Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee.cer
File:                     e56f33c4-5195-43f8-a0d4-992f28b374ee.cer (raw, json)
Hash identifier:          gQaSG26yJvoIJBeeGxo8zDqxs4VeaLhy64yGwQImXro=
Subject key identifier:   20:60:C8:B3:53:2F:F2:8E:E9:F4:83:19:56:82:2D:04:BA:3C:0B:F4
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285843FD4C358052D055B698A93100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/e56f33c4-5195-43f8-a0d4-992f28b374ee.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 24 Nov 2023 01:45:16 +0000
Certificate not after:    Thu 26 Feb 2026 01:45:16 +0000
Subordinate resources:    AS: 399273
                          IP: 45.42.225.0/24
                          IP: 2620:a2:e000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fd:4c:35:80:52:d0:55:b6:98:a9:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 24 01:45:16 2023 GMT
            Not After : Feb 26 01:45:16 2026 GMT
        Subject: CN=e56f33c4-5195-43f8-a0d4-992f28b374ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:1e:51:96:e5:63:ef:a1:1d:40:38:b7:28:
                    16:f8:ca:db:cf:dd:8a:38:2f:89:e9:ad:92:b8:f9:
                    88:55:43:bb:4d:10:35:10:5c:93:66:b1:f3:07:6c:
                    c2:30:9d:08:f5:55:21:4a:37:5b:65:82:b6:46:8e:
                    d7:47:dc:87:d1:b4:25:9a:66:f2:fb:af:76:ab:5b:
                    5f:6c:15:a5:1a:7f:63:a7:97:05:e5:1e:56:05:ce:
                    5b:c6:aa:d1:80:cf:16:38:da:3d:d0:e5:ef:9b:43:
                    93:32:3e:6a:f0:fd:fe:c7:a0:67:a8:6f:5f:55:a3:
                    01:7d:eb:ee:6b:4e:74:07:a5:18:bd:c9:67:c4:bf:
                    19:19:22:27:bb:6b:48:53:db:5f:a8:7a:ad:5c:25:
                    95:ef:fa:dc:ce:bd:2a:c1:1d:80:8b:a3:00:13:45:
                    a3:f8:f2:99:2b:dd:d1:65:5d:48:7a:05:a4:b7:70:
                    d6:03:d3:ef:6d:20:02:67:a6:d0:fc:8d:53:24:f3:
                    ee:c8:46:cf:94:53:a6:af:49:35:2c:79:c9:b1:e1:
                    ec:70:7e:e5:78:84:e0:4c:17:e2:42:6f:59:b8:38:
                    7b:6b:71:6f:65:33:2d:28:0d:d3:60:3a:7e:e3:db:
                    ac:f3:44:b5:1a:ed:bd:23:22:c1:75:18:f7:16:9a:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:60:C8:B3:53:2F:F2:8E:E9:F4:83:19:56:82:2D:04:BA:3C:0B:F4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e56f33c4-5195-43f8-a0d4-992f28b374ee/e56f33c4-5195-43f8-a0d4-992f28b374ee.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.225.0/24
                IPv6:
                  2620:a2:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399273

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:9c:4c:bb:35:83:77:1b:10:7e:97:33:28:16:05:34:92:cf:
         eb:5f:b7:dd:89:33:79:2f:a9:b0:09:b9:90:90:da:d5:04:5f:
         33:ae:d0:bc:f7:58:3b:f9:e0:c7:49:6d:82:d4:6f:ea:cf:e7:
         ff:6a:ec:17:80:9c:c8:d7:ec:32:9e:32:1b:c1:cd:e6:5b:0a:
         2c:d1:c3:1a:23:0c:70:85:d7:d9:25:76:bc:8a:af:e7:fe:49:
         99:9a:23:3b:28:48:7b:59:03:ed:57:b4:bf:00:af:70:16:81:
         77:36:de:ed:ef:d9:ed:89:a0:7e:d4:4d:51:a9:fc:80:db:ad:
         d9:64:15:e4:2b:44:fe:a8:62:6c:55:b3:ac:1f:7f:0f:38:2d:
         d7:24:f7:bf:c2:b8:ec:34:8e:29:e6:19:a3:d7:7c:93:9a:05:
         40:b5:c2:3e:41:da:87:2e:30:98:74:51:a0:6a:25:9a:b6:db:
         49:d5:1e:62:77:68:78:9f:70:59:24:21:8f:13:73:1f:2a:1b:
         f0:58:cd:e4:ea:f3:9c:1d:87:d4:c6:d0:bd:6c:b3:6e:ab:55:
         0f:89:10:ff:08:3d:1b:66:c4:05:81:8f:41:32:1d:18:b8:36:
         69:f7:e1:e2:82:fe:44:cd:59:7a:89:8f:31:82:9c:f2:9a:c3:
         c0:d2:70:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----