Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07.cer
File:                     76025b2c-a5d0-4f94-a97d-21d8b8245b07.cer (raw, json)
Hash identifier:          JzgwmpNSKKHHrNSY5Jl7ToXPNsdLrdYP7GEgSenA/K4=
Subject key identifier:   F3:CB:67:A8:94:C6:F6:22:66:49:6C:57:9E:A1:99:C2:8C:50:CC:03
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E4834F9733BEA983069F2D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/76025b2c-a5d0-4f94-a97d-21d8b8245b07.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 04 Jul 2025 19:06:39 +0000
Subordinate resources:    IP: 136.22.6.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4f:97:33:be:a9:83:06:9f:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul  4 19:06:39 2025 GMT
        Subject: CN=76025b2c-a5d0-4f94-a97d-21d8b8245b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:d4:61:48:09:ee:a5:2d:62:43:90:4f:e8:
                    65:c3:8e:65:66:dc:d3:f6:f8:29:6f:b4:52:97:ca:
                    d4:27:59:d0:00:f6:59:f2:64:bf:c4:a2:af:8d:c0:
                    a2:43:8a:e3:5c:b8:6b:42:4e:77:c1:45:17:4b:7c:
                    83:1d:d5:bc:19:c8:13:bb:7e:ef:59:68:51:d1:bc:
                    9b:01:bc:07:64:53:3b:44:22:ef:c6:62:b1:eb:32:
                    d2:c5:4d:fb:8e:3f:5b:35:9f:d7:9e:51:60:f8:70:
                    b3:e3:17:ff:ea:70:f4:49:ad:0a:e9:5d:ce:a4:a6:
                    d9:0f:7d:15:85:1c:7a:ee:38:32:c7:f3:25:b8:ec:
                    09:d3:55:45:9e:32:da:08:47:8c:dc:77:01:cd:b8:
                    33:31:26:bc:f7:fc:ff:02:80:f4:d2:28:43:ac:6f:
                    c5:ef:73:13:8a:e0:0d:c9:75:fb:ca:bf:b8:c1:a6:
                    bd:9b:86:f7:70:ab:03:83:2c:67:4c:6b:f2:16:3d:
                    86:79:d5:57:5b:51:95:e6:38:52:48:7a:02:4d:d8:
                    b8:08:e8:f5:58:00:eb:dd:a1:c7:33:64:a0:2f:94:
                    05:c5:d3:45:08:cf:89:84:ec:92:3f:66:fb:b4:71:
                    cf:30:84:c6:61:e0:11:74:3f:82:c3:ac:4e:72:30:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CB:67:A8:94:C6:F6:22:66:49:6C:57:9E:A1:99:C2:8C:50:CC:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/76025b2c-a5d0-4f94-a97d-21d8b8245b07/76025b2c-a5d0-4f94-a97d-21d8b8245b07.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:79:84:c8:68:da:88:a4:3c:aa:0b:19:d9:4a:e4:3b:ed:33:
         16:21:f5:83:c2:27:75:15:97:72:d2:77:a8:a9:f2:f4:ec:2c:
         a5:22:71:68:d7:9a:cf:ee:ce:c0:22:a6:3e:04:11:2c:13:20:
         c4:1d:34:81:7d:e4:c6:50:56:01:c5:0e:9e:72:ac:f0:9f:61:
         22:7d:55:3a:20:eb:60:ef:cc:30:dc:cf:23:ee:24:9b:c4:5a:
         6b:f4:7b:42:3f:53:b7:92:11:08:cf:00:63:83:5f:8a:fb:85:
         ba:fd:01:48:2a:57:67:a6:2f:92:bd:9a:63:ff:e0:94:1a:d5:
         85:fc:0f:7b:47:49:9b:7a:a4:77:75:6e:7b:73:ae:0a:4a:97:
         3d:df:ca:d9:bd:55:73:fe:3b:01:aa:0d:3b:c7:c5:23:04:b3:
         22:70:18:4c:7f:b3:50:2a:be:f7:bb:99:0d:22:30:ec:c4:b0:
         d3:14:0d:76:0c:07:71:a3:3f:b5:1c:bc:25:89:b1:2c:a6:51:
         91:82:a0:67:af:04:b0:1e:eb:1c:bb:44:39:19:8f:97:c2:90:
         66:02:ff:7a:65:2a:3b:69:ee:47:bb:f5:f5:e5:ba:88:59:02:
         d1:2c:3f:5a:d8:f2:d0:3e:93:63:f0:f8:bc:ab:3b:1a:3b:e2:
         39:96:15:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----