Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502.cer
File:                     cd00af7c-48e4-48bb-914f-0c2662c5f502.cer (raw, json)
Hash identifier:          GFzH8j/3nfcgkVNL5/qkdlIupDp1+hnmf9sjBIbh/Ys=
Subject key identifier:   26:8B:8F:D7:28:2A:7A:0B:B8:A6:6E:95:5C:8D:12:89:F4:8E:9E:1C
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285843F4EC27AF818BF513EB2A6500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/cd00af7c-48e4-48bb-914f-0c2662c5f502.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Nov 2023 01:45:15 +0000
Certificate not after:    Mon 23 Feb 2026 01:45:15 +0000
Subordinate resources:    IP: 206.130.88.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f4:ec:27:af:81:8b:f5:13:eb:2a:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Nov 21 01:45:15 2023 GMT
            Not After : Feb 23 01:45:15 2026 GMT
        Subject: CN=cd00af7c-48e4-48bb-914f-0c2662c5f502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:88:af:60:ef:d7:34:48:75:c8:c3:cb:41:a0:
                    7a:f0:e2:df:f0:d6:33:6d:31:fa:6d:ed:35:0a:20:
                    5a:4e:19:bd:e4:4e:ac:e1:e4:ac:92:ab:1b:18:a0:
                    a8:96:d6:84:3b:86:55:10:42:ab:81:50:08:c4:fb:
                    be:fc:6b:d6:9e:ac:7e:e1:8b:5d:c2:c7:46:32:12:
                    54:b1:db:4d:ae:16:f7:74:e9:06:60:d1:21:39:6c:
                    5c:a6:ea:9f:cf:5f:fa:9a:cb:5b:6a:a3:9c:6f:1f:
                    0e:4f:b7:8a:f6:de:d7:bd:48:75:6b:7c:6b:ec:06:
                    59:69:17:dc:79:53:f9:65:7c:d1:93:0c:a0:02:e6:
                    bb:dd:f2:6d:35:64:cd:95:6d:63:0b:d4:84:68:74:
                    8d:e0:05:1e:74:93:16:8e:4e:f6:9a:8e:64:7d:cd:
                    8c:15:4c:1a:ed:7d:6f:52:36:8c:4f:10:f2:8c:43:
                    51:cf:fe:f8:0b:ab:0f:ab:01:d7:33:90:f5:b8:fc:
                    1b:a6:b9:56:a0:5e:38:c5:3c:82:2c:1c:fe:03:56:
                    0a:55:cc:b8:6f:8c:b0:86:8f:a5:ca:21:40:c2:23:
                    ca:8e:8e:24:58:94:4c:b8:d8:8a:e6:a4:30:30:f8:
                    8c:a4:d6:c9:0c:c3:ea:6b:f8:a6:a5:76:be:69:a3:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8B:8F:D7:28:2A:7A:0B:B8:A6:6E:95:5C:8D:12:89:F4:8E:9E:1C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cd00af7c-48e4-48bb-914f-0c2662c5f502/cd00af7c-48e4-48bb-914f-0c2662c5f502.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:7c:c4:24:21:b2:50:33:26:97:70:85:af:95:3c:4c:15:fd:
         99:1d:b1:3c:b8:6f:11:50:86:19:90:11:8f:97:41:c7:99:02:
         54:5d:cf:b8:2f:97:c8:bf:3b:30:a9:85:96:e9:84:d8:9c:31:
         09:9b:c2:a1:f4:18:5f:41:31:2f:41:ca:dc:78:09:63:d6:c3:
         b5:6a:63:f0:0f:fc:f4:25:d2:9e:cf:72:34:10:d1:89:e9:ae:
         02:64:db:e0:f9:45:69:d4:d9:bb:b6:e6:ad:9c:7c:91:cd:11:
         78:fb:b1:f7:05:0c:3d:bc:6c:70:a2:eb:d4:e7:a2:44:05:a9:
         ce:68:2e:d1:a2:15:df:1d:52:bb:51:22:3d:b5:b1:96:13:53:
         47:f7:aa:8f:a6:67:d2:2b:e5:36:34:ca:ab:a1:bf:6e:de:aa:
         28:f7:ac:ff:d0:9d:7d:de:eb:87:b1:10:27:94:32:50:10:66:
         fe:04:9f:48:fe:80:0a:c7:db:db:1c:74:c4:7b:ad:d4:3a:75:
         82:67:22:f8:cf:b9:90:36:69:bb:f8:89:ca:43:b5:23:da:b2:
         8a:b9:32:f2:59:5e:1e:d2:f2:d7:0a:6e:ea:df:16:92:ad:da:
         b2:da:2a:3c:d2:bd:30:df:82:ec:d8:12:c9:1b:4e:37:04:76:
         0f:6f:17:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----