Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7.cer
File:                     53990068-555c-4a99-a422-303d3cb064f7.cer (raw, json)
Hash identifier:          SuAvRzNBwMQIXGsYRNoflaMH09YpJ0TOIB+q3/Nq6RI=
Subject key identifier:   C8:6D:5B:B8:71:C8:22:C3:3A:11:D0:A0:6D:6E:E9:A1:0F:1E:0C:CE
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285843E1615F3FFE9A43A4EB6F6100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/53990068-555c-4a99-a422-303d3cb064f7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 14 Nov 2023 01:45:16 +0000
Certificate not after:    Mon 16 Feb 2026 01:45:16 +0000
Subordinate resources:    AS: 400859

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e1:61:5f:3f:fe:9a:43:a4:eb:6f:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 14 01:45:16 2023 GMT
            Not After : Feb 16 01:45:16 2026 GMT
        Subject: CN=53990068-555c-4a99-a422-303d3cb064f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f9:29:82:04:4a:d1:70:8e:d3:7a:64:33:7f:
                    e9:d8:e8:e3:93:8f:80:97:01:89:37:ca:91:2c:2c:
                    7f:18:a4:74:4e:ba:00:77:e3:18:fa:fe:99:64:7c:
                    4f:be:ae:b4:09:9c:16:8c:ad:ce:66:24:08:91:da:
                    91:82:dc:99:51:39:ed:06:30:9e:91:52:80:05:89:
                    c4:a7:c4:41:f1:ea:b5:75:81:27:07:f9:4f:fb:e0:
                    d9:8c:75:ae:e7:4a:4c:06:07:c4:04:8e:f1:4b:54:
                    c4:aa:2a:20:35:89:e3:0c:1e:0d:f5:cb:4c:2d:00:
                    78:d1:94:9e:28:e3:84:fa:7f:fa:2c:9e:92:7c:ab:
                    3e:ec:a0:0c:08:b4:2b:36:bb:83:3b:83:43:39:32:
                    02:48:ab:2b:23:bb:0a:df:af:ac:ee:4a:dd:fb:d5:
                    25:bd:7c:b2:f5:d2:c5:3e:40:81:52:fa:79:8f:9e:
                    c9:b9:29:64:64:93:30:80:15:0a:bd:38:40:62:ef:
                    7b:96:1b:b5:8d:2f:a6:61:eb:1a:07:e5:21:98:8a:
                    17:5a:e7:3c:9b:d2:eb:6d:b3:a3:b8:a4:00:07:5a:
                    35:fc:78:c3:c9:7f:39:65:45:ee:f2:c8:d5:40:60:
                    98:37:88:7f:16:d2:ce:43:21:d8:c8:bf:51:ec:76:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6D:5B:B8:71:C8:22:C3:3A:11:D0:A0:6D:6E:E9:A1:0F:1E:0C:CE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/53990068-555c-4a99-a422-303d3cb064f7/53990068-555c-4a99-a422-303d3cb064f7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400859

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:45:db:4e:59:2e:dc:f1:0a:0b:42:fc:42:69:f0:6f:8a:3c:
         cf:43:4e:1f:fb:52:23:de:70:5e:f2:8a:b7:46:ce:ec:d7:38:
         d1:35:a1:25:da:05:b8:03:e7:f7:c9:f9:70:4f:dc:20:e9:bf:
         4c:0f:c0:c5:66:20:4f:2e:14:de:48:e6:1a:47:ea:5f:88:75:
         de:28:91:78:65:a0:23:b6:07:20:c6:ba:d4:58:78:38:d4:76:
         f4:c9:12:27:75:ff:49:0f:55:06:35:55:ea:c9:c4:b0:54:d9:
         fc:3e:84:8b:93:bc:15:71:45:60:c6:f1:32:3f:ee:58:6b:c9:
         63:d3:38:a7:dd:9b:7e:bd:74:b5:ec:96:64:a2:4f:33:7a:8a:
         09:17:14:94:9b:a6:96:f7:e0:01:c9:c1:75:78:a8:58:06:a5:
         4f:31:8d:96:ea:57:d3:68:98:a0:fb:20:ab:ef:73:e9:59:8d:
         23:50:45:c3:89:96:d1:17:f1:8d:bb:94:a1:22:42:a7:8b:9b:
         1a:6c:f3:0e:7b:26:f7:85:0a:f8:a9:7b:bd:be:d9:f6:fc:33:
         66:a2:ef:cd:f9:bd:1b:8d:12:6d:fd:bc:79:e1:0b:89:87:29:
         13:df:f2:e3:66:4b:65:ae:94:7d:b7:b3:00:e5:27:09:5d:ed:
         6e:41:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----