Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1.cer
File:                     0c18872e-4e90-4862-8069-3a53159075c1.cer (raw, json)
Hash identifier:          K0dpJ4XCMruAgReIuseWHKGXWb1oJFrSec6JswKTbpY=
Subject key identifier:   B5:1B:2D:E9:54:09:D8:DB:7B:E4:4D:5C:6B:B9:7A:8F:B5:2A:16:CF
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E4835137019A6A56B5762A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/0c18872e-4e90-4862-8069-3a53159075c1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 15 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 31875
                          IP: 64.112.232.0/21
                          IP: 66.33.40.0/21
                          IP: 169.136.192.0/19
                          IP: 174.137.16.0/20
                          IP: 2606:2140::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:51:37:01:9a:6a:56:b5:76:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 15 19:06:39 2025 GMT
        Subject: CN=0c18872e-4e90-4862-8069-3a53159075c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:37:7e:20:f7:c2:d6:31:d5:7d:72:45:86:e7:
                    e8:7b:cf:c2:33:a6:69:01:d5:1d:e6:33:8b:b2:47:
                    73:b4:f0:b0:00:8b:90:a2:c6:8b:33:3a:52:00:42:
                    d1:e6:25:ef:7b:92:3f:11:8b:17:5f:10:f9:25:1e:
                    63:06:85:92:3b:0f:4c:36:5a:f5:54:06:ef:1d:43:
                    5d:99:01:ce:0a:e2:dd:f3:1d:0a:49:2a:36:26:91:
                    92:bd:4c:22:10:63:c4:91:22:32:1f:5a:11:ed:06:
                    05:9e:15:43:09:6f:ba:dd:13:16:8b:97:57:6d:1d:
                    b8:8a:74:8d:7c:7c:72:63:28:9b:b2:9c:d7:e1:f7:
                    71:63:03:22:ae:db:be:03:df:dd:0e:5e:8e:a3:ee:
                    e3:1a:17:91:bc:5d:5f:cf:88:45:75:9d:e9:99:20:
                    de:d7:4a:62:b5:46:19:33:8d:b2:5b:20:1b:cb:42:
                    d5:10:b6:54:61:5f:01:99:43:e7:68:cb:8f:60:32:
                    84:04:0f:70:07:bf:7b:3d:9b:53:3c:eb:3f:cb:b2:
                    df:9e:56:ca:44:75:0b:88:8c:bc:e6:96:5e:00:ca:
                    63:53:c1:3d:bb:01:8e:db:a5:fc:db:48:7c:66:dc:
                    c9:47:80:66:cc:15:b7:2f:a0:b5:bd:ea:25:22:97:
                    0d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:1B:2D:E9:54:09:D8:DB:7B:E4:4D:5C:6B:B9:7A:8F:B5:2A:16:CF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/0c18872e-4e90-4862-8069-3a53159075c1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.232.0/21
                  66.33.40.0/21
                  169.136.192.0/19
                  174.137.16.0/20
                IPv6:
                  2606:2140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31875

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9a:ce:33:2e:68:87:c1:bc:e2:1c:e2:0c:25:09:2b:ae:af:
         9d:7e:e1:d6:55:b7:35:0d:f4:78:17:e4:ac:2e:a8:80:f6:5d:
         a0:bd:31:0e:3d:39:af:1c:9c:18:f2:88:d1:01:df:26:ad:a7:
         3b:db:1e:77:f5:b1:a9:2a:bc:2d:19:70:0e:f6:79:01:77:b3:
         fc:bf:2f:fd:9d:b3:b9:9c:a0:6b:f3:f8:7e:10:ed:b5:b6:04:
         ad:e9:96:b8:0e:f5:83:9a:59:9c:ba:55:fa:46:29:25:1a:aa:
         2d:87:a5:07:e1:f2:a5:d3:1d:f0:fd:05:a1:38:77:b5:3d:73:
         fc:5b:7f:8c:a7:a6:b3:5a:a2:0d:76:e6:2f:b4:e5:6f:2e:28:
         bb:f0:6f:f8:7c:1f:9a:a4:11:02:75:fb:9e:8b:99:f0:12:af:
         5c:b8:cb:c8:41:4e:2c:a8:4f:2b:7f:91:b0:8b:5d:ae:fa:69:
         0a:ec:94:fb:72:a7:95:26:ee:b0:83:c5:a4:2d:46:ad:ad:68:
         3e:54:5e:f2:c7:7d:ac:d7:3e:e0:e2:bb:f3:e9:7c:9a:78:09:
         ec:f2:58:8e:81:74:f3:2a:e4:94:9e:47:80:d2:69:28:f2:a3:
         0b:86:66:3c:3d:cb:6c:68:7a:02:c0:db:df:a3:65:19:fa:a0:
         07:25:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----