Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd.cer
File:                     465e1a7d-d25c-41fa-b387-a7c000917fbd.cer (raw, json)
Hash identifier:          jx+/upus+u7nqbVK0+tUkj7Y85JgBeprO1IgP+Ht/yw=
Subject key identifier:   EF:6D:74:C3:28:7D:81:AC:C2:33:40:EF:1D:9E:92:10:FA:D4:F9:7B
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584304B79907C2F0D02205A0D400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/465e1a7d-d25c-41fa-b387-a7c000917fbd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 27 Aug 2023 00:45:21 +0000
Certificate not after:    Sat 29 Nov 2025 01:45:21 +0000
Subordinate resources:    AS: 17098
                          IP: 158.51.40.0/22
                          IP: 172.97.100.0/22
                          IP: 209.182.252.0/22
                          IP: 2604:fa40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:04:b7:99:07:c2:f0:d0:22:05:a0:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug 27 00:45:21 2023 GMT
            Not After : Nov 29 01:45:21 2025 GMT
        Subject: CN=465e1a7d-d25c-41fa-b387-a7c000917fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:62:aa:21:a0:54:95:e2:8a:c2:22:05:8d:4a:
                    6d:c5:98:7f:04:12:21:2a:03:e1:54:22:91:20:54:
                    a8:9b:eb:f0:06:99:97:db:30:68:c1:ae:bd:09:26:
                    77:bb:28:54:0a:b3:f6:d3:ac:cc:6e:2f:85:10:4d:
                    b6:a4:e9:5d:72:a8:5e:ee:06:4c:a1:81:08:f9:d2:
                    07:03:a2:37:8f:e0:dc:09:a1:a7:44:a6:94:2c:25:
                    b4:5b:fd:ce:89:10:fe:0a:01:f8:8b:4b:29:fb:2e:
                    7d:e2:ef:73:a1:dc:51:ed:ee:9a:38:4d:aa:ac:75:
                    51:f5:85:7f:5b:5c:ef:45:5b:8a:53:fd:06:80:e1:
                    6a:40:ae:8a:93:3f:6a:07:b7:52:ac:f8:88:38:a2:
                    fb:f1:1d:af:39:94:0d:70:b6:5a:8f:2e:0f:93:64:
                    ca:cc:a6:af:77:33:12:5f:6b:0f:f4:39:e5:ce:c5:
                    f7:46:1a:1e:3e:6a:44:40:07:c8:42:a3:f3:cc:39:
                    43:b6:f1:66:28:9f:6f:4b:93:ed:b7:6e:60:40:d5:
                    3a:70:73:4a:a8:f8:c7:04:5b:11:d1:8e:f3:2f:55:
                    5b:89:19:a6:cb:1e:80:73:f3:61:97:61:fe:e2:03:
                    4b:44:7d:a7:ce:45:6d:8c:8c:0a:c4:53:d4:b2:47:
                    ba:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6D:74:C3:28:7D:81:AC:C2:33:40:EF:1D:9E:92:10:FA:D4:F9:7B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/465e1a7d-d25c-41fa-b387-a7c000917fbd/465e1a7d-d25c-41fa-b387-a7c000917fbd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.40.0/22
                  172.97.100.0/22
                  209.182.252.0/22
                IPv6:
                  2604:fa40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17098

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:07:1c:d6:5e:3e:ed:a4:fa:41:8a:30:6d:a1:20:4a:7a:b9:
         39:3b:7d:ac:29:b8:51:51:fa:69:24:12:e8:c2:3b:a4:31:49:
         7e:25:4c:b0:0c:c8:8e:c5:7b:e1:3d:de:d1:63:91:9d:a0:5b:
         1b:f0:98:fc:75:51:d1:57:e2:8d:87:ec:f2:20:f1:1e:b8:63:
         16:da:5f:53:b3:6a:6a:03:67:5e:6f:3c:99:c2:1e:b4:03:9a:
         9b:28:cd:5e:fa:fe:76:af:2f:e1:2f:2e:c2:1a:bd:60:d0:14:
         a6:75:ff:7d:bc:1c:1d:2e:7c:54:1b:aa:eb:83:9e:be:33:2c:
         73:1c:41:c5:d9:61:2b:c4:ef:1c:f1:2c:9c:7f:52:29:7c:d8:
         b5:ce:2c:ce:71:fb:cc:96:a8:e4:de:ba:56:97:2c:03:6d:6e:
         5b:56:5c:b9:ec:01:18:4d:51:68:c4:e3:d4:ca:86:1b:90:4b:
         d5:f1:2e:97:32:a9:ed:4c:29:59:ec:a6:dd:3a:87:1d:26:51:
         78:73:d5:bb:f4:d8:22:34:cc:05:5e:4e:a0:e8:40:66:98:69:
         a7:4c:64:b7:2d:41:5c:4c:d6:94:ea:49:3a:42:94:4a:77:b8:
         61:a4:9e:71:28:38:ef:84:d7:fb:e8:5b:17:69:22:a8:d3:87:
         d1:49:21:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----