Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239.cer
File:                     048641d6-b337-4557-8bae-329ba9998239.cer (raw, json)
Hash identifier:          F6bfnVR/kBwEYQKV4nD/f6PXySNeau79iJkkV+p9GrE=
Subject key identifier:   A3:5C:CA:7A:27:0B:CA:50:C8:49:59:00:B1:4F:89:72:63:25:CC:62
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285842F3F7813078DADBDA472A2380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/048641d6-b337-4557-8bae-329ba9998239.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 21 Aug 2023 00:45:23 +0000
Certificate not after:    Sun 23 Nov 2025 01:45:23 +0000
Subordinate resources:    IP: 162.1.0.0/16
                          IP: 192.132.43.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f3:f7:81:30:78:da:db:da:47:2a:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Aug 21 00:45:23 2023 GMT
            Not After : Nov 23 01:45:23 2025 GMT
        Subject: CN=048641d6-b337-4557-8bae-329ba9998239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:1b:dc:e9:a0:bc:2a:9e:57:1f:7b:bc:e5:
                    fa:57:5c:72:44:50:87:b4:c0:41:e1:aa:90:8e:ee:
                    29:5b:be:b8:0c:8c:ec:f0:f3:27:5b:4e:7b:d0:d9:
                    56:29:d9:4a:fa:bd:b4:9f:c4:ee:e8:96:9b:fb:59:
                    4b:6e:7d:79:a0:fb:37:bc:51:06:09:d4:30:85:12:
                    ce:36:26:f0:04:e1:7f:69:a7:a4:4e:de:b6:6e:3f:
                    ed:11:da:45:f7:bf:8b:9b:e1:aa:2c:69:38:b2:ea:
                    44:d9:1b:6f:f3:6d:e7:eb:b2:29:8c:a1:69:2a:d4:
                    34:73:31:af:eb:16:a6:f9:be:b5:6c:d4:05:b1:f5:
                    b2:0f:c2:86:f7:01:0d:c3:f0:3a:f4:93:76:04:55:
                    be:b6:70:74:89:86:e9:a7:36:57:38:a8:d6:0e:21:
                    28:6b:15:00:00:07:b1:e5:7c:a3:5a:56:80:9a:ae:
                    5e:38:55:f0:6d:cf:e0:55:c3:59:87:2c:6c:6e:24:
                    f3:04:ed:b3:63:70:8c:eb:9f:27:a4:be:1a:d7:f4:
                    72:d6:40:f4:35:ff:bf:69:25:80:1f:06:a1:a2:29:
                    09:79:51:82:ae:97:45:af:ad:bd:c6:e7:b4:c1:86:
                    59:bd:75:ba:13:ed:b7:79:3d:74:68:15:d1:79:8b:
                    f4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5C:CA:7A:27:0B:CA:50:C8:49:59:00:B1:4F:89:72:63:25:CC:62
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/048641d6-b337-4557-8bae-329ba9998239/048641d6-b337-4557-8bae-329ba9998239.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.1.0.0/16
                  192.132.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:de:6f:78:a6:0b:64:a4:51:3c:89:b4:2a:f8:32:17:6f:69:
         ad:ed:ac:fe:4f:65:9e:a9:4e:ff:1f:29:c5:b1:2c:4d:23:b4:
         ae:59:a2:bc:a8:59:09:3f:b6:fd:b9:ee:ca:14:73:e7:b2:5f:
         74:9f:f3:c4:88:d6:8d:c5:f8:a3:2f:c0:0b:5f:a4:f7:35:07:
         97:30:28:a0:1b:2e:10:82:cc:91:5e:b5:0c:db:dd:f9:5b:9a:
         ff:fe:dd:50:5b:12:a4:d7:60:4e:ef:b1:07:3c:69:76:10:37:
         b8:53:7c:35:46:78:90:4e:5a:d4:23:99:e7:cf:50:2a:a4:ee:
         8c:02:8b:a8:01:24:02:ab:a4:c2:27:63:d7:60:b3:37:a5:fb:
         4b:7f:02:2e:d6:6f:e3:61:55:6f:3f:bf:b4:73:bc:02:cc:52:
         4b:fd:15:e2:3a:6d:a8:1a:f2:86:96:23:77:7d:01:69:65:09:
         1b:2b:db:70:aa:fb:bb:66:19:1a:ce:79:e6:4f:9a:a1:4d:f4:
         39:eb:d8:e8:ec:7b:74:76:5f:b5:3f:ff:75:20:50:e2:be:18:
         01:9a:15:6b:c1:ee:77:86:ae:8a:43:da:18:b4:22:c8:54:51:
         df:7a:a2:26:61:ab:f5:eb:b7:b2:30:c3:25:41:5d:77:a3:0d:
         04:61:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----