Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf.cer
File:                     0712b41c-9270-4741-84b8-3aaaa15afdcf.cer (raw, json)
Hash identifier:          pKBHTH1di4NwxAywplPyxmH81IwLVzV2ZjfYWOXGsnc=
Subject key identifier:   2C:7F:77:DE:EB:4F:52:A2:A4:A2:F4:75:31:89:B5:A2:D3:14:99:22
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E4834AA2235DC3DA3B51F7C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/0712b41c-9270-4741-84b8-3aaaa15afdcf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sat 31 May 2025 19:06:39 +0000
Subordinate resources:    AS: 22412

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4a:a2:23:5d:c3:da:3b:51:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May 31 19:06:39 2025 GMT
        Subject: CN=0712b41c-9270-4741-84b8-3aaaa15afdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c0:e3:ee:5d:30:6e:57:f0:05:93:7b:46:dd:
                    f6:48:1c:ea:24:ae:ec:a5:f9:4e:d2:31:e4:20:0e:
                    3c:47:02:46:0c:72:aa:77:a2:27:65:48:4b:3d:57:
                    3c:3d:a5:07:67:5e:8f:11:4d:0f:0e:04:d3:f5:08:
                    56:d4:75:0c:9f:20:86:77:d0:9b:d6:19:81:9e:72:
                    ca:28:5f:d0:e2:33:d5:da:af:50:e8:fd:ef:32:4b:
                    e3:f0:be:49:c2:84:29:5c:2c:b2:53:b9:b2:c4:b3:
                    3d:f7:f8:6a:3a:7f:a6:29:7c:d8:f2:35:74:fd:7f:
                    12:d5:a0:aa:f6:fa:87:6d:0b:bb:7d:0a:22:1a:a6:
                    bd:9b:20:8f:ab:3f:d5:19:e7:eb:0e:b9:80:2a:06:
                    a8:4d:fa:68:18:b4:6d:1e:06:f9:a8:53:6c:dd:df:
                    21:4a:70:bb:b2:b0:ed:1b:92:c5:ce:d2:73:a6:d0:
                    b4:f8:25:ee:2f:a3:47:f5:54:fe:b1:a8:21:3f:49:
                    67:88:ba:3a:31:d8:52:eb:e2:06:e5:a9:3c:d4:d5:
                    2f:26:8b:6f:07:7d:3c:4b:a9:ad:26:56:4e:ae:29:
                    b9:ea:3d:f2:52:2e:32:d3:d0:54:50:c8:1f:f4:1d:
                    dd:56:3e:a8:09:46:8a:eb:3e:02:08:c3:b1:46:31:
                    de:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7F:77:DE:EB:4F:52:A2:A4:A2:F4:75:31:89:B5:A2:D3:14:99:22
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0712b41c-9270-4741-84b8-3aaaa15afdcf/0712b41c-9270-4741-84b8-3aaaa15afdcf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22412

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:4c:4b:0c:29:92:ea:72:18:94:7e:06:d9:b2:c3:2c:05:
         99:03:c9:3e:db:43:cf:ae:9b:96:36:fe:54:0b:ee:73:af:db:
         21:a3:ad:a7:f8:e9:43:40:21:7e:14:39:57:cb:90:88:11:99:
         87:f7:2a:35:e9:32:73:76:75:6d:6a:f5:c8:15:49:f7:4c:70:
         20:53:39:bf:ef:96:f9:e2:c1:d5:d7:94:c9:c5:4c:a9:df:f2:
         d1:d9:85:bf:8e:82:5e:26:48:7f:32:17:29:3c:52:72:ce:58:
         51:44:7f:aa:6b:58:14:b2:20:62:36:24:16:ba:74:76:75:1b:
         6e:1d:23:ca:19:83:06:2c:af:5c:e0:97:e2:47:1c:25:8d:e7:
         dd:7a:17:2e:c2:fc:e3:b2:d1:05:75:c4:3b:00:27:7b:a4:78:
         64:e6:8a:a8:c8:1f:93:02:a4:90:48:da:3e:02:62:10:46:00:
         cd:e1:89:2c:f3:95:d6:23:b7:6c:94:ff:e3:a7:e1:41:dd:34:
         30:20:7f:d5:73:fb:2a:20:cc:11:1f:0a:87:9f:e5:b4:55:66:
         37:c1:85:9a:c1:7c:09:6e:87:7a:eb:7f:1d:95:c1:19:ff:46:
         93:48:47:b9:cb:29:d2:73:62:21:fc:1d:3c:ce:02:cd:b9:ef:
         d8:69:e9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----