Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9.cer
File:                     92423726-3299-41c6-ba87-4e50313b1db9.cer (raw, json)
Hash identifier:          3R5mw7JPT3+gT27VfuTlodSP49P0fOG3WGfDtSmepEg=
Subject key identifier:   87:A9:5F:4F:27:C4:9A:63:F1:5E:69:98:38:10:DB:CA:DE:85:74:46
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858444E4207A05E323FB602D2A200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/92423726-3299-41c6-ba87-4e50313b1db9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 23 Dec 2023 01:45:14 +0000
Certificate not after:    Fri 27 Mar 2026 00:45:14 +0000
Subordinate resources:    AS: 17117
                          IP: 192.197.92.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:4e:42:07:a0:5e:32:3f:b6:02:d2:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Dec 23 01:45:14 2023 GMT
            Not After : Mar 27 00:45:14 2026 GMT
        Subject: CN=92423726-3299-41c6-ba87-4e50313b1db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:ae:9c:b9:71:ac:d7:86:72:08:53:7b:ab:
                    01:f9:d5:0e:df:b2:04:8c:d7:1f:5f:48:35:36:db:
                    3d:27:64:86:34:63:ed:8f:72:31:07:fa:12:2d:c5:
                    da:0f:eb:a1:a8:64:75:b7:ea:97:3d:6a:fc:94:5c:
                    05:d0:cf:d9:97:9a:1d:50:73:e1:15:e1:d3:9b:75:
                    ed:6b:17:7d:c6:be:c0:51:b3:9f:5d:09:73:4f:62:
                    74:57:b5:4e:9c:7f:03:b5:37:03:e8:f0:84:cb:4f:
                    d0:38:36:2c:1f:93:bd:d9:01:1e:45:a6:97:7c:00:
                    ef:dc:89:a1:15:77:c0:9e:c6:6d:00:d4:4e:f7:2f:
                    8c:e8:c1:2b:41:f7:a8:ec:e2:c5:65:7a:b6:be:89:
                    34:10:e4:6a:95:ff:40:13:ef:b2:08:8d:bf:de:03:
                    b2:9d:04:24:5b:33:6b:03:8a:37:51:08:3f:3e:ac:
                    6a:8f:dc:41:58:2e:7d:e7:01:5f:6b:25:35:44:e4:
                    c9:c6:87:ec:0c:ce:69:d1:09:8a:13:e4:6b:dc:5a:
                    3e:96:f3:a2:27:3b:29:7c:bf:78:48:02:cf:42:0a:
                    69:70:20:9d:51:09:fe:40:fe:f9:c1:cb:c2:2e:d8:
                    cb:e9:e4:20:2a:1d:27:41:9f:9e:92:ef:60:d6:0d:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A9:5F:4F:27:C4:9A:63:F1:5E:69:98:38:10:DB:CA:DE:85:74:46
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92423726-3299-41c6-ba87-4e50313b1db9/92423726-3299-41c6-ba87-4e50313b1db9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.92.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17117

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:00:de:a5:bd:d2:a1:b2:8e:4d:5d:51:d8:1f:50:eb:5d:9d:
         f6:4c:37:f6:ec:b9:32:88:c3:54:07:1e:6e:57:9b:ee:17:38:
         de:36:63:37:7f:21:a2:0d:db:36:2c:c2:bb:13:6b:1a:af:0d:
         c2:56:e4:e0:cf:22:bd:fc:7f:73:4b:eb:dc:e0:78:fb:6b:e2:
         92:fe:aa:13:f4:c6:b7:83:43:94:50:07:76:77:ca:ca:ef:2f:
         e1:8f:7f:17:4b:46:00:ac:1e:66:ac:cf:e8:ea:c3:eb:05:6e:
         bd:3b:4d:df:cc:3d:ef:b1:b0:f0:4a:22:d5:2d:be:db:53:34:
         10:63:e0:a3:c4:c6:20:db:3f:6c:52:af:5a:0b:03:e0:60:82:
         c0:d8:8c:dc:d9:6f:4b:87:39:86:67:d1:a9:45:17:8a:0c:4e:
         5d:28:4d:66:7f:64:4f:c5:4c:0a:83:11:b6:2f:7b:0e:8c:8d:
         29:d5:5e:25:ee:b7:8f:2b:9d:e3:86:7a:48:b2:f8:98:d5:6e:
         4f:9e:56:ba:28:f2:91:05:ed:af:1d:1e:f1:80:24:c3:c7:4b:
         b5:7e:9f:45:06:a4:01:30:21:52:fb:fe:b3:aa:94:29:28:b1:
         56:de:b4:2e:2d:74:2e:27:3f:ae:4b:03:88:e6:4b:59:30:76:
         e3:0a:f3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----