Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer
File:                     e910a8d5-fe13-4a76-8506-99e14c6c61d4.cer (raw, json)
Hash identifier:          qUABROHOP7Tu1bR8XK1QL7ZXWV/KnC2H9hxFw8hQxDY=
Subject key identifier:   3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584393186E2165F85A3518890780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Oct 2023 00:45:15 +0000
Certificate not after:    Mon 19 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 395485
                          IP: 198.179.226.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:93:18:6e:21:65:f8:5a:35:18:89:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 17 00:45:15 2023 GMT
            Not After : Jan 19 01:45:15 2026 GMT
        Subject: CN=e910a8d5-fe13-4a76-8506-99e14c6c61d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:13:61:12:f1:27:d4:68:a2:0c:96:a3:5c:c5:
                    13:d3:0c:3f:c5:fb:b5:51:a8:c2:4a:30:af:e4:b9:
                    8a:bb:76:72:fd:d7:42:7b:97:50:78:d5:7f:46:df:
                    03:ae:e5:f7:d5:29:8a:45:2a:dd:93:f7:14:68:00:
                    47:cd:dd:72:f6:9b:59:33:a1:6a:51:b5:ae:3f:4e:
                    43:e2:64:ec:99:9d:bb:d1:2d:ae:7b:0f:8d:b1:d0:
                    60:07:d8:b1:46:fa:97:f9:d5:cc:3d:15:a3:f0:3d:
                    75:45:4b:a9:89:4c:aa:39:7d:68:5b:c8:4d:b0:7e:
                    89:ee:5d:47:b0:f2:a3:49:c7:cb:9f:c3:29:c9:21:
                    af:dc:5c:79:76:c8:4c:fd:d2:a5:c3:1d:05:61:ba:
                    ab:99:31:b0:f5:3e:ef:65:d7:53:c0:3c:43:e7:03:
                    81:1f:50:81:31:09:7f:0c:ac:4c:13:2a:1a:2b:05:
                    ee:84:f1:d3:80:59:b9:71:17:73:79:2a:ba:d6:e7:
                    dd:d5:42:cb:c7:33:5b:48:90:75:4b:dd:e2:f6:ac:
                    28:d8:45:12:58:15:f4:06:aa:a1:7a:57:6d:36:3f:
                    31:1d:d3:8e:eb:a5:ee:d4:c2:32:13:99:18:4c:7f:
                    5e:c5:e1:2d:63:f9:b6:cf:3e:49:df:9d:36:a9:48:
                    6b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3E:31:44:54:55:A1:8A:96:DB:60:0D:7C:E1:4C:8A:6A:62:38:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e910a8d5-fe13-4a76-8506-99e14c6c61d4/e910a8d5-fe13-4a76-8506-99e14c6c61d4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.179.226.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395485

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:d8:9f:4d:b1:e0:9d:7f:20:93:ca:01:7c:91:0e:63:a3:1e:
         ef:74:3b:79:c4:e6:90:d6:f6:5e:08:7d:fd:e8:1e:27:4f:09:
         e4:78:36:50:f7:73:48:32:8c:97:d7:60:e5:00:01:53:93:07:
         e8:5b:01:43:9d:c6:3c:a1:0d:71:d3:7f:cc:0d:f8:eb:f0:ba:
         bc:5d:c8:3c:53:d2:32:9a:d2:7d:7d:77:5e:5c:dc:b8:6b:cd:
         24:14:6b:0e:84:18:99:a3:80:ce:b0:52:bc:ef:09:0f:fb:b9:
         dd:cb:86:3e:a2:6d:4f:c7:f7:e9:2f:9a:3f:ee:d5:3e:76:62:
         ff:02:fe:46:60:25:41:ea:50:65:ec:21:ce:e3:20:df:2a:06:
         11:12:99:0a:86:89:94:f0:b7:4c:a7:39:65:ba:b7:f7:8e:5d:
         31:8f:50:4d:2b:46:84:7b:d2:67:e6:84:93:ee:b2:6a:a8:f4:
         5f:13:28:29:8a:61:c0:f7:6e:d4:b7:3a:a6:03:10:b5:b4:25:
         d3:f4:31:75:10:9e:ee:0d:9b:b9:f5:98:92:03:04:06:f8:e3:
         80:a4:bd:ca:67:fd:59:f5:8f:b9:fc:14:a2:9b:c6:d2:4e:dc:
         30:c4:2b:e3:5c:ba:f6:10:2f:33:a9:dc:c3:0e:c6:fe:15:ec:
         68:39:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----