Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f.cer
File:                     ede01171-c7fd-4563-acce-6f9c23457a8f.cer (raw, json)
Hash identifier:          k1LyYj9R/zTqIp2+Rj1yg9z1SedBlczVnN8tFPJzbkU=
Subject key identifier:   73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285842CE8741CCF7D47ECB5BFEA080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:54:19 +0000
Certificate not after:    Sun 24 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 397394
                          IP: 204.194.184.0/21
                          IP: 2606:2240::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:87:41:cc:f7:d4:7e:cb:5b:fe:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Aug  7 14:54:19 2023 GMT
            Not After : Aug 24 00:45:16 2025 GMT
        Subject: CN=ede01171-c7fd-4563-acce-6f9c23457a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:35:5e:77:68:6f:43:5f:ef:40:b2:c0:8a:77:
                    7c:08:11:db:a7:43:a2:d4:99:3c:96:d6:c0:86:c6:
                    5c:f6:79:f3:a2:ef:da:3f:17:32:cb:a1:f9:32:73:
                    fb:4e:0e:02:07:d7:a2:40:c5:8d:65:43:f0:1a:ae:
                    93:15:f3:1e:ed:7c:6c:70:e6:b1:03:12:8b:a7:a8:
                    a6:68:52:9c:0f:da:a0:0d:a4:e0:98:b1:b7:96:2e:
                    49:89:70:0a:a8:60:53:57:7a:46:29:10:e5:b5:69:
                    7f:f3:a5:57:25:4c:1c:b2:8b:16:80:9b:05:7b:a2:
                    7e:6c:f8:e5:af:fa:c3:75:1e:da:d4:81:5f:a8:20:
                    32:72:49:52:6b:ff:a9:50:ec:96:19:33:6d:e1:d5:
                    58:12:b0:49:86:34:8d:8d:20:f0:3a:18:98:a3:0c:
                    a4:14:b8:d0:2a:c0:b0:40:f8:2a:46:dc:72:1a:5b:
                    ff:82:8d:ea:2d:85:d4:c9:4d:4e:a7:ce:30:ac:c3:
                    9b:0f:90:67:de:0a:e0:cf:0c:13:4b:31:8e:f8:d5:
                    dd:eb:4b:f7:59:c3:72:5b:18:71:bf:65:1c:82:29:
                    36:f6:bf:da:af:9b:40:01:51:ce:a6:b2:dc:72:46:
                    7a:59:60:78:c9:15:55:02:72:bb:42:c2:55:e1:ba:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:74:EA:4B:7B:2F:74:0A:B2:78:AC:39:BB:05:C5:E9:A4:A7:52:BF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ede01171-c7fd-4563-acce-6f9c23457a8f/ede01171-c7fd-4563-acce-6f9c23457a8f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.184.0/21
                IPv6:
                  2606:2240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397394

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7e:bd:9c:99:a0:1c:62:55:7f:c5:bb:c3:28:8c:c3:a6:a8:
         75:30:ef:dd:c6:78:55:80:29:e1:c4:76:47:b3:20:63:58:29:
         61:3d:9b:3f:0e:01:1a:3c:f7:c8:56:5a:73:2d:f8:9b:bc:63:
         c2:1f:43:10:7c:df:d2:46:94:c3:ef:b4:91:62:20:8c:8c:5d:
         54:23:17:f2:9a:cc:16:75:9f:26:b4:60:cd:3e:c3:47:84:2f:
         54:25:2e:c1:68:85:b2:84:d8:94:af:84:4b:5f:7c:ae:3a:fe:
         80:14:26:41:d0:ac:e5:9e:fa:06:4b:21:df:c6:7f:e9:f3:50:
         f6:50:03:4e:7b:c2:a3:45:1c:28:42:d1:5c:fe:ba:4d:78:9a:
         1d:d8:cb:9a:3d:d9:6c:f4:06:71:0a:4c:93:c2:9c:a7:4a:1d:
         83:90:27:ce:c9:f0:e9:89:be:d6:83:5e:70:9f:3e:7f:b2:c9:
         fc:94:c2:99:e6:4c:67:37:55:ed:4f:b9:52:db:83:6c:96:75:
         df:ed:65:25:1d:f2:02:50:27:fb:92:07:cc:f2:e5:1e:c2:e9:
         26:00:19:23:8e:23:b1:40:48:3e:4b:14:1e:44:4e:d9:72:31:
         ef:3d:a8:c3:8b:a2:ac:bd:ac:2e:aa:e6:f7:db:98:4d:87:2d:
         a7:dc:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----