Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6.cer
File:                     c9f645ac-84aa-42e3-b85a-7af9688898a6.cer (raw, json)
Hash identifier:          8r/U2JrzS974krsAgYy2izZAelvvLbDSXLxcH3xXZLw=
Subject key identifier:   58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844C004C016509D0BA8060038C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 01 Feb 2024 19:43:55 +0000
Certificate not after:    Wed 06 May 2026 18:43:55 +0000
Subordinate resources:    AS: 53423
                          IP: 192.171.200.0/21
                          IP: 2604:1240::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c0:04:c0:16:50:9d:0b:a8:06:00:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb  1 19:43:55 2024 GMT
            Not After : May  6 18:43:55 2026 GMT
        Subject: CN=c9f645ac-84aa-42e3-b85a-7af9688898a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:e7:3c:55:df:df:50:80:ba:5c:29:36:4b:
                    80:e3:8a:d3:32:69:4a:73:0c:ae:e6:8f:6c:46:0f:
                    e2:14:da:e3:36:91:96:51:ef:c5:a9:ff:60:3c:98:
                    2b:00:b4:14:0c:58:b4:74:b0:c4:07:de:1e:49:53:
                    c0:ca:33:28:25:18:0a:42:a4:5c:16:d0:b5:d4:d2:
                    9d:56:a8:8c:a2:e0:b2:da:75:75:3e:f4:ae:84:9a:
                    ed:7e:ef:85:f6:cf:bf:bf:e9:d9:a8:0d:ae:71:07:
                    e6:63:18:be:33:b0:9f:20:0e:48:cf:75:0d:7e:6a:
                    fe:7a:a4:1f:56:77:93:2a:41:64:7d:73:3c:7b:a2:
                    7d:e7:4d:66:24:c7:b7:3b:83:e6:2f:df:04:28:1f:
                    f5:51:24:bc:16:76:85:90:7b:06:f2:60:78:7f:75:
                    ed:38:b3:7d:dd:f0:71:90:4a:f0:7c:f3:38:f2:0d:
                    6b:87:e5:ae:46:0c:88:be:a9:fd:14:e2:7d:37:8c:
                    dc:be:d4:39:2e:38:96:f5:55:02:e0:ce:7a:94:ca:
                    cb:6e:28:d8:d0:c1:f8:77:95:f7:2d:3f:2f:46:12:
                    a2:14:a7:7d:a3:c5:5c:a8:48:46:a5:eb:84:a5:c2:
                    bb:07:83:03:0f:65:d6:88:4a:53:46:67:9b:9e:ef:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3B:68:9F:62:2D:A9:5C:D6:F3:EC:55:7E:28:63:5C:A8:81:84:14
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9f645ac-84aa-42e3-b85a-7af9688898a6/c9f645ac-84aa-42e3-b85a-7af9688898a6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.200.0/21
                IPv6:
                  2604:1240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53423

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:54:55:c8:43:24:fd:de:5d:49:ae:23:23:64:f1:06:16:a8:
         c7:5b:f5:95:d9:d6:06:dc:68:01:f7:a8:b1:7e:86:25:c7:02:
         95:6b:26:5f:75:8e:9b:34:7d:68:c2:f4:ed:68:8f:01:32:ef:
         23:73:54:b2:81:a4:e7:5a:0a:bc:11:cb:5b:34:35:c2:2c:ec:
         c9:32:42:ad:17:be:4d:8b:20:f0:d2:f8:79:97:27:20:8b:e7:
         9b:db:3d:50:d4:32:a7:f5:af:fd:9f:b8:98:da:f2:4c:d9:40:
         0d:03:10:d4:9f:cc:2d:74:66:14:04:db:1a:8d:9c:0a:02:dd:
         34:9e:7d:c9:dc:d2:a4:21:ef:82:19:28:38:5d:df:0d:33:fb:
         5f:b3:be:1a:97:83:d5:dd:48:61:34:39:1b:fb:1a:f2:f5:82:
         33:40:4b:1b:41:4f:45:9c:0f:85:2c:2c:b6:5e:91:14:1e:aa:
         a9:3b:48:63:00:11:a6:89:fa:97:1c:dc:5e:02:2a:58:dc:8f:
         d9:d7:b1:a4:c1:5e:ed:c4:11:09:a6:aa:12:36:2e:e0:36:a0:
         00:be:f4:37:64:5f:07:d3:4f:a7:0d:9d:9b:84:2f:80:36:6b:
         54:86:2f:70:c2:ae:30:03:98:05:6a:41:d4:82:2d:b4:bb:03:
         7b:06:cc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----