Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
File:                     da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer (raw, json)
Hash identifier:          RrIvd1QH2KNIFjQm8PRGEDUa6SzxjfN5B+2w5xBQwiE=
Subject key identifier:   03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E483523B36CFEE0F18F400C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 22 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 14203
                          AS: 21870
                          AS: 395628
                          IP: 66.129.224.0/19
                          IP: 198.186.160.0/24
                          IP: 2620:103:c000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:52:3b:36:cf:ee:0f:18:f4:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 22 19:06:39 2025 GMT
        Subject: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:ff:77:60:52:0c:5f:77:77:0d:dc:fc:6d:
                    ef:53:b6:56:3a:5a:53:f0:29:ce:2b:e8:60:76:58:
                    9b:03:40:ae:a4:df:02:db:14:08:72:7b:7a:1a:be:
                    79:04:3e:0d:ab:f8:84:2d:83:ba:59:a5:ab:04:43:
                    65:11:ae:3e:cd:1f:99:26:04:b8:d2:ad:e3:f6:17:
                    93:ed:75:e2:21:fc:a6:a6:47:41:bd:4d:45:19:93:
                    20:f0:f7:8f:86:c1:f4:3d:c5:02:77:3b:3b:c8:7d:
                    0a:79:b7:59:36:2e:1c:81:d3:09:04:f2:8d:10:e8:
                    a8:a5:2d:84:74:4b:6a:54:12:16:7c:f5:a6:93:c8:
                    6f:9a:1f:1a:47:c1:7b:ee:7a:76:4e:2e:fd:4f:ce:
                    7e:44:f2:34:fa:4d:62:2d:48:c4:bb:3b:6a:4a:34:
                    28:f1:89:c4:62:cf:46:12:49:b3:a7:09:5a:de:38:
                    f4:d5:51:4a:9c:3e:97:e1:a4:0e:ba:c4:e0:b2:dc:
                    ab:69:3a:96:c0:b4:b8:2e:a9:2e:ec:5a:a4:17:25:
                    82:72:42:69:55:0d:52:72:db:18:2b:47:b8:d2:65:
                    50:2a:11:01:72:f3:d0:9d:38:1c:85:35:97:de:99:
                    2b:54:36:0e:f5:c9:81:5f:bf:f5:97:7a:06:bc:ce:
                    1e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.224.0/19
                  198.186.160.0/24
                IPv6:
                  2620:103:c000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14203
                  21870
                  395628

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ec:52:d2:15:71:24:0a:a3:74:9e:23:bc:f1:ee:da:69:c1:
         f8:2b:8a:b5:43:f7:56:a7:5c:5f:e3:d6:e2:46:37:22:e5:88:
         b4:9f:37:54:67:a4:a3:ec:b4:ab:a2:ed:fd:15:73:b5:0d:b2:
         82:47:76:b2:42:e4:19:1b:d5:01:2e:78:2f:94:0c:00:a6:55:
         13:43:7b:be:50:f2:56:91:7a:8f:84:b3:11:3c:8c:ea:e5:de:
         88:52:4a:bf:34:42:dc:f7:60:07:2d:34:19:ad:57:67:00:26:
         ea:71:af:1d:c7:28:b9:aa:a3:aa:a5:a0:bd:d5:c4:36:fd:7a:
         3e:c7:5f:4c:ac:cf:ba:39:2f:16:9f:a1:52:55:04:d1:8c:47:
         5c:80:52:1d:af:f6:66:6d:3e:3d:e8:6b:2b:33:43:d5:89:22:
         fc:e9:d1:7b:39:71:30:7d:2b:09:bc:f4:73:b2:2e:e1:03:9f:
         1b:24:ce:0f:06:d0:fa:2f:b0:33:ae:82:ff:17:de:c9:a2:d5:
         4c:29:13:ee:cb:9a:0f:1b:f1:6a:f7:7b:bd:8e:a5:8d:e1:96:
         0e:76:fd:85:48:83:a1:a4:80:f5:32:6f:d2:08:24:b5:0e:17:
         72:c5:9d:f1:0b:34:2c:b3:b7:4d:d3:91:92:74:2b:2e:dd:39:
         ab:65:55:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----