Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/327feec6-99d0-4ed5-81c6-e1f215febe54.cer
File:                     327feec6-99d0-4ed5-81c6-e1f215febe54.cer (raw, json)
Hash identifier:          dCBa/PEyx2PsQHvFqGzi4C+2zjqizS0MPaqguHsN8FY=
Subject key identifier:   D5:50:46:4D:98:23:D3:97:75:E5:0A:0E:4A:02:85:66:CD:AF:70:EE
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285843236D206975EC8A5030019040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/327feec6-99d0-4ed5-81c6-e1f215febe54/327feec6-99d0-4ed5-81c6-e1f215febe54.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/327feec6-99d0-4ed5-81c6-e1f215febe54/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Sep 2023 00:45:22 +0000
Certificate not after:    Wed 10 Dec 2025 01:45:22 +0000
Subordinate resources:    IP: 205.137.251.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:23:6d:20:69:75:ec:8a:50:30:01:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Sep  7 00:45:22 2023 GMT
            Not After : Dec 10 01:45:22 2025 GMT
        Subject: CN=327feec6-99d0-4ed5-81c6-e1f215febe54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:22:b3:2e:f4:3a:48:73:3d:76:d9:28:aa:f9:
                    b4:0f:ce:86:47:51:9e:2e:d0:05:0f:83:4a:78:5c:
                    75:f7:eb:ee:87:52:a9:98:27:39:5a:5e:63:05:e0:
                    b6:5a:c7:56:1c:74:62:a5:74:28:11:cf:28:4e:63:
                    07:ab:85:38:c9:52:45:98:be:0d:77:a4:55:f3:30:
                    5f:53:08:4f:6f:ae:f4:f6:00:5c:e2:3b:27:0a:4a:
                    fc:8e:c9:0d:7a:1a:57:4f:d7:0c:3e:1f:9a:16:83:
                    fe:20:99:95:10:1d:1b:b7:22:2b:a1:5d:2a:3a:0f:
                    78:cf:7d:6d:23:1e:76:f8:4a:1c:f3:25:5b:9d:20:
                    ea:4f:0f:88:16:05:0d:f2:bd:a8:0b:db:5a:28:33:
                    ba:a7:42:73:56:08:5a:03:d2:47:2a:da:7a:a2:90:
                    1c:dd:27:84:d7:ad:9f:70:9b:80:39:b9:18:9d:96:
                    0e:93:54:26:94:63:85:65:0d:c1:ec:dc:60:eb:a7:
                    47:2e:a4:42:9e:dc:76:9e:7d:73:40:92:58:69:1a:
                    22:17:d9:44:0b:5c:d0:34:a2:03:5c:43:fe:71:ef:
                    df:98:00:8c:0e:91:b4:b4:63:99:2e:c7:ae:b0:9b:
                    21:c2:b0:5d:3b:d0:3e:8e:84:ac:18:75:61:f1:8e:
                    10:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:50:46:4D:98:23:D3:97:75:E5:0A:0E:4A:02:85:66:CD:AF:70:EE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/327feec6-99d0-4ed5-81c6-e1f215febe54/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/327feec6-99d0-4ed5-81c6-e1f215febe54/327feec6-99d0-4ed5-81c6-e1f215febe54.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.137.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:43:5b:1c:f1:98:b4:aa:78:c6:36:b6:ac:7d:64:3f:a0:ef:
         6d:af:89:24:be:ad:92:c4:4d:82:4c:c5:17:8a:5a:5d:0c:c2:
         66:d5:97:12:c4:6e:97:49:5b:ec:4b:06:0a:84:66:04:24:45:
         83:6a:a0:68:18:17:77:3e:8b:5f:e4:fc:18:4a:d1:84:8e:36:
         e7:86:c5:14:22:9d:14:e2:18:09:54:da:9f:b9:08:a3:b6:5c:
         04:b4:3d:35:54:19:42:64:29:55:bd:c4:a5:f8:15:29:8c:b5:
         7f:d1:9d:22:84:f8:4a:61:4c:67:78:8f:a5:d3:3b:39:3a:0f:
         31:fa:a8:f4:aa:1a:99:96:89:4f:78:a4:68:98:ff:c3:b3:9b:
         bd:82:73:cb:7c:78:97:db:fe:09:23:09:6e:dc:8f:4e:90:38:
         1c:59:78:be:59:a4:fa:0e:cf:1c:4c:22:a5:fe:66:cc:7f:d7:
         b5:c7:4d:56:cb:c8:b2:12:ee:68:3e:3b:ca:31:c6:64:a6:cf:
         e3:48:9f:36:fc:cc:c3:a5:b0:26:d3:50:3f:4c:55:fd:1f:f1:
         27:4a:2e:7a:53:79:23:4b:3d:e2:5a:b6:45:40:43:3f:db:4b:
         3d:7f:ef:b9:1e:df:9e:ad:a5:20:7c:ab:1c:84:d7:68:ee:05:
         4d:8e:74:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----