Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dac844f2-a729-4ff7-bb65-b32f431c3248.cer
File:                     dac844f2-a729-4ff7-bb65-b32f431c3248.cer (raw, json)
Hash identifier:          NPFi7RfG88DX6bbIg1RlR19Criooz4+N8Y1PgT/IcPs=
Subject key identifier:   B5:83:1A:7D:B3:2A:69:67:78:22:F0:F2:91:54:BE:DF:0D:96:86:21
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584233564121895500C005F97900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dac844f2-a729-4ff7-bb65-b32f431c3248/dac844f2-a729-4ff7-bb65-b32f431c3248.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dac844f2-a729-4ff7-bb65-b32f431c3248/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 13 Jun 2023 00:45:17 +0000
Certificate not after:    Mon 15 Sep 2025 00:45:17 +0000
Subordinate resources:    AS: 394585
                          IP: 204.231.196.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:33:56:41:21:89:55:00:c0:05:f9:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Jun 13 00:45:17 2023 GMT
            Not After : Sep 15 00:45:17 2025 GMT
        Subject: CN=dac844f2-a729-4ff7-bb65-b32f431c3248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:98:bd:64:dd:7f:0b:ab:c3:b8:99:1b:d7:
                    3b:01:12:d7:d2:c8:49:88:e8:cc:9a:ea:6f:55:37:
                    5f:83:4b:cf:60:1e:f1:ab:ab:ba:fe:fb:6f:9f:8e:
                    de:02:e5:47:fd:c1:20:a7:ed:6c:2d:25:bf:f7:83:
                    13:1d:7e:63:17:23:19:40:21:5d:0b:a7:84:fd:06:
                    bf:c2:f9:0e:f9:bd:5c:e1:6b:76:19:05:6c:fa:5e:
                    bc:92:9c:79:a2:48:dc:e5:1d:25:c8:77:a6:06:c5:
                    d8:22:93:03:f8:50:37:57:f7:ac:96:7b:57:01:03:
                    62:ff:78:ab:03:d1:2c:93:40:dc:43:ec:59:d1:fa:
                    f7:f9:41:34:47:b7:b1:f2:d5:81:d4:86:3e:27:6c:
                    72:16:23:f9:c3:e2:c9:9a:44:a9:19:59:91:9e:af:
                    60:fb:e2:4c:19:c5:db:24:8a:ee:33:0c:96:3e:c6:
                    be:06:74:dd:c6:df:60:e2:46:03:04:0b:cd:58:1a:
                    19:95:2b:89:e3:78:cb:56:e9:3b:a7:96:9a:b3:47:
                    ce:a6:61:e7:ac:8a:49:4b:78:c2:ec:9d:52:3c:45:
                    a8:22:99:6e:24:ee:0b:12:6a:f7:81:be:81:eb:a1:
                    f6:e0:1d:12:90:b4:6d:90:61:4f:bb:96:e7:63:58:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:1A:7D:B3:2A:69:67:78:22:F0:F2:91:54:BE:DF:0D:96:86:21
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dac844f2-a729-4ff7-bb65-b32f431c3248/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dac844f2-a729-4ff7-bb65-b32f431c3248/dac844f2-a729-4ff7-bb65-b32f431c3248.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.231.196.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394585

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d8:5b:5d:e8:45:46:94:a1:da:08:52:21:7e:26:43:aa:04:
         7b:07:76:7a:f0:63:88:c9:0f:00:45:67:a9:c7:ae:6c:ad:a7:
         df:6d:c3:97:ca:8b:2a:ae:a4:ce:2c:12:95:69:24:f4:78:32:
         c0:97:0a:24:95:9d:6b:f1:c2:82:f0:81:77:f0:e7:a4:86:d7:
         5a:24:9c:a2:3c:d0:63:80:99:35:52:88:14:e2:2d:3a:e8:ee:
         03:8a:e6:ae:af:82:6c:67:18:e6:7d:80:a8:85:97:44:b6:31:
         5d:23:e0:c9:be:d5:e0:f3:55:75:7e:a8:ae:f5:70:6f:c1:84:
         6c:1a:5b:ba:94:a7:dd:ad:13:5f:eb:70:17:e1:47:9a:ae:b3:
         e7:d5:d2:25:59:23:b4:dc:94:96:29:b5:7a:81:26:6c:9f:0c:
         31:46:f1:f7:43:49:8b:ef:c3:d2:42:c3:de:8b:75:fd:70:5b:
         e5:a3:07:43:08:ff:3d:2b:ed:87:e6:b4:49:a8:e3:6c:02:d8:
         db:f5:d8:25:a5:24:48:f5:c0:6e:15:7b:72:e2:a6:fa:b0:a4:
         ee:03:b1:3f:6f:f5:13:22:d4:92:d8:e4:ed:71:ea:84:29:ab:
         64:51:27:18:ea:c1:86:ae:ed:df:d4:f5:4e:27:90:b5:e6:67:
         5d:c7:9d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----