Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341.cer
File:                     10e81901-486f-483f-806f-344bd4fe0341.cer (raw, json)
Hash identifier:          ClKQDwKcnN7WX+j6ex1C/C33UqYB8qycp0zraWkz6RI=
Subject key identifier:   5F:95:1B:50:BE:51:5C:E6:54:C6:F3:D1:B8:87:A2:9D:73:41:8F:87
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285842F6C22D516C9FEE654093CC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/10e81901-486f-483f-806f-344bd4fe0341.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 22 Aug 2023 00:45:21 +0000
Certificate not after:    Mon 24 Nov 2025 01:45:21 +0000
Subordinate resources:    AS: 33000
                          IP: 23.147.248.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f6:c2:2d:51:6c:9f:ee:65:40:93:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Aug 22 00:45:21 2023 GMT
            Not After : Nov 24 01:45:21 2025 GMT
        Subject: CN=10e81901-486f-483f-806f-344bd4fe0341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b9:18:95:02:04:a1:0b:fd:d5:71:06:56:d9:
                    80:77:d9:cb:f6:3b:11:8c:6c:f0:11:18:99:ac:e7:
                    9a:40:dd:94:6c:d8:83:d3:31:19:b5:c0:d1:5f:6b:
                    de:6a:49:9f:61:78:82:e4:bc:fc:7e:f8:f4:13:ff:
                    63:0d:9f:b5:92:03:bf:5c:e0:d0:a8:ef:ff:a4:ca:
                    2f:73:a7:f4:a0:0a:4b:fa:83:f6:e1:99:b8:f9:d9:
                    74:79:dc:4d:9f:62:4d:94:8c:9a:b8:c7:b6:a5:e8:
                    cb:3c:29:56:a0:71:71:cd:76:fc:c0:43:ad:94:f7:
                    fb:9d:8b:e6:11:fa:ea:fe:fe:ac:ab:f8:e7:96:f5:
                    ef:0a:10:15:03:6b:66:6c:d2:4e:f3:2e:9b:2b:15:
                    e2:0d:91:0c:26:a4:42:c5:33:5e:1b:78:ee:91:1f:
                    53:59:b9:e2:94:2e:44:1a:17:2c:be:72:82:7d:72:
                    1a:d0:11:75:44:4e:1f:97:69:79:d9:80:8d:9d:b9:
                    a3:38:e0:e6:f4:9f:7f:e1:45:01:3f:79:de:9a:2f:
                    b5:20:bb:a2:2b:a4:91:42:02:e8:25:9b:a0:da:2c:
                    cf:03:f3:dc:7c:63:7c:3c:70:4a:30:56:45:19:27:
                    9b:52:26:50:a0:f5:b5:3d:86:8c:76:52:c9:cf:6f:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:95:1B:50:BE:51:5C:E6:54:C6:F3:D1:B8:87:A2:9D:73:41:8F:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10e81901-486f-483f-806f-344bd4fe0341/10e81901-486f-483f-806f-344bd4fe0341.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.248.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33000

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:e4:f9:82:dd:95:e3:a1:59:91:44:af:56:83:d3:3b:8a:03:
         87:db:72:5e:b5:bd:95:b3:31:5c:12:ca:3e:e3:f0:9c:b2:f8:
         90:d9:fa:f0:5a:d8:1b:c1:38:d3:39:35:f2:fd:d6:71:37:b8:
         15:7e:cc:0a:ab:c0:11:55:08:58:60:17:80:79:11:3a:93:6d:
         15:8d:0b:ce:01:95:17:89:72:f8:75:2c:a0:70:d0:22:6b:0e:
         4c:8c:0f:ae:b5:79:cc:26:09:ff:f1:d1:95:42:1a:74:65:06:
         37:6d:83:c9:85:8c:8d:9b:e5:9f:43:6e:ed:35:a4:be:60:b2:
         1f:c5:37:0b:4f:87:d8:86:77:ed:52:e1:59:44:3e:d4:32:81:
         23:3b:6a:8a:89:8f:cd:c9:9f:42:69:bc:6a:26:a9:06:40:7c:
         db:f6:f9:b3:cf:ac:79:c6:92:1e:29:72:20:80:65:74:87:34:
         2b:53:b1:03:0e:87:be:d1:4c:86:55:51:d3:2a:86:61:2d:95:
         7b:44:46:02:fa:e1:47:b4:b5:ee:3f:6c:a6:7c:0c:06:f5:d0:
         76:a7:27:fb:f0:9e:74:1f:fc:b7:f1:fe:f4:d8:c5:63:df:4a:
         dd:89:2e:0d:32:4d:59:6d:c3:38:30:4e:ae:7a:73:24:57:a9:
         22:e9:02:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----