Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer
File:                     18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer (raw, json)
Hash identifier:          1QLr1i2vgyYMg6aKK7oX4ty92qVEDzGzzxP6GhDuf4I=
Subject key identifier:   03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285844B58D63F6C6E566D215AC0C30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 Jan 2024 01:45:20 +0000
Certificate not after:    Sun 03 May 2026 00:45:20 +0000
Subordinate resources:    AS: 398960
                          IP: 23.168.144.0/23
                          IP: 2602:808:4000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b5:8d:63:f6:c6:e5:66:d2:15:ac:0c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jan 29 01:45:20 2024 GMT
            Not After : May  3 00:45:20 2026 GMT
        Subject: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:c1:f0:54:53:66:47:93:66:f8:dd:1b:20:
                    d1:9b:12:ba:f3:56:51:8e:ba:3c:6e:58:1e:73:b8:
                    3c:ae:45:58:cc:11:a2:9e:30:18:89:da:c1:2e:b4:
                    d8:4a:f6:44:65:22:39:d0:93:96:0c:1d:ae:f1:c3:
                    16:fa:c6:d3:da:02:d7:a8:aa:fd:37:c0:05:ee:e6:
                    7a:75:b7:e3:53:74:38:92:8d:cc:8f:c9:96:ba:45:
                    ac:1e:09:64:2a:1e:5f:60:69:57:25:83:34:c3:c7:
                    f9:7e:1d:c9:47:04:40:2a:ee:4c:1d:cf:ab:21:38:
                    5c:97:5f:27:72:42:56:84:50:8d:b8:27:a9:2d:2c:
                    51:01:9a:ab:5d:b3:cf:75:f5:49:d5:26:6a:e8:7a:
                    8c:c3:9c:8e:4a:85:19:3e:5a:6e:2f:6c:d0:23:26:
                    ab:34:e2:d0:39:c7:04:50:a7:a6:eb:9f:13:81:13:
                    c7:5d:00:dc:78:35:54:26:42:be:17:1e:2a:b8:c3:
                    73:dc:63:db:32:89:cc:dc:f1:d1:73:b1:78:59:e4:
                    0d:bb:55:db:4b:66:73:81:31:de:d7:56:ba:93:0c:
                    94:28:2a:25:17:31:cc:93:96:f6:11:65:72:e8:db:
                    ee:98:da:4f:63:a5:36:12:fe:31:ca:e7:20:6c:9f:
                    59:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.144.0/23
                IPv6:
                  2602:808:4000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398960

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:b0:d2:f4:df:fc:3d:72:9c:3c:79:57:3d:bf:c1:27:61:1d:
         6e:a7:8a:c7:2b:db:4e:6d:2d:c5:fa:94:79:41:47:43:69:66:
         bf:25:60:a9:45:b1:ae:9a:c7:c0:61:ce:b3:35:a2:71:12:17:
         6f:87:6f:2d:8f:9e:fe:e7:a3:27:d7:ca:0a:ff:98:fb:d6:8f:
         b3:95:e3:79:81:fb:9c:bc:d9:37:bd:d2:b1:85:db:4e:10:a3:
         c6:9f:c1:90:25:4d:23:ca:34:78:f0:5b:ef:c5:93:95:06:c5:
         f4:a2:53:2a:da:63:5d:ac:bf:a4:c0:30:8b:91:ee:e8:a2:69:
         f8:a2:e3:f7:97:ba:92:8c:c6:6a:11:70:1e:14:ef:ca:a8:65:
         a6:a6:77:22:24:77:8b:5c:5c:2e:e1:8e:49:66:42:86:27:18:
         ce:2b:c4:a7:39:4e:f4:1d:c1:5c:7d:35:ec:8a:2d:26:1b:1b:
         69:dd:2f:b2:c0:ba:06:49:6e:f3:65:6e:7c:65:22:b3:f5:25:
         c8:d4:9f:60:3b:90:0c:bf:21:6e:59:4e:c5:24:a0:f0:a6:f7:
         12:01:2f:28:b3:ce:06:27:fb:0e:ef:88:ec:20:39:40:1d:d1:
         f1:a7:ba:96:cb:23:74:8e:0f:b6:29:84:65:a3:c2:5f:33:b2:
         f3:ca:7e:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----