Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer
File:                     5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.cer (raw, json)
Hash identifier:          pXXdWO+A98TqwDIQgdB6o48hIHv3MccSYboCCumxCrQ=
Subject key identifier:   A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285842A896FD0951400BE850873B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 25 Jul 2023 00:45:17 +0000
Certificate not after:    Mon 27 Oct 2025 00:45:17 +0000
Subordinate resources:    AS: 399213
                          IP: 104.167.227.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a8:96:fd:09:51:40:0b:e8:50:87:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jul 25 00:45:17 2023 GMT
            Not After : Oct 27 00:45:17 2025 GMT
        Subject: CN=5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:95:5f:3b:76:23:b3:58:cc:f0:d1:ef:e1:
                    de:06:0d:38:04:bb:39:4d:49:7f:3c:3e:30:5b:70:
                    f7:98:c4:9a:42:bd:06:84:52:aa:57:ff:55:ba:ed:
                    96:04:dc:45:a2:a6:a1:ba:df:ab:6f:dc:e2:67:7a:
                    ec:bc:11:36:1b:65:c4:8d:46:94:fb:05:31:ff:7e:
                    2b:80:b2:27:d6:7f:84:89:76:a2:f4:89:9b:22:c8:
                    b7:7b:9d:37:d7:9c:24:34:c7:35:50:d6:48:46:f2:
                    d0:46:96:16:29:fa:35:59:3b:b5:34:0f:8d:60:52:
                    5d:01:aa:56:9d:93:89:13:1e:76:20:34:1b:d5:b6:
                    43:7c:7e:7d:2b:8d:75:4b:7b:9e:46:a7:21:66:b3:
                    93:97:8e:a0:a0:05:fc:17:23:a0:fe:33:57:26:62:
                    b5:a0:4d:86:d0:8d:49:78:93:ad:98:cb:3f:fb:1e:
                    00:6d:a3:b2:d1:5c:4d:04:71:ed:b3:b1:5e:b3:f0:
                    fd:6e:e5:c8:ae:14:11:f4:18:5a:dd:2b:1a:c4:2d:
                    a3:5f:96:2a:4a:3c:c8:6d:70:eb:ec:0c:a5:07:a9:
                    7a:16:16:57:b8:75:66:22:7c:e2:8e:f1:26:e1:1c:
                    45:9a:c4:8f:33:14:ab:9d:fe:9c:46:a2:43:1d:f1:
                    5e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:92:D8:21:7C:49:33:E4:FA:A7:F1:31:06:BB:75:92:C6:C8:0F:69
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306/5d6a5d7a-51a2-4a83-b5b5-d8c154b8d306.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.167.227.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399213

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:75:bd:c2:db:be:0b:16:59:26:5a:92:8c:70:50:0d:1b:
         af:1f:8e:6e:20:15:fd:8c:7e:66:55:4d:1a:bc:36:61:00:f8:
         42:47:09:6e:1e:a2:f8:08:fa:8b:86:ce:f4:1d:8c:dc:65:50:
         11:96:41:eb:ff:67:54:42:0d:89:fd:0c:c9:24:c7:81:21:9a:
         f5:d4:36:40:e5:de:a5:53:38:47:c9:53:14:40:e5:80:23:41:
         08:87:18:a8:21:57:27:2f:ea:d0:a6:7c:07:7d:09:1c:5b:6f:
         df:41:02:d1:33:7a:93:74:fa:5d:f2:84:9b:ff:d9:e3:f0:d3:
         d6:0a:52:ff:6e:9f:53:7a:37:26:99:b5:0a:57:b4:b5:43:6f:
         9e:76:86:32:d3:dd:4a:5c:ba:b5:88:19:74:5a:ac:9f:0c:33:
         59:52:a6:c9:42:d9:eb:ec:17:22:e7:90:56:31:81:68:db:e2:
         a7:ef:5f:c7:03:fe:2c:5f:bd:fd:d8:51:29:88:5a:54:83:52:
         d5:82:c4:7a:0f:24:d7:aa:92:e4:41:64:fb:f3:a8:d8:77:1f:
         d3:50:79:34:ad:0c:82:01:ae:93:c4:e3:cc:ec:84:72:e1:b8:
         84:0a:da:27:27:95:fd:7f:30:2e:d8:4d:bd:ea:0f:41:c0:03:
         e8:ef:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----