Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer
File:                     0c772b4b-15fb-4b38-b505-dfe915dae9cd.cer (raw, json)
Hash identifier:          xhF3oaaiUc3Wj1AdIRLqr/ygYcArpDU3r9PeUk/zRHc=
Subject key identifier:   F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858453045B583BA3D7D3619738D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Mar 2024 00:45:20 +0000
Certificate not after:    Tue 16 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 968
                          AS: 982
                          IP: 45.59.140.0/22
                          IP: 2602:809:3000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:45:b5:83:ba:3d:7d:36:19:73:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Mar 13 00:45:20 2024 GMT
            Not After : Jun 16 00:45:20 2026 GMT
        Subject: CN=0c772b4b-15fb-4b38-b505-dfe915dae9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:33:15:16:1e:27:60:43:08:26:3a:b5:80:
                    21:da:bb:80:4f:11:f7:1c:77:b8:ee:c0:6e:8f:10:
                    51:d7:a3:3a:7d:3b:7c:77:b1:91:64:4c:6a:6e:98:
                    84:c8:7c:bb:d3:b8:c2:e9:33:9b:cb:98:b7:dd:a6:
                    be:c4:b6:fd:03:7e:34:ee:e7:9a:ad:89:93:1a:41:
                    9f:67:b8:90:6a:c5:59:b1:80:b1:50:be:0a:d3:09:
                    1b:68:2f:1f:01:44:55:f7:5d:de:4c:44:7a:ef:40:
                    3f:7e:22:0c:41:35:2d:da:f1:5b:7b:0a:89:b8:13:
                    0e:33:c3:8a:25:5b:1d:e1:d9:c8:30:b0:08:4f:a6:
                    c9:9d:41:29:f4:f2:5a:4e:0f:17:e9:88:55:88:74:
                    8f:30:2d:59:1e:aa:98:b4:9a:56:28:41:f4:b6:8f:
                    cc:12:e0:95:1e:53:30:c5:63:26:03:29:0f:c6:44:
                    be:69:4e:0c:3e:50:79:13:a0:a5:03:f0:da:5c:48:
                    5a:a4:d3:9c:8c:bc:32:ab:98:ec:40:c5:34:e6:79:
                    d8:18:c7:64:38:4d:06:74:34:44:49:4d:2d:c6:ea:
                    4d:f1:61:20:fe:cd:00:b1:8c:c9:79:73:55:ee:d4:
                    b2:c0:78:63:0f:07:f2:aa:85:85:3e:5e:b9:c7:5e:
                    29:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:45:52:CC:E6:22:4E:29:4E:15:2D:5C:E4:BD:DD:05:3A:08:B5:72
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c772b4b-15fb-4b38-b505-dfe915dae9cd/0c772b4b-15fb-4b38-b505-dfe915dae9cd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.140.0/22
                IPv6:
                  2602:809:3000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  968
                  982

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:51:e0:80:8c:73:29:c4:79:8a:15:18:2d:21:d7:4e:31:84:
         9f:7a:03:64:5b:6f:8a:42:8d:40:c5:65:9b:41:08:23:dc:f2:
         6a:18:4c:78:bc:23:74:03:66:d3:af:28:ce:57:9f:9c:07:e6:
         9a:13:ed:23:86:ed:3f:34:c0:ea:e6:db:97:c1:e5:25:8c:d2:
         3b:32:7d:10:6e:c0:41:84:fe:e3:a7:0d:52:87:3a:db:77:8b:
         58:0d:55:09:f4:d1:af:41:76:a5:cd:9f:53:24:95:19:fe:96:
         c4:5e:7c:b8:50:d4:e0:0e:04:b1:05:ec:12:2d:ca:4d:78:90:
         99:1c:51:3e:00:96:64:ad:5f:d3:2f:be:2c:85:6d:b1:00:86:
         77:7d:08:f1:dc:d5:c6:26:fb:e2:47:e0:4f:8d:ec:82:d4:17:
         7c:62:cd:f3:ec:b7:40:5b:3a:37:2e:b2:3a:f1:b6:3d:c0:1f:
         21:69:5c:a8:c7:21:f0:38:4d:70:e7:38:39:eb:3c:70:e8:b3:
         a1:10:f0:93:ce:95:ef:34:50:dc:66:64:91:ab:82:39:03:6c:
         60:89:3d:49:cc:ad:40:39:64:f7:19:6b:bf:58:b1:2d:14:89:
         41:fd:09:96:84:fc:d1:eb:fd:e6:15:d9:bc:39:19:94:3b:13:
         de:28:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----