Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer
File:                     d2294e65-4da1-4c07-9bc0-820cdb1e2c48.cer (raw, json)
Hash identifier:          +6DezvcUhcSkSJPx3I83sdRG4kgGgYG/DhpmNxaYrD0=
Subject key identifier:   A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285843B498A215DCA9343CC8A1D720
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 29 Oct 2023 00:45:14 +0000
Certificate not after:    Sat 31 Jan 2026 01:45:14 +0000
Subordinate resources:    AS: 25887
                          IP: 65.254.96.0/19
                          IP: 2606:fd80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b4:98:a2:15:dc:a9:34:3c:c8:a1:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 29 00:45:14 2023 GMT
            Not After : Jan 31 01:45:14 2026 GMT
        Subject: CN=d2294e65-4da1-4c07-9bc0-820cdb1e2c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:77:ef:b1:d6:34:ec:70:a6:cb:1b:6f:6b:
                    cd:ae:b6:4a:d2:c8:dc:04:6b:a3:69:53:25:bc:6e:
                    78:bf:ac:77:3d:c7:a6:30:9a:d6:b0:bc:72:dc:2b:
                    49:1a:1c:47:fa:82:40:08:45:3b:18:89:35:14:6d:
                    88:95:f1:0c:4a:10:43:d9:16:ee:77:aa:9d:58:a3:
                    40:84:ef:10:b9:0a:9d:f2:8d:5f:9f:c8:7e:06:83:
                    52:28:3b:85:58:07:af:25:90:47:7e:a1:3d:f7:a3:
                    f6:30:78:72:d2:07:71:22:d0:6e:b4:84:4f:81:48:
                    e0:e6:4a:2b:d5:ea:d2:2e:b0:c2:51:71:0a:52:a6:
                    04:fa:91:59:20:38:8f:bb:39:37:f9:af:83:1a:26:
                    2f:ff:4c:4d:fd:27:0a:e3:31:ba:b8:51:09:3a:99:
                    68:59:2d:e4:d1:65:98:25:0c:e4:75:66:69:11:7d:
                    ba:f5:17:2b:db:01:84:f4:ef:c4:82:27:ca:77:53:
                    d9:68:9a:76:59:68:96:ef:c6:1d:c5:33:d4:1b:8f:
                    9d:56:66:be:70:9c:2d:8e:1d:42:16:16:af:bf:a4:
                    51:b8:a7:d1:1a:ec:74:69:05:dd:b0:83:8e:cd:86:
                    fb:9a:9c:2f:14:97:a0:f2:7b:57:d3:b4:b1:15:3f:
                    00:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FA:26:93:6E:E2:D1:F0:D6:4F:44:71:93:66:33:0D:F3:27:A1:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d2294e65-4da1-4c07-9bc0-820cdb1e2c48/d2294e65-4da1-4c07-9bc0-820cdb1e2c48.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.96.0/19
                IPv6:
                  2606:fd80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25887

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:99:7f:17:26:fe:31:0e:31:b1:b1:e7:99:34:d8:9b:b5:29:
         c9:4f:dc:e6:da:80:31:36:70:dd:c3:e6:e9:08:14:e6:f2:b7:
         0f:b5:79:86:a9:6d:d2:28:c3:28:48:a8:e0:84:9b:92:8f:43:
         f1:69:45:62:09:54:d3:fd:a8:55:7c:c8:37:46:2c:3a:9a:fc:
         c3:bc:87:59:6c:d7:99:6e:81:4e:0f:90:96:99:a6:ad:0a:3f:
         9e:34:70:64:6b:86:bf:67:56:a6:cd:34:75:e4:9e:ef:71:39:
         21:ab:9c:36:30:71:ae:3a:44:46:2f:8e:7b:20:bc:6f:9c:7a:
         5a:41:85:bc:a1:b4:2c:64:85:54:73:e4:9a:0d:9d:29:45:db:
         8c:7e:b1:f3:c1:92:08:36:cc:3e:00:3e:c3:3e:62:ed:51:1a:
         ca:83:d1:07:5d:85:41:33:9e:e1:55:2e:07:9f:5e:da:c6:f5:
         4b:bd:0f:c1:cd:15:4c:a1:f3:12:60:ed:32:f9:10:61:d0:54:
         59:cb:88:6c:9d:3c:f3:d3:7a:55:fe:ce:fc:52:33:48:18:c6:
         c3:ab:c3:7b:34:29:ab:b4:d6:bf:36:68:80:87:29:4c:a4:c0:
         31:4a:42:c6:ad:1b:5e:6f:32:97:ee:06:37:15:fe:17:26:b2:
         c9:f5:af:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----