Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/185bbc1b-2c29-4a8d-933f-f64a92535690.cer
File:                     185bbc1b-2c29-4a8d-933f-f64a92535690.cer (raw, json)
Hash identifier:          LFAdMMF4e51SNNjpG3o227TyNzR4hfxwtykTwhED1PI=
Subject key identifier:   81:54:7C:DA:3F:54:39:A3:D5:1A:27:37:25:03:0B:0A:75:A9:82:42
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584352E2C21DCDE597CF51AA7840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/185bbc1b-2c29-4a8d-933f-f64a92535690/185bbc1b-2c29-4a8d-933f-f64a92535690.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/185bbc1b-2c29-4a8d-933f-f64a92535690/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 24 Sep 2023 00:45:22 +0000
Certificate not after:    Sat 27 Dec 2025 01:45:22 +0000
Subordinate resources:    AS: 399242
                          IP: 23.173.80.0/24
                          IP: 2602:809:b000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:52:e2:c2:1d:cd:e5:97:cf:51:aa:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 24 00:45:22 2023 GMT
            Not After : Dec 27 01:45:22 2025 GMT
        Subject: CN=185bbc1b-2c29-4a8d-933f-f64a92535690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:42:9d:1b:ba:50:20:ff:b7:9d:de:0c:e3:
                    3b:27:76:43:0f:2d:31:c3:d7:9a:ed:4a:8c:cf:aa:
                    22:a1:29:f3:ff:16:d2:8d:a8:25:e1:d7:6d:b5:c0:
                    ae:0c:24:f3:5a:47:59:2e:ee:38:f9:6e:64:18:83:
                    6a:7b:fd:ec:fe:58:de:ac:45:74:c3:ec:45:d5:b6:
                    c5:0c:c9:1a:75:91:62:1c:ac:2e:ea:cc:6e:03:5b:
                    02:18:ce:b1:4a:18:e7:38:07:a6:d0:4f:4c:60:e1:
                    84:b2:90:ef:4b:a4:fb:6c:35:34:0d:f2:84:ef:4e:
                    77:94:02:53:05:22:82:a7:84:d7:f6:f9:b5:2c:13:
                    57:e9:6b:e2:ef:c5:7d:71:2d:0e:9e:a9:13:24:2a:
                    bc:25:ff:ce:a8:4a:e2:c5:b5:35:66:34:6b:0f:6c:
                    21:92:49:e4:e2:0d:37:7e:e7:d0:80:b7:02:69:cf:
                    ee:8c:9d:de:1c:4d:24:db:2e:7f:45:97:0b:41:31:
                    14:24:be:80:b6:21:cf:1a:7c:f4:62:35:d5:99:e9:
                    1a:b9:66:31:77:43:59:ff:8d:3a:ad:e2:74:34:54:
                    3b:5d:e8:f8:d2:52:3d:41:9e:00:5f:ab:69:fd:17:
                    ea:bb:df:40:5a:4d:78:87:d3:4a:3e:62:4e:33:c6:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:54:7C:DA:3F:54:39:A3:D5:1A:27:37:25:03:0B:0A:75:A9:82:42
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/185bbc1b-2c29-4a8d-933f-f64a92535690/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/185bbc1b-2c29-4a8d-933f-f64a92535690/185bbc1b-2c29-4a8d-933f-f64a92535690.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.80.0/24
                IPv6:
                  2602:809:b000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399242

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:76:1e:22:d7:be:4e:81:b8:7f:bf:e1:a2:59:4f:30:26:87:
         85:69:e3:57:f6:6f:78:cf:00:64:7f:2b:c7:e0:cc:af:f4:8b:
         19:ae:86:0c:cf:79:28:dc:f4:26:80:f3:04:54:b3:38:28:a2:
         f7:a9:89:da:77:c6:bb:d7:0c:24:21:93:d7:95:fa:16:36:65:
         18:20:a4:d1:8f:4c:4d:5d:66:02:b1:ac:0d:c9:4c:89:71:24:
         f1:cd:0f:ff:d6:d5:60:ee:89:ae:80:2a:27:9a:c7:b4:7f:0e:
         89:3c:ee:f5:dd:82:1b:d8:31:1d:31:06:c5:8f:29:60:38:e5:
         a2:f8:8d:49:0c:bb:05:8b:0f:af:36:c3:6f:39:a0:ca:9a:bb:
         07:a4:83:9d:90:99:c6:6c:a0:0e:6d:84:87:fa:6f:de:94:23:
         c9:f0:77:80:14:41:91:82:8c:38:f3:75:5d:f5:0e:e9:0f:ab:
         6a:e4:53:99:9e:1c:8f:58:0e:7d:b0:8e:12:75:02:f5:e4:20:
         e6:a3:5f:ee:52:f2:3b:98:5e:e1:27:21:88:b3:30:0b:13:0c:
         1c:da:38:2b:b3:58:1a:73:42:59:ff:9f:3b:2f:e0:3f:c6:65:
         c2:2b:70:b5:ab:a8:20:ea:0e:79:a7:63:5d:81:70:95:4e:72:
         3a:8d:f2:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----