Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/09528b92-a6b5-433e-a822-bb34caeeb703.cer
File:                     09528b92-a6b5-433e-a822-bb34caeeb703.cer (raw, json)
Hash identifier:          CjwggqXeqaiHQiWC+Pjwvt/eU57USRpwqix8nBFt+K4=
Subject key identifier:   7F:E2:78:14:CD:FF:1A:03:84:B3:F8:C9:DE:64:01:5C:DF:E4:F4:3D
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285844EA98675B018CBCE6D555FD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/09528b92-a6b5-433e-a822-bb34caeeb703/09528b92-a6b5-433e-a822-bb34caeeb703.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/09528b92-a6b5-433e-a822-bb34caeeb703/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 17 Feb 2024 01:45:22 +0000
Certificate not after:    Fri 22 May 2026 00:45:22 +0000
Subordinate resources:    AS: 399139

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:98:67:5b:01:8c:bc:e6:d5:55:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Feb 17 01:45:22 2024 GMT
            Not After : May 22 00:45:22 2026 GMT
        Subject: CN=09528b92-a6b5-433e-a822-bb34caeeb703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:85:2c:c5:ed:9f:6a:1c:f1:8d:97:dd:02:52:
                    dc:10:dc:ee:68:79:47:40:26:40:9a:ce:85:7d:d2:
                    cf:b5:a3:c4:1d:14:78:39:89:ca:dd:6e:ad:bd:ff:
                    a4:f5:81:3a:ec:e1:80:b1:8c:92:c7:4c:97:dc:de:
                    b4:b0:28:73:36:f7:10:e0:34:63:96:b9:47:38:fe:
                    8d:95:32:5c:bf:dc:45:0d:d1:27:43:d9:20:25:2a:
                    84:62:de:ee:50:bd:c4:0d:bc:55:c3:6a:49:9f:8f:
                    96:3c:85:84:17:b3:c6:20:60:fe:a6:92:1d:53:91:
                    d9:31:5d:d8:8d:08:aa:cc:bb:ea:a8:a4:c5:c0:4a:
                    16:17:a8:b4:89:dd:1a:98:c8:67:88:b2:af:b6:af:
                    20:31:08:1f:ba:bd:ff:89:cb:b3:db:06:1e:80:e9:
                    14:36:74:d9:88:bd:58:e0:37:37:29:50:87:6f:73:
                    89:1f:12:44:6b:5a:e2:e1:15:9f:e7:a0:c7:2b:ab:
                    e2:73:77:28:5e:21:1d:ef:47:c4:68:0c:cc:3d:51:
                    d9:bf:9e:3c:da:e9:a3:e9:11:92:eb:ad:4e:4e:b6:
                    99:bc:0a:be:79:db:a4:e0:35:c2:07:28:33:47:78:
                    4f:50:6f:c6:46:4f:f8:92:ca:40:40:8b:15:cd:a9:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E2:78:14:CD:FF:1A:03:84:B3:F8:C9:DE:64:01:5C:DF:E4:F4:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/09528b92-a6b5-433e-a822-bb34caeeb703/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/09528b92-a6b5-433e-a822-bb34caeeb703/09528b92-a6b5-433e-a822-bb34caeeb703.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399139

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:4b:eb:d6:ae:7b:0c:8e:d1:06:0b:2e:f6:c5:1a:e1:26:75:
         06:a5:60:3e:01:80:e0:cf:9d:95:db:d2:10:49:22:e5:f0:02:
         fa:88:00:20:84:06:41:fc:f4:3b:71:64:93:85:9d:6e:a6:88:
         53:ab:ae:e8:e8:20:f2:63:ce:16:ab:6c:e9:8f:d8:96:41:3d:
         19:2e:7c:02:4d:d0:c3:01:de:8d:00:7c:61:4a:51:e0:7e:8f:
         8b:68:71:8d:33:da:4b:73:eb:f8:94:50:d3:d0:2c:0b:58:fc:
         52:f7:b7:d3:60:8c:ef:e2:f2:c0:ba:ff:49:5b:47:db:51:26:
         5a:de:0e:c3:d9:28:74:7e:78:d2:8c:2a:5e:d7:3e:3c:21:a2:
         4f:c2:5a:24:6a:ec:6c:25:16:a9:75:3b:50:d1:7d:1b:49:a5:
         42:74:40:c2:3c:b6:de:f3:a0:ce:8d:ae:9b:39:1b:bd:7e:e4:
         f4:72:0e:9b:18:08:2a:71:1e:ea:3b:3b:e5:7c:a9:50:36:6a:
         e6:00:58:01:53:ff:23:5b:be:b5:a8:55:34:36:be:f8:c3:5f:
         76:73:60:55:64:77:68:58:c3:89:f7:c0:d9:0e:05:d4:d3:3c:
         28:bd:9b:56:70:7f:6f:f8:c2:55:4f:d3:a7:95:38:9c:16:4e:
         58:ee:a1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----