f:cb:13:a1:30:ab:f2:
         f4:f8:71:5f:a2:8c:5a:19:ba:a9:b6:ec:b9:3d:80:7e:e8:0e:
         1b:10:26:e7:63:cf:8e:0e:fe:59:98:03:e5:98:48:36:e6:25:
         2f:8c:e6:f0:03:e3:65:13:30:b3:1b:aa:e8:82:f0:00:3b:2b:
         4e:1e:87:c3:11:79:69:46:5f:04:c9:d8:b4:c9:21:71:82:21:
         57:40:cb:f7:81:9c:5c:4a:27:3d:93:3d:8a:de:bd:70:c5:c1:
         11:d8:9a:de:e1:94:53:44:1e:0c:17:28:40:fe:0d:19:ec:01:
         f3:71:14:55:0f:d3:9e:f0:85:01:c9:14:07:20:13:cf:0c:b1:
         e6:09:81:68:6f:74:6b:27:5e:32:5d:db:13:4b:77:04:0f:0e:
         42:31:cd:66:d9:46:92:f1:52:8a:6a:41:11:ce:ca:04:03:33:
         24:c3:5b:86:c0:53:8b:a9:f3:bc:22:86:8f:f7:13:4f:62:bd:
         fd:f1:96:aa:59:2a:a8:d7:cb:c8:f3:ba:55:a9:8a:ca:14:d1:
         e3:33:d6:8e:7b:7e:6f:ad:d2:a5:02:1c:17:a4:6d:52:ff:8e:
         b9:d5:13:04:78:5e:40:6d:ed:14:72:48:9f:8e:f4:b7:68:50:
         06:4d:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----