Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer
File:                     ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.cer (raw, json)
Hash identifier:          ldH6lrDNPjnbsjwd7hNGe7eEQnLSc4ae0u7d9Yl96Ig=
Subject key identifier:   9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858441DD756A9F67C7D090878A3C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 05 Dec 2023 17:31:28 +0000
Certificate not after:    Mon 09 Mar 2026 16:31:28 +0000
Subordinate resources:    AS: 46523
                          IP: 199.38.56.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:d7:56:a9:f6:7c:7d:09:08:78:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Dec  5 17:31:28 2023 GMT
            Not After : Mar  9 16:31:28 2026 GMT
        Subject: CN=ceaf7c2b-544f-4639-a6ad-4b0bac926ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:12:9f:9c:76:a8:8f:e8:27:45:4d:33:21:7e:
                    d7:12:00:7c:a4:35:8f:08:66:8a:3a:b7:3d:58:c4:
                    8a:11:09:6b:ee:9b:aa:b9:d8:9d:41:f4:18:ca:ba:
                    ab:f0:09:b7:e6:38:66:fb:61:54:b6:a4:4a:5a:f2:
                    e1:1f:6d:65:35:58:bb:b2:b9:60:bb:26:e3:10:81:
                    5c:2a:a3:25:a0:04:ae:df:52:7e:eb:2c:a6:41:9e:
                    1c:16:00:6d:79:09:ee:99:cd:91:f4:f5:5c:bf:e8:
                    06:fa:77:7b:62:76:0a:22:56:9d:d6:d3:c3:5c:b0:
                    e4:c3:22:04:9d:97:cc:62:f2:9d:52:e8:05:97:d7:
                    dc:e2:5f:7c:d2:0f:2e:fc:95:e2:44:0a:8d:0b:6f:
                    77:0e:1b:54:bc:9b:d8:86:cf:90:49:93:71:88:ec:
                    93:8b:a0:47:2d:ed:7a:a1:05:e6:ba:86:ca:b5:89:
                    a3:f8:02:18:63:54:fd:f2:23:d5:70:0b:3d:0f:b4:
                    17:36:8d:bd:dc:d0:cf:b2:9f:ad:6b:db:bd:80:bb:
                    a7:6a:bc:51:4c:61:63:ad:d6:16:2d:64:be:14:61:
                    01:84:6d:34:9e:b3:0a:78:32:67:c9:4c:2a:ad:9d:
                    28:22:92:3a:08:c0:61:73:90:b5:c0:07:2f:b7:84:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:30:CF:EA:1B:C7:54:A8:51:5D:E3:99:6A:E1:50:F3:25:1B:99:C8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8/ceaf7c2b-544f-4639-a6ad-4b0bac926ab8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.38.56.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46523

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1f:c2:c1:87:6a:07:ad:68:cd:44:98:cd:c6:56:9e:d9:91:
         74:c4:90:7e:1f:44:23:ec:03:0f:97:8e:6c:28:cb:3e:87:01:
         7f:e4:62:a0:26:06:80:91:3f:64:d0:3b:61:67:64:a8:3d:35:
         0f:87:3b:a6:3b:aa:27:03:bd:40:bd:6f:09:48:75:4a:83:8c:
         25:9c:81:b6:bb:b9:cc:1e:c3:49:e6:78:22:7a:11:6d:71:00:
         ad:8f:47:47:cb:d6:64:e5:e1:6e:fe:38:9e:0b:79:3e:ae:48:
         6e:ba:14:b4:d7:4b:0a:55:4c:ab:83:51:f0:65:ee:60:52:15:
         47:ec:02:c0:f8:d1:29:9f:c9:11:4f:8a:68:8c:01:9b:5f:ce:
         0f:2a:40:eb:62:d3:e0:3b:cc:80:a9:72:8e:25:67:b7:d7:b5:
         89:7c:b5:3b:6c:48:9e:4b:54:a1:d5:cb:88:80:3e:28:85:b3:
         64:3b:32:e4:b2:ed:52:ba:d4:f9:57:99:e3:07:c5:b1:22:b3:
         3a:e0:e4:c9:99:6a:cc:33:e2:2b:9a:eb:f6:c1:f9:55:02:46:
         a0:4a:4b:c3:5e:4c:17:06:f9:24:03:7b:67:3e:2a:f3:51:9b:
         3e:1f:c0:d1:4b:39:58:04:fc:49:92:5f:94:45:c9:22:b4:18:
         90:d0:53:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----