Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/781a9014-be01-4d5f-b4af-90bd86dfb84a.cer
File:                     781a9014-be01-4d5f-b4af-90bd86dfb84a.cer (raw, json)
Hash identifier:          6u9DIVHLZJ9ZaPIMRKwk8U8KQDlJSfwOFM7ZTazNjzA=
Subject key identifier:   66:2E:AD:0B:AB:DD:14:E5:34:A7:42:81:7F:5D:43:92:27:6F:A9:BD
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858420975FB67908E96082DF11A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/781a9014-be01-4d5f-b4af-90bd86dfb84a/781a9014-be01-4d5f-b4af-90bd86dfb84a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/781a9014-be01-4d5f-b4af-90bd86dfb84a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 29 May 2023 00:45:15 +0000
Certificate not after:    Sun 31 Aug 2025 00:45:15 +0000
Subordinate resources:    AS: 33303
                          AS: 54042
                          IP: 162.212.36.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:09:75:fb:67:90:8e:96:08:2d:f1:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 29 00:45:15 2023 GMT
            Not After : Aug 31 00:45:15 2025 GMT
        Subject: CN=781a9014-be01-4d5f-b4af-90bd86dfb84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:53:67:ff:66:7e:0d:ed:e7:04:46:be:37:
                    24:d4:c1:ff:d9:3d:b8:10:ea:68:1f:a8:e2:86:b6:
                    54:5e:68:ee:84:82:80:b0:ea:95:8b:fd:5b:bb:25:
                    00:c1:86:b9:e7:c4:16:aa:1b:9a:4d:c7:f3:37:f3:
                    3e:e9:9e:9b:46:8b:6c:69:b8:35:43:fc:c9:df:17:
                    eb:22:52:52:85:49:b5:70:f8:7b:52:70:ac:c0:22:
                    f1:d2:41:be:2f:a8:3f:1c:7b:0e:54:bc:6f:94:be:
                    e4:93:f8:7f:66:51:ee:a0:08:20:3a:a3:18:0f:95:
                    13:41:23:13:42:b9:b3:8c:47:e4:ae:f0:a1:06:2c:
                    8a:1c:07:b5:f8:cd:2f:a7:a2:18:07:5a:12:6e:d7:
                    dc:a0:7f:c0:2d:ed:b1:22:1d:46:8d:a2:7d:d8:ef:
                    e7:05:fe:84:00:c9:69:f6:78:28:89:11:40:52:e9:
                    94:07:01:20:a3:ae:0b:a3:7b:59:19:2b:b1:59:dc:
                    b7:d5:e3:ca:dd:bb:6a:c6:a0:cf:7e:e2:f0:84:eb:
                    c5:fb:f3:e7:d8:fd:dd:9d:fb:3d:71:f0:57:80:90:
                    6a:db:cc:0d:80:a8:f7:38:6e:2b:68:4e:32:91:86:
                    b7:32:88:35:88:34:8a:a5:b9:d0:1d:2e:fd:4d:fe:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2E:AD:0B:AB:DD:14:E5:34:A7:42:81:7F:5D:43:92:27:6F:A9:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/781a9014-be01-4d5f-b4af-90bd86dfb84a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/781a9014-be01-4d5f-b4af-90bd86dfb84a/781a9014-be01-4d5f-b4af-90bd86dfb84a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.36.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33303
                  54042

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d9:b7:54:a7:0d:ea:18:de:e7:23:95:22:c2:c1:30:e8:b8:
         66:e4:b9:87:13:cf:58:41:af:97:f1:c7:d1:ac:4f:86:45:96:
         ef:0c:96:e1:b2:5a:ae:d8:db:34:7d:94:bc:44:f3:46:3c:0e:
         49:b6:3a:7a:07:fa:17:6d:9d:40:d8:88:56:49:fa:d5:3b:ea:
         81:01:90:85:58:89:a8:4e:f1:e1:51:68:65:db:54:f6:59:0d:
         34:21:28:0e:61:cb:d0:b1:a0:6b:bd:57:62:3b:6f:ea:38:3d:
         52:8b:6a:bf:00:49:e2:33:55:e0:af:ee:dc:c9:8d:5d:39:4f:
         a9:5d:0e:2f:76:7a:a8:25:00:b9:80:3d:fd:61:6f:c1:cd:73:
         f3:33:53:9e:e5:36:bf:6d:f7:5a:05:c5:77:07:ba:21:e1:7e:
         ec:a0:c1:da:4d:2b:72:a3:72:16:75:60:55:a4:01:1e:ca:7f:
         03:94:ea:51:2f:d7:2d:92:d7:2e:7d:70:87:4b:a0:40:dc:a4:
         ad:9f:0a:4c:0b:29:3f:b0:8c:9c:b2:7c:25:42:d1:03:00:d6:
         a7:c2:58:56:c1:59:1d:44:86:6b:bc:e6:1a:63:3e:54:bc:b9:
         b0:15:2e:de:40:54:0c:ca:7c:9e:58:10:84:00:7b:db:44:70:
         6a:85:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----