Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51.cer
File:                     a8f311de-c6af-4322-a952-b9c622f40e51.cer (raw, json)
Hash identifier:          3WDcKxRYjf7I45NPLCCVQmGNuAmoZtAbrY2QYIz+WaM=
Subject key identifier:   5B:33:AF:7B:E9:7F:AE:2F:15:58:9C:D7:2B:AE:E0:5F:57:47:0A:F5
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E48355297D7B94386A9A0A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 11 Aug 2025 19:06:39 +0000
Subordinate resources:    AS: 400169
                          IP: 216.9.162.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:55:29:7d:7b:94:38:6a:9a:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug 11 19:06:39 2025 GMT
        Subject: CN=a8f311de-c6af-4322-a952-b9c622f40e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:83:fe:5a:30:1b:b5:a2:6a:94:bb:c7:fa:
                    c3:c5:47:d9:2d:46:84:2a:e8:96:30:47:86:0b:e8:
                    84:a0:ff:81:36:36:ad:fc:46:fe:1e:f4:b9:d1:73:
                    89:bf:2f:38:4d:3c:c1:58:27:53:41:5b:88:23:77:
                    48:af:5a:e2:15:c1:1b:fd:37:16:d2:47:d8:07:10:
                    42:33:c4:8d:f4:80:7f:c1:55:0e:e9:f4:a0:35:f8:
                    df:47:1a:d1:6c:37:42:7c:3b:f6:cd:3d:1a:08:fd:
                    5f:a9:5a:67:b5:c8:91:40:95:ce:d5:fe:e1:51:d0:
                    4a:8e:88:c9:d2:6a:c1:5d:a1:a1:5c:0f:45:d2:e3:
                    38:20:48:08:d7:ef:f3:af:fd:f1:1d:78:39:ea:20:
                    4d:2b:f3:2b:ae:09:20:f1:d0:ea:07:dd:b3:8e:a0:
                    54:7f:8c:75:68:b5:b6:3f:7d:c1:3e:3b:5c:61:99:
                    d2:2a:7a:f0:78:48:92:cb:88:fb:2f:ad:3a:cc:02:
                    a2:40:ae:7d:2e:95:47:b0:f9:ed:50:c0:4f:08:6c:
                    71:21:d9:a8:84:31:f5:fe:b6:97:0b:87:d5:b2:ca:
                    0e:56:96:18:61:22:69:f3:06:dd:99:95:b5:66:9a:
                    24:5e:c9:13:4a:f7:13:8a:3c:9b:b6:f5:69:66:7f:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:AF:7B:E9:7F:AE:2F:15:58:9C:D7:2B:AE:E0:5F:57:47:0A:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a8f311de-c6af-4322-a952-b9c622f40e51/a8f311de-c6af-4322-a952-b9c622f40e51.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.9.162.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400169

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0a:06:1b:99:22:e2:46:e9:aa:98:7b:f4:82:3c:c4:7e:1c:
         05:a6:97:a2:84:28:79:cd:68:08:95:93:5e:c3:83:f5:9a:6d:
         ef:4b:3b:71:14:21:b6:db:32:07:d8:0b:0c:56:c7:ca:7f:35:
         c4:08:41:03:29:23:b4:86:37:d8:65:b0:48:78:c5:45:3e:bb:
         21:e6:9c:dc:fc:21:70:d4:f8:82:88:5a:df:18:b0:50:e7:16:
         f0:3a:cb:4d:25:98:d6:2e:46:72:2c:c5:ed:4c:f5:7f:58:e1:
         01:86:20:e4:0b:4b:8d:22:54:26:de:f7:e0:79:1f:ba:24:ed:
         eb:b8:eb:da:ee:43:a7:f4:55:01:d3:31:84:58:af:90:3a:d3:
         07:55:d1:25:f1:b4:75:d1:6c:ec:ae:a0:b9:72:5d:d3:8f:a0:
         eb:de:96:e7:9a:61:e3:1f:c3:38:88:9b:eb:70:7b:99:11:74:
         87:20:50:87:cd:da:7d:d4:bc:68:c5:66:8d:3f:96:2a:a2:8e:
         f2:97:7a:d8:12:83:a8:2c:3c:18:56:4a:ed:8e:e5:80:be:29:
         d3:f4:1d:61:8a:03:60:d8:90:c7:6c:6f:f3:49:ef:0a:b7:f0:
         31:71:25:47:f6:f1:99:a0:01:cd:6e:a2:57:23:5e:c9:aa:5a:
         12:e0:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----