Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ca1d2e4-e187-4392-94cb-47e223f67ae4.cer
File:                     6ca1d2e4-e187-4392-94cb-47e223f67ae4.cer (raw, json)
Hash identifier:          YxXjh/jBxOoHT98Yh26uDEFngYSOWWLCsCfmdMLnMy0=
Subject key identifier:   33:86:E0:11:E6:22:B7:CD:01:DD:E9:B3:90:7C:BD:A2:C0:15:85:6F
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858420C40ABD357A439040DC09200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ca1d2e4-e187-4392-94cb-47e223f67ae4/6ca1d2e4-e187-4392-94cb-47e223f67ae4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ca1d2e4-e187-4392-94cb-47e223f67ae4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 30 May 2023 00:45:16 +0000
Certificate not after:    Mon 01 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 54228
                          IP: 170.39.90.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0c:40:ab:d3:57:a4:39:04:0d:c0:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 30 00:45:16 2023 GMT
            Not After : Sep  1 00:45:16 2025 GMT
        Subject: CN=6ca1d2e4-e187-4392-94cb-47e223f67ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:06:8d:a4:b0:bf:72:7c:37:21:1e:3a:e6:27:
                    7b:6d:14:10:0e:48:32:62:e9:66:62:0b:ec:82:d6:
                    46:63:71:a2:a5:95:47:35:a6:08:7d:a2:32:64:43:
                    dc:86:bd:d1:42:4f:9d:31:af:38:4b:38:6d:0d:43:
                    ca:5e:89:d3:b2:99:2a:17:85:e0:99:b7:80:41:04:
                    a3:7c:6e:88:3a:65:4e:d7:3b:47:04:16:71:89:61:
                    25:b5:ab:09:57:4a:7c:f3:3d:c8:13:d8:7e:91:b3:
                    b0:75:c7:2f:86:88:44:cf:37:9c:71:45:eb:b3:ee:
                    4c:26:d1:5b:06:c7:f0:78:fc:28:f6:1e:c2:f5:11:
                    8c:9a:f2:9c:93:e1:2c:bc:08:71:6c:a8:f9:10:31:
                    f0:b8:87:5a:05:12:6c:92:19:93:ec:3b:a1:b4:9d:
                    75:5f:53:f6:79:d7:d3:e3:79:a2:d5:c6:d1:2c:1a:
                    64:bc:6e:44:b3:8e:59:13:dd:41:f8:21:5d:93:d0:
                    d0:f8:ac:9f:72:cd:f2:d7:1d:31:d5:65:b7:3b:08:
                    53:8e:89:20:81:81:73:8d:82:63:07:60:c3:08:60:
                    9d:1f:06:e6:a7:05:50:0b:bd:dd:95:51:b0:1f:59:
                    b3:e7:92:00:fb:65:38:1d:51:66:de:28:3f:23:7c:
                    35:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:86:E0:11:E6:22:B7:CD:01:DD:E9:B3:90:7C:BD:A2:C0:15:85:6F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ca1d2e4-e187-4392-94cb-47e223f67ae4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6ca1d2e4-e187-4392-94cb-47e223f67ae4/6ca1d2e4-e187-4392-94cb-47e223f67ae4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.90.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54228

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:1e:d5:9b:00:39:bf:6d:ed:c3:c7:b6:33:94:ee:b3:ac:20:
         36:28:f4:8b:aa:9f:c2:98:fc:4c:76:14:56:da:90:55:ef:33:
         f6:0c:97:0a:28:5e:87:ea:aa:86:f9:12:a4:2f:e6:0f:55:43:
         fb:eb:d7:80:ea:35:77:5a:28:18:57:bc:43:21:49:4d:26:fd:
         4a:bc:fa:c8:4a:8b:e6:45:8e:93:0a:f3:32:3c:90:40:d7:34:
         47:54:b0:14:bb:d2:4d:98:1e:9d:e2:1d:30:c4:70:39:90:e1:
         6f:8d:23:24:bb:d6:c5:2f:ca:38:83:34:0b:9d:d3:5d:fc:96:
         b0:07:80:18:4d:2a:1e:3e:f5:56:19:ec:3c:25:46:0a:ee:d9:
         26:6b:40:60:b7:2a:51:f7:3c:05:53:7c:c6:03:54:cd:91:db:
         b1:e3:2c:d5:fa:98:37:35:d4:d6:de:51:bc:2e:df:69:0a:16:
         69:6b:5c:52:69:be:54:9d:de:75:40:a9:ce:9c:33:82:31:b7:
         46:ed:4a:71:09:16:2d:5e:84:03:cf:3f:72:39:ae:72:26:20:
         90:f0:06:f5:75:5c:b5:a5:40:07:99:6b:53:17:a1:78:20:31:
         38:5a:e5:18:e0:b6:50:8d:8a:87:0a:2b:92:1e:76:37:3a:72:
         42:9f:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----