Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae.cer
File:                     fc9f4430-0302-4502-ba1d-52836c0222ae.cer (raw, json)
Hash identifier:          mtuOiOPtayW0sRSh7VvttGwZ4DiQROU5SJ07gSa/4+U=
Subject key identifier:   F3:FF:1F:AC:CF:B8:AE:DD:EF:8A:B4:07:D4:FB:F2:11:D2:E7:14:21
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285844CEAD8D3D534D8C97B7168BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/fc9f4430-0302-4502-ba1d-52836c0222ae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 07 Feb 2024 01:45:20 +0000
Certificate not after:    Tue 12 May 2026 00:45:20 +0000
Subordinate resources:    AS: 36719
                          IP: 192.251.94.0/24
                          IP: 2620:b1:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ce:ad:8d:3d:53:4d:8c:97:b7:16:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Feb  7 01:45:20 2024 GMT
            Not After : May 12 00:45:20 2026 GMT
        Subject: CN=fc9f4430-0302-4502-ba1d-52836c0222ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2c:38:6b:7b:d8:e6:b8:cb:13:a2:79:0c:96:
                    65:a0:41:7f:f7:26:f5:d5:3a:28:ed:3f:83:95:2d:
                    ab:02:4a:df:25:33:9c:5d:3f:de:88:0c:f0:c2:b2:
                    24:32:ab:94:e4:7a:51:7e:2b:8e:05:26:d5:fb:2c:
                    d6:af:a9:49:4d:f4:fd:6d:67:89:e8:77:48:97:ba:
                    34:d6:7d:68:37:bb:f3:71:47:80:bc:62:c2:4c:fa:
                    6f:e5:05:15:02:fe:22:28:96:09:90:14:66:60:da:
                    f4:8d:fc:9d:80:1c:80:2c:bc:66:62:22:21:18:58:
                    bc:c0:58:b5:db:c3:a3:4d:ab:b4:6c:a2:55:5e:61:
                    cd:d9:5d:0d:af:8b:13:18:69:b6:9e:37:51:50:74:
                    4b:14:40:1f:cd:b4:e9:77:eb:6a:65:d3:c4:01:18:
                    df:c4:ad:12:5a:6d:ce:0f:99:f9:09:8e:cd:9c:1d:
                    54:84:a1:17:5b:c8:65:82:54:11:54:1f:77:a0:0e:
                    e4:52:2e:ae:74:20:8b:06:ff:30:dd:ea:9d:5e:db:
                    db:85:20:62:69:66:72:00:86:44:ce:02:f0:8b:54:
                    62:23:01:60:ef:e1:bc:81:e4:69:33:89:37:f9:5f:
                    3b:92:76:37:80:e9:e4:54:37:aa:1a:f9:cf:96:cf:
                    83:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:FF:1F:AC:CF:B8:AE:DD:EF:8A:B4:07:D4:FB:F2:11:D2:E7:14:21
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9f4430-0302-4502-ba1d-52836c0222ae/fc9f4430-0302-4502-ba1d-52836c0222ae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.251.94.0/24
                IPv6:
                  2620:b1:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36719

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:6f:ea:6b:91:10:9c:6f:7a:09:32:d4:0e:d0:ef:96:01:94:
         02:40:20:97:46:25:5c:03:59:88:8a:74:e2:81:f7:04:31:b5:
         39:90:5e:92:75:13:45:72:e5:7b:9a:56:3c:49:f8:cf:ab:8d:
         ca:d3:22:00:78:c3:30:15:58:ab:fc:10:67:c7:14:7f:95:d0:
         51:f1:9a:9f:01:d4:d2:c1:65:0b:15:d8:bc:7d:88:41:ec:4f:
         82:36:7f:72:29:dc:e1:dd:03:b4:39:ec:88:16:ac:61:45:60:
         a6:83:d1:e2:8e:e2:26:ba:be:d9:73:3e:3e:63:da:9b:be:2d:
         ad:9f:04:8f:59:d8:d2:6f:bd:e9:af:4d:70:b5:d3:24:0c:c3:
         56:a5:61:9b:0e:cd:5a:06:f8:c0:d6:c7:6f:7d:bc:a7:99:28:
         47:9f:d8:63:f0:15:1f:8f:4b:0b:42:36:ae:ea:01:de:61:4d:
         1d:4d:08:e8:50:aa:0e:3a:63:aa:4a:97:54:77:a2:61:26:a9:
         05:67:70:5d:8e:66:90:88:a2:0b:59:7e:76:fe:72:33:ea:84:
         52:3e:bf:0e:97:6f:b0:72:29:41:99:3c:9b:88:b8:da:1f:a3:
         03:97:75:f5:d7:93:36:7a:13:4f:1e:82:bf:d9:2e:c2:1f:78:
         b0:3f:e3:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----