Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ad169ad-11f9-49dc-a963-8388fd6eeed0.cer
File:                     6ad169ad-11f9-49dc-a963-8388fd6eeed0.cer (raw, json)
Hash identifier:          WO+QPxS0mx6vG0mtwf4ZIUKA064pODJSXiIUX/K/7h4=
Subject key identifier:   DB:3D:CE:49:C7:DA:FA:28:45:F9:38:F9:C8:10:53:C2:34:49:BE:34
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584453D76914A24EF0CABE3FB980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ad169ad-11f9-49dc-a963-8388fd6eeed0/6ad169ad-11f9-49dc-a963-8388fd6eeed0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ad169ad-11f9-49dc-a963-8388fd6eeed0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 25 Dec 2023 01:45:15 +0000
Certificate not after:    Sun 29 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 23247
                          IP: 198.217.6.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:53:d7:69:14:a2:4e:f0:ca:be:3f:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Dec 25 01:45:15 2023 GMT
            Not After : Mar 29 00:45:15 2026 GMT
        Subject: CN=6ad169ad-11f9-49dc-a963-8388fd6eeed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:bc:29:2d:3e:f2:f1:36:06:bf:10:22:0b:
                    51:68:24:d1:c2:4c:52:83:dd:1b:e6:45:96:af:2d:
                    57:1f:67:ce:b5:fa:5f:13:75:33:8c:76:28:3d:f0:
                    5b:56:47:a6:d7:67:a7:a3:5f:66:ea:8a:81:84:c1:
                    c7:5c:f5:8a:bf:20:1b:fa:5c:be:64:87:36:b4:0e:
                    54:ff:22:c1:23:cd:19:ee:f8:af:e8:08:0c:c8:b4:
                    b0:8e:03:53:2a:50:a7:0e:4d:e7:c5:15:bc:37:3c:
                    42:56:77:36:17:2b:5d:23:1f:c2:76:ee:24:70:9b:
                    0c:1b:50:a2:3d:e3:3a:fc:59:4c:b7:dc:5c:af:3c:
                    34:83:ec:84:60:eb:6c:d6:63:cd:7e:18:29:56:bd:
                    49:3f:57:97:d9:11:a3:e5:4c:95:83:29:c2:60:af:
                    a8:e4:ff:bc:c8:3b:9c:0d:4c:86:ab:c8:5a:95:8b:
                    0d:b5:b2:d8:ef:df:78:90:bd:d9:52:2b:dd:23:c0:
                    b3:0f:c6:8b:ae:ec:b5:5f:6d:f3:d3:ed:8d:ad:f3:
                    ab:2b:23:66:ec:4b:58:13:27:6d:82:c7:ae:96:5f:
                    0b:e8:22:6f:e8:74:f2:7e:28:9a:7e:a8:47:b4:0e:
                    94:8e:7e:fd:e3:d4:4f:02:f2:56:dc:94:c5:7a:ef:
                    79:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3D:CE:49:C7:DA:FA:28:45:F9:38:F9:C8:10:53:C2:34:49:BE:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ad169ad-11f9-49dc-a963-8388fd6eeed0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ad169ad-11f9-49dc-a963-8388fd6eeed0/6ad169ad-11f9-49dc-a963-8388fd6eeed0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.6.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23247

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:86:91:6e:e2:59:2d:8f:3c:db:21:73:f1:63:49:43:08:11:
         3a:82:59:73:c7:37:26:e8:23:79:8b:f4:b1:15:52:f4:50:7f:
         63:1b:7a:ad:da:67:6c:1b:ac:8d:90:fc:10:6a:05:6b:ac:94:
         5e:ce:45:37:25:d7:50:88:17:25:86:be:e5:d4:35:93:a0:6c:
         c9:f9:84:71:79:13:9c:da:a4:09:5d:a6:35:e1:8a:d7:68:2a:
         dc:e2:66:42:88:a2:77:0e:fd:3a:90:ac:9e:b3:ac:47:bd:59:
         12:ea:37:2d:dd:89:ae:b0:ec:6c:0e:b7:ea:f9:d7:ab:ad:df:
         68:10:00:56:97:5c:13:42:4a:72:16:a7:97:6b:70:5d:6d:cb:
         46:fe:0a:92:ee:2c:8b:e6:6b:54:04:a8:de:af:70:54:6e:a0:
         92:87:a9:7b:87:71:84:81:df:39:7d:8e:d4:f6:13:46:a5:6b:
         08:42:64:18:cc:f0:fd:65:f2:e5:1e:d9:38:94:03:45:1f:c1:
         dc:05:bd:37:5a:61:06:a4:7a:9e:fa:28:fa:eb:59:b7:aa:42:
         7e:e1:7e:24:b3:05:b2:fa:b9:60:ea:70:fc:56:2e:9d:5a:56:
         38:cc:4e:18:52:6d:e6:b7:9b:58:a1:89:7b:49:a3:c8:ea:56:
         fe:4f:c1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----