Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer
File:                     f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer (raw, json)
Hash identifier:          6eB1x+xTk4gOLSmfWQWI18V4EaanxxKWeSzUYWZfmmQ=
Subject key identifier:   B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842F12CCF1A95B2E73472883990
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 20 Aug 2023 00:45:21 +0000
Certificate not after:    Sat 22 Nov 2025 01:45:21 +0000
Subordinate resources:    AS: 393256
                          IP: 204.124.152.0/22
                          IP: 2606:fec0::/32
                          IP: 2620:c3:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f1:2c:cf:1a:95:b2:e7:34:72:88:39:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug 20 00:45:21 2023 GMT
            Not After : Nov 22 01:45:21 2025 GMT
        Subject: CN=f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:71:d9:5e:2f:5d:29:63:27:6f:98:3f:2f:c4:
                    e9:ad:d4:62:91:98:0c:07:34:ff:39:e1:40:b7:2a:
                    96:cd:f0:7c:56:2b:72:b7:57:24:eb:55:b2:9a:69:
                    a1:86:fc:b0:4a:30:3a:99:c3:be:1d:ca:62:0a:3f:
                    cf:31:e6:50:85:f5:34:9f:79:6e:bd:a7:01:f6:91:
                    68:6d:d1:02:21:10:2d:10:26:27:9b:ac:a0:99:7c:
                    61:da:8c:62:39:ba:05:ad:b0:be:f7:51:b8:b0:48:
                    b8:2a:86:cb:f8:74:55:aa:8c:d4:87:69:95:4e:4a:
                    32:7f:b8:46:dc:eb:41:55:ab:51:06:ce:6f:90:1e:
                    91:37:25:3c:12:87:fd:19:d4:51:af:2f:02:a3:bb:
                    88:a0:34:75:74:85:da:52:67:6e:3f:31:6b:8d:3b:
                    1a:1c:de:e0:f1:a8:1d:9d:be:3d:41:03:9f:fd:19:
                    c4:1e:0f:a1:54:7e:c2:e4:a9:d2:e6:08:27:55:8b:
                    d6:d1:35:d0:45:2e:b9:87:ad:8f:56:44:09:4c:ba:
                    42:b8:d7:6d:42:7a:c0:b6:1e:7a:b2:cd:71:35:7e:
                    eb:d5:1f:09:d9:ce:2c:6c:0f:66:d1:8b:8a:a9:f2:
                    53:aa:73:72:13:40:0d:98:9a:06:fd:6a:33:d4:a6:
                    36:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.124.152.0/22
                IPv6:
                  2606:fec0::/32
                  2620:c3:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393256

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:fc:22:c0:90:c6:8a:5e:1f:ea:8d:d8:68:6f:83:ce:db:63:
         ce:88:4c:d9:97:9c:d8:f0:d4:af:25:8e:35:77:28:43:02:ee:
         6f:ee:7f:19:6c:f8:97:9c:68:52:d7:8a:c4:d5:1c:9b:24:58:
         bd:d5:eb:5d:4d:67:ca:10:94:b4:64:0b:de:f1:1c:8a:4a:64:
         7d:21:3d:c7:e7:d0:78:dc:ce:71:f8:66:76:54:31:16:78:cf:
         89:60:44:a3:75:de:05:11:45:f1:a1:2a:60:d2:8a:d3:a5:07:
         f9:7b:d8:c7:3d:2b:50:05:ea:13:51:95:45:38:fd:ee:02:50:
         9d:ed:07:01:5d:20:31:62:9a:dd:7b:c2:42:e5:14:5d:11:98:
         29:d6:ae:84:ab:51:5d:50:76:b2:a6:e1:b3:2e:41:86:46:da:
         c1:cf:8e:29:29:d3:ce:df:08:1a:c1:5a:4f:a2:ad:28:04:03:
         3a:47:43:e5:ad:6a:4f:ed:ff:16:66:6a:95:3c:9c:b8:a1:cc:
         c9:01:7c:66:c9:9a:7e:57:c7:15:34:fd:5a:e5:6d:51:b8:45:
         69:36:4e:9a:42:02:35:3d:30:a3:fa:1d:62:18:a6:f3:37:b5:
         70:4a:ac:b8:d1:6a:76:54:44:7a:20:5e:45:04:e2:c0:e5:f7:
         99:ae:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----