Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer
File:                     a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer (raw, json)
Hash identifier:          4lb8p41fbEoVjJTNLmOi4T5ouySJtnGfzqIjw9G52PQ=
Subject key identifier:   DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584234D176D000553BDE67248468
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 13 Jun 2023 13:29:20 +0000
Certificate not after:    Mon 15 Sep 2025 13:29:20 +0000
Subordinate resources:    AS: 53389
                          IP: 198.38.74.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:34:d1:76:d0:00:55:3b:de:67:24:84:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jun 13 13:29:20 2023 GMT
            Not After : Sep 15 13:29:20 2025 GMT
        Subject: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:d1:82:44:58:5c:fb:c8:39:33:a9:cd:2a:
                    5c:fa:7c:34:cc:5e:61:69:ac:3f:83:96:aa:c2:ce:
                    ae:c9:4a:4b:d4:5c:73:68:4d:73:61:05:79:4a:3c:
                    c5:3c:f0:c2:57:46:a4:69:f5:a9:b9:7a:68:cc:3d:
                    3d:7f:e6:fb:bd:ab:db:40:a0:36:ae:ec:e6:4d:4f:
                    c6:a8:33:92:12:49:39:15:c2:35:5a:a0:43:be:39:
                    f1:4e:23:64:53:61:f5:bf:9f:0d:94:1c:49:24:f6:
                    5d:a3:52:b3:80:47:99:b1:83:5a:7e:b0:5f:e9:3b:
                    7d:af:f7:c9:11:24:1b:a1:89:0b:5c:75:68:04:b6:
                    c9:b5:8d:52:36:01:ae:f5:37:ba:ac:a7:d6:10:d2:
                    59:16:e3:9e:7c:87:ef:95:73:dd:0c:ec:b0:d5:c7:
                    11:ce:e7:41:a3:46:e3:be:9e:34:d6:b0:82:96:16:
                    52:ca:86:f3:e9:e8:0c:a9:28:78:12:e5:63:8d:2f:
                    bd:30:ef:4b:4e:a1:0b:88:42:fa:ea:b6:fd:ac:da:
                    8e:e3:7a:72:4c:03:1e:67:73:9e:cf:47:16:39:5d:
                    0a:59:fa:ba:eb:91:82:d2:c7:d9:8a:4b:ce:aa:42:
                    4e:92:b5:30:a4:7b:de:4b:5f:23:ed:1a:bd:f0:0b:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.38.74.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53389

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8e:06:fd:a7:03:16:54:ee:00:3f:9c:31:d4:63:c2:bf:ea:
         c1:b8:65:49:f6:0d:fd:3e:e6:b5:27:0e:c4:0e:f7:84:12:7c:
         ba:57:04:66:42:8c:02:eb:a4:90:21:15:c4:82:77:a8:e4:ff:
         7b:f5:88:5c:fe:4a:cb:19:b2:55:26:22:cc:a0:0c:44:3d:fc:
         16:33:2a:27:f3:93:7b:68:a5:a4:3b:72:57:8a:1e:37:a7:b2:
         64:b3:d1:32:70:88:25:bf:cb:5a:63:5f:8f:fb:aa:db:39:5b:
         f5:8e:c9:03:fd:99:e5:3e:22:70:9e:86:e1:40:92:dc:78:e3:
         e2:bc:11:61:2d:6c:98:a6:a5:15:12:b7:d5:ed:7b:12:33:03:
         a2:a1:91:10:44:41:f8:b6:95:73:90:63:ae:77:70:25:2e:2d:
         9e:50:60:e1:06:83:36:9c:fd:6e:9b:76:d9:d8:7e:47:2f:3c:
         ad:db:03:58:9c:cb:3c:57:7b:37:41:99:b4:68:ab:9d:8e:35:
         0c:bb:bb:01:e6:03:7c:0d:cb:46:ea:a5:90:c3:b2:09:b0:33:
         2e:5e:68:77:72:54:0e:09:f0:28:fa:bd:11:c0:80:1e:88:ad:
         95:34:a4:a6:3a:1b:37:b6:9f:45:5e:7b:89:02:5c:cc:b7:cf:
         65:05:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----