Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.cer
File:                     bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.cer (raw, json)
Hash identifier:          PR9VGf0qUDEm1f+uii+2/wXv3pUP6joidcjfTTJlmk4=
Subject key identifier:   23:9E:55:A1:BA:B3:DE:8D:4C:12:D6:86:B8:04:B5:B5:08:1B:49:62
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858431577BE7F6F7BE816CD085360
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 02 Sep 2023 00:45:26 +0000
Certificate not after:    Fri 05 Dec 2025 01:45:26 +0000
Subordinate resources:    AS: 62899
                          IP: 162.248.176.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:15:77:be:7f:6f:7b:e8:16:cd:08:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Sep  2 00:45:26 2023 GMT
            Not After : Dec  5 01:45:26 2025 GMT
        Subject: CN=bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9c:10:f8:ca:50:16:90:f3:e3:d9:94:dd:3a:
                    1e:0d:55:25:c2:c3:22:14:bd:72:5e:52:51:08:77:
                    c9:b7:4d:05:c7:8a:fe:e7:d9:1f:88:1e:60:d4:ec:
                    8c:36:c7:c7:0e:59:f1:99:72:22:99:6e:97:b2:97:
                    68:a4:31:bb:4b:ce:fa:d1:fd:6e:ee:e9:c2:e5:cc:
                    14:46:e6:85:33:06:26:dd:cb:56:5c:23:43:14:1d:
                    0e:c0:92:a7:5d:8d:01:0e:a1:98:e9:33:d4:ab:9e:
                    35:6f:4d:92:ee:2c:74:16:fa:b5:4d:43:56:89:76:
                    52:f3:08:1d:05:a2:96:2c:61:5f:c9:97:b8:69:37:
                    0f:c6:11:a9:ae:f8:be:8c:16:fc:f0:7b:e8:a5:fa:
                    20:d4:47:7d:a1:90:c4:23:06:e3:d8:d2:27:11:70:
                    d3:e3:43:49:cf:80:47:e5:b4:55:ce:9e:c8:4c:88:
                    19:7d:61:f7:06:b8:43:90:dc:54:71:e4:40:60:10:
                    15:a5:3d:f1:a7:f6:5c:2b:9e:81:d0:e0:3b:5e:e2:
                    2d:42:a0:40:af:07:44:11:5a:10:cd:44:d6:9d:a3:
                    54:5f:27:8e:6f:11:f1:07:f5:e0:43:f4:5b:7e:5f:
                    d1:8e:eb:52:78:a7:c3:6c:0c:ee:45:c7:7d:f9:7b:
                    11:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9E:55:A1:BA:B3:DE:8D:4C:12:D6:86:B8:04:B5:B5:08:1B:49:62
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.176.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62899

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b9:58:23:ba:6a:e6:93:ea:10:9c:1c:da:59:03:6e:b7:b6:
         bb:88:c8:aa:05:b1:c0:b5:d2:d2:d1:4a:71:23:0b:62:b5:e8:
         ae:d4:58:c7:cd:73:88:6d:e4:43:b0:cd:66:21:d6:2c:4c:8a:
         1d:47:3b:6d:ff:2a:64:8b:57:fb:65:a0:f8:9f:72:56:ff:d6:
         9c:ae:8c:dc:11:51:dd:f9:27:7a:99:6c:c9:8e:f1:36:48:ae:
         8b:30:9a:90:d0:24:9c:a2:7e:4c:00:67:9d:1e:18:95:fc:23:
         b7:42:a3:50:97:c5:57:fe:e7:a7:9c:e9:a4:0d:5c:b0:c5:6e:
         55:53:f8:f7:c3:f9:b1:49:69:8b:e2:ad:19:60:91:c1:b9:4b:
         ca:f3:8d:18:1c:4b:1c:10:38:48:5e:1f:e3:8c:b8:c4:3a:60:
         9c:2d:5f:f8:4b:79:f1:4d:02:d1:59:3d:89:9b:51:a1:ae:ff:
         98:b8:55:f5:2a:44:ca:8f:d2:43:76:77:7a:fd:a0:02:21:bd:
         9b:70:1f:cf:92:87:4c:8c:e3:1f:9a:08:41:62:a6:fe:f9:b1:
         92:71:3f:3f:ec:6e:00:bf:b8:58:ba:27:e6:f0:45:e7:6f:91:
         28:d6:eb:1e:0f:30:45:63:af:79:81:c4:22:93:72:c6:7e:f1:
         47:bd:3f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----