Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer
File:                     92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer (raw, json)
Hash identifier:          fsJ/hsmwb5qK3tsIRjlcQmGwLQufek/QYmyX2QLw40Q=
Subject key identifier:   07:87:FA:92:98:BE:2A:9F:63:FE:83:73:16:30:D5:DE:8F:CE:41:D3
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E48346D0BA15516DB1597220
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 04 May 2025 19:06:39 +0000
Subordinate resources:    AS: 63428
                          IP: 104.255.200.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:46:d0:ba:15:51:6d:b1:59:72:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May  4 19:06:39 2025 GMT
        Subject: CN=92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:74:bd:b7:6d:ff:d8:30:63:c0:c6:85:aa:
                    d7:f4:4d:6f:4d:b7:e7:88:dc:69:89:d2:57:c9:19:
                    33:55:57:26:54:9c:19:92:60:5d:98:c0:3e:5b:86:
                    ba:18:72:00:df:96:a9:da:da:6a:aa:b8:11:cb:82:
                    db:dd:98:b6:55:3d:f4:b4:94:4c:b5:40:e0:72:24:
                    07:6a:ff:bd:c6:5e:7b:91:36:59:a8:c1:08:a1:98:
                    78:c8:6d:68:00:cc:c3:4b:a0:b2:66:b7:c6:4b:6d:
                    e9:92:94:16:15:41:e7:55:bc:f7:27:fd:0d:5e:de:
                    45:e5:6c:6e:1f:be:a5:03:6b:66:ca:f0:9e:f7:64:
                    b2:88:62:42:02:a2:fc:60:0d:45:27:13:37:ef:18:
                    84:36:f7:60:b1:d6:5a:bb:57:24:f8:e7:d7:15:46:
                    b5:41:c0:5c:af:cd:47:3b:dd:05:1a:84:6d:38:ca:
                    4e:ec:98:c6:84:cd:8f:26:8f:ac:be:38:05:2b:ed:
                    a9:35:a7:de:43:91:d5:43:8d:46:7c:0f:44:d5:93:
                    02:1a:5a:0e:bf:68:8c:bb:25:58:dd:7f:b0:a4:2d:
                    e3:da:30:2e:75:66:fc:14:c8:cb:8c:ed:04:cf:69:
                    e1:5b:50:d6:9a:be:00:23:b3:d9:3d:61:b8:ec:e1:
                    8a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:87:FA:92:98:BE:2A:9F:63:FE:83:73:16:30:D5:DE:8F:CE:41:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.200.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63428

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:fd:42:90:49:b8:2c:95:16:c1:50:5f:d1:76:20:32:ef:f6:
         cd:58:86:48:70:eb:0c:47:2b:94:9c:5c:2d:e9:39:f5:1a:2d:
         11:d9:aa:d2:47:38:c3:69:d5:6e:12:47:36:a5:dd:9b:ef:55:
         b6:89:6e:24:74:7e:40:26:91:cf:3e:63:91:84:36:81:68:ec:
         e4:43:dc:26:5c:ae:73:fc:08:db:1f:8b:10:05:91:69:e9:3d:
         98:de:ae:f2:94:65:34:00:73:c9:94:b5:b4:5b:e0:04:c4:c5:
         a6:6e:d3:0c:e0:52:3a:08:a7:c8:b0:f5:1b:ec:9b:c9:b3:a9:
         73:be:99:55:d7:ea:a3:7d:ee:6a:b0:13:de:ab:51:37:af:cf:
         ab:ce:0c:81:91:db:62:73:21:de:49:e7:71:00:6e:47:ae:4b:
         d3:b6:ba:bb:a3:35:81:9f:89:c7:17:e7:8b:b6:21:d8:1e:50:
         69:e9:9b:ed:67:c7:6d:cf:c3:5a:3b:c9:34:21:59:3b:ff:81:
         5f:ed:80:40:ee:13:79:00:df:6c:61:8c:37:f2:38:63:7a:8b:
         e0:bb:ad:db:aa:7f:ac:37:3a:42:fd:dc:e8:22:5e:ce:f8:a8:
         84:be:96:dd:32:b0:06:cb:fd:f8:18:c0:59:6b:da:93:83:09:
         0b:24:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----