Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
File:                     8b53f56f-a586-4e85-9c61-c3a278e13120.cer (raw, json)
Hash identifier:          nx9Y9oiz4nSQZo0M42WSJuZspi4s+8761k5SlHMMmZk=
Subject key identifier:   21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584485A672FA15C0B283719CCB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 11 Jan 2024 21:57:01 +0000
Certificate not after:    Wed 15 Apr 2026 20:57:01 +0000
Subordinate resources:    IP: 144.81.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:85:a6:72:fa:15:c0:b2:83:71:9c:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 11 21:57:01 2024 GMT
            Not After : Apr 15 20:57:01 2026 GMT
        Subject: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:c5:40:cc:46:9c:35:35:6a:ff:20:b4:64:
                    9a:3e:d3:4b:bb:a5:c1:e6:94:d5:be:fd:c7:b8:4e:
                    99:0e:fe:2b:a8:93:b3:73:f4:b5:9d:2d:95:70:ae:
                    b5:33:81:d6:cd:be:ae:94:3b:2f:81:95:3a:ef:51:
                    22:0a:ef:fc:cf:2c:74:75:33:11:22:fc:6b:3f:9e:
                    c7:77:d1:b6:ce:f8:9c:eb:31:d6:5f:c3:d7:08:ac:
                    44:07:7c:e6:0c:de:07:69:33:e0:0c:5b:92:18:b6:
                    b2:90:3b:6d:9a:7e:fa:ba:8f:e4:52:7b:96:14:4c:
                    83:f8:3f:0e:74:ae:7e:66:61:54:08:56:6c:3b:04:
                    9e:ae:ca:51:65:ad:0b:dc:90:4f:61:5c:a8:6a:38:
                    4f:c2:f8:94:c2:88:47:65:a6:43:2f:34:65:e1:c9:
                    27:f0:eb:59:e4:5f:81:60:83:7a:d8:14:90:e4:05:
                    f4:48:53:3d:3e:94:45:2a:e0:58:84:98:18:c2:50:
                    4d:5d:04:d5:c3:c2:7b:98:0b:4b:11:1f:41:5e:17:
                    de:2e:28:48:cb:dc:1f:32:b9:e0:0d:4d:f8:97:09:
                    5a:52:43:ee:f1:8b:59:ce:94:d3:c5:cb:85:7c:0a:
                    b9:6c:2c:d7:46:9f:bb:02:8a:b6:a4:4d:68:0e:a1:
                    74:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c3:a0:cd:1e:37:bb:68:df:41:9c:1d:12:0b:12:05:f7:79:
         d7:8f:be:01:05:79:1f:db:6b:18:72:8c:b5:81:bb:6b:2a:09:
         b4:20:9b:3f:99:22:ad:cd:ff:c9:40:9c:1b:3b:5d:4b:ea:66:
         d8:b4:ed:58:be:cf:60:44:af:8a:cc:4f:b0:e0:f6:52:58:5d:
         00:ab:4e:11:c7:fb:91:ca:a3:28:4e:f1:f3:36:c8:33:83:c7:
         cd:4d:8d:a8:fd:15:80:46:6b:8b:bf:6e:df:87:c5:5f:07:40:
         23:0e:fd:5f:53:fa:f4:80:9f:4a:d7:7a:bb:08:12:ae:ba:db:
         bd:dc:0b:0b:30:13:bf:8e:43:a4:55:60:1d:2f:29:32:0b:0a:
         20:5a:c8:e7:7e:80:ed:58:1c:26:72:29:69:d2:b4:46:1c:79:
         22:e6:81:60:31:7a:d6:74:d4:92:e1:22:b2:8a:51:28:74:a6:
         25:c2:16:5d:24:7f:cb:fd:ab:a5:b7:9f:f2:82:75:d3:ea:19:
         72:59:f9:86:aa:83:48:7a:8a:41:15:90:ec:cc:cf:22:b7:fa:
         fb:80:79:e7:76:d1:a3:2f:7f:c7:60:a4:21:eb:aa:39:c1:70:
         ae:52:a6:63:a4:eb:33:2b:37:fc:dc:4e:71:8f:b4:c0:32:d8:
         53:f4:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----