Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer
File:                     d9e22f6d-5551-4712-9f95-3008c51223ec.cer (raw, json)
Hash identifier:          naBFg7hltfrUSvRl97MSSaUuqVKShejmt/ZhOxLTXJE=
Subject key identifier:   28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E6A41E5DFDA58CF74B9E5800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 May 2023 13:24:55 +0000
Certificate not after:    Mon 18 Aug 2025 13:24:55 +0000
Subordinate resources:    IP: 131.95.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e6:a4:1e:5d:fd:a5:8c:f7:4b:9e:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 16 13:24:55 2023 GMT
            Not After : Aug 18 13:24:55 2025 GMT
        Subject: CN=d9e22f6d-5551-4712-9f95-3008c51223ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:ce:f2:8e:a7:e3:24:28:85:b8:e3:70:88:
                    74:07:4e:b3:df:87:3b:77:1e:c4:62:70:9e:e0:f4:
                    31:1e:92:91:45:57:42:1d:0f:09:68:fd:18:95:90:
                    c2:59:4b:cf:8a:b3:0b:bb:7c:94:5b:cc:40:4c:7d:
                    7b:b7:7f:ed:06:56:eb:72:87:88:3a:19:6a:6b:c2:
                    78:84:c4:5b:1d:e3:84:50:55:6e:aa:cb:11:18:4c:
                    e5:1a:94:27:0c:2a:12:fa:66:4e:b7:77:69:61:f0:
                    12:02:71:1b:5a:68:67:23:c4:6b:2d:28:80:38:eb:
                    9b:fb:af:84:35:1c:78:34:86:46:77:ac:eb:66:07:
                    d5:cc:4c:aa:8c:b9:9e:fd:05:8b:0c:f2:4c:ae:63:
                    8d:07:f9:ba:37:48:81:92:66:74:b8:df:3c:7c:eb:
                    99:ae:67:1c:6a:bd:e2:bc:cc:43:8c:c8:31:52:a7:
                    95:b4:d0:cb:8c:08:0a:c7:11:96:2e:86:46:03:68:
                    84:4a:c5:2d:a6:6e:f8:f7:b6:26:a2:2b:0e:3c:05:
                    65:85:f9:82:1c:0a:c5:f6:37:04:01:56:0a:a0:d1:
                    19:09:e7:99:f5:dc:0c:6b:8c:d3:0b:8c:92:6a:bd:
                    29:8b:f6:44:ca:2c:c8:b0:db:1b:55:46:c3:5f:28:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c1:74:56:5f:1e:f9:e9:85:c3:a2:3d:27:65:aa:30:12:fc:
         99:c9:44:47:38:ef:39:91:5d:db:2f:23:2b:98:e1:1a:5f:66:
         ca:2f:b6:ec:92:d0:75:50:a5:eb:34:84:d3:ea:72:84:73:cb:
         37:e6:f3:9d:7e:1c:89:01:7c:c9:6a:c3:51:67:48:87:2c:fe:
         35:62:34:59:11:ab:87:2a:97:de:af:3c:12:b3:7f:de:28:44:
         4a:8f:5f:5d:88:44:f4:a5:a1:35:6b:77:cf:20:0b:6b:5b:76:
         20:5a:86:ee:60:35:81:78:e1:cd:d2:bd:43:3e:f3:bd:ec:43:
         cb:da:10:87:86:e1:38:b3:50:3d:7f:55:cd:1d:71:f7:65:14:
         dc:ad:2a:72:d6:b1:6f:34:be:a4:97:be:4a:c4:5e:39:4a:86:
         6f:9b:ef:6b:f5:b6:b2:df:df:7e:a6:4d:7a:e9:b2:c8:0f:bc:
         4b:3c:60:51:5d:91:22:63:d8:fd:12:af:43:85:d9:5d:13:7d:
         7c:cc:a9:15:7f:39:b4:79:0f:0a:6f:01:98:ad:0d:ea:98:f6:
         43:e4:e1:1c:cc:2a:3a:11:dc:b6:7b:4d:4b:44:7a:e7:8f:ba:
         fd:2d:57:0c:5e:88:a4:91:55:5c:1c:29:1b:5c:4a:4d:8d:d2:
         cf:bf:4e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----