Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer
File:                     8d335843-a776-4e8d-949e-8217822b7151.cer (raw, json)
Hash identifier:          hbZTOyYvOQw2j9OjTInjqDaYivDgt9WLKyJndwZskX8=
Subject key identifier:   F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858422DC0E122CFC0EEF8D2E2A600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 11 Jun 2023 00:45:16 +0000
Certificate not after:    Sat 13 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 399087
                          IP: 23.183.176.0/24
                          IP: 2602:fc5a::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2d:c0:e1:22:cf:c0:ee:f8:d2:e2:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jun 11 00:45:16 2023 GMT
            Not After : Sep 13 00:45:16 2025 GMT
        Subject: CN=8d335843-a776-4e8d-949e-8217822b7151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:91:08:44:d0:5a:c0:59:9c:5c:5b:69:8d:35:
                    33:b7:ea:fd:d2:2d:09:60:4a:4b:b4:ff:21:0d:24:
                    7a:50:5c:b6:66:de:6c:a4:0f:0b:5b:30:eb:97:1c:
                    a5:1e:8f:30:d1:45:40:8a:92:65:bf:5f:43:a4:48:
                    84:4b:ea:7d:d4:ed:60:2e:dd:59:02:97:07:62:6f:
                    5a:6c:97:9e:79:8b:d2:7f:a5:56:75:d9:32:6b:4b:
                    38:cb:cf:d6:48:d4:75:49:71:31:3b:71:58:2b:fe:
                    55:d3:97:79:e3:e7:5b:15:af:86:dc:80:34:45:01:
                    05:4b:55:a2:08:f8:dc:d5:35:84:56:14:ed:3c:8d:
                    7d:82:43:2e:dd:2b:2b:f5:a5:0f:50:e3:4d:7d:ba:
                    1b:b2:f2:fb:5d:98:60:70:26:b8:a9:42:ec:e6:86:
                    78:cb:1f:11:9a:5e:8b:cd:81:db:bf:f0:89:09:f5:
                    b0:da:91:ff:04:a9:75:be:6d:4b:f7:d2:69:aa:92:
                    ae:60:88:24:2b:fb:bc:8f:9d:60:20:b7:d2:c4:13:
                    f9:e5:33:e4:ba:4b:94:de:c9:e9:1c:a1:34:fa:a5:
                    8f:ee:c1:f4:b3:31:48:ea:2f:dd:b1:a1:f4:89:d6:
                    b8:9c:b9:2c:38:1e:14:3e:49:e1:76:f0:4f:d3:49:
                    9e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.183.176.0/24
                IPv6:
                  2602:fc5a::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399087

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d4:25:03:26:f2:b2:54:46:32:14:90:7d:92:ee:69:a5:42:
         1b:48:a1:85:37:8d:4a:70:07:51:a6:36:cf:3c:15:0e:dd:e2:
         34:16:74:3d:8c:fb:40:b0:79:9d:44:f7:b5:2c:a2:b3:3d:11:
         7a:7a:4f:53:5f:e5:ab:40:71:65:21:66:f6:d6:21:cc:81:db:
         1a:4a:ee:db:e1:47:80:02:8c:ee:3a:6c:8c:77:5c:97:2f:43:
         5a:06:9f:3d:f2:22:95:4d:7c:ef:b5:1b:56:d3:6e:75:d7:0c:
         5e:d2:e8:ce:3a:d5:0a:1d:21:ea:6e:9c:08:24:67:e4:18:d2:
         7c:67:8b:f4:d6:1b:77:2c:86:06:d8:c4:3f:64:c8:55:60:19:
         04:d3:53:8a:ab:ea:f6:5d:8f:4b:e9:05:9e:f5:04:cf:c8:73:
         43:ed:bd:81:3c:e3:c2:3f:97:0b:85:6a:6f:db:53:c2:65:0b:
         18:f9:59:ea:af:5c:80:ec:ba:f2:d3:ae:db:e5:1f:82:98:62:
         4e:02:a4:49:90:d1:23:5c:67:ab:22:cb:83:d3:27:56:6f:9c:
         70:fa:41:1d:4d:35:9c:da:08:b5:1c:f7:70:d0:9b:78:33:31:
         bb:7c:4b:41:94:33:b6:54:a1:57:1a:51:2a:f6:be:2e:21:14:
         be:bc:dd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----