Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer
File:                     54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.cer (raw, json)
Hash identifier:          DE3qW9C86fnwJthChi3tq9XrVk9UfBcaSqWX3I/qh18=
Subject key identifier:   53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285846EEF33565DDD7996BEA8AA7F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Aug 2024 00:45:25 +0000
Certificate not after:    Mon 23 Nov 2026 01:45:25 +0000
Subordinate resources:    AS: 22296
                          IP: 23.155.8.0/24
                          IP: 2602:2e5::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ee:f3:35:65:dd:d7:99:6b:ea:8a:a7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 20 00:45:25 2024 GMT
            Not After : Nov 23 01:45:25 2026 GMT
        Subject: CN=54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0f:ba:c8:fb:e9:87:14:4c:41:88:01:54:9a:
                    69:53:6c:c0:0e:84:7a:86:5d:38:c6:f1:41:ed:38:
                    bc:7a:74:e8:28:37:7b:ca:39:33:ad:1d:61:c7:74:
                    74:b4:d5:e7:f9:00:ab:a0:7a:ac:22:53:f4:3d:b5:
                    36:d0:03:76:29:c9:05:c1:e6:23:e3:e1:db:50:4c:
                    b6:65:29:7e:a5:ec:54:93:c0:a8:0d:bb:c5:c7:36:
                    75:f0:d7:1b:ae:62:90:b2:c3:30:ae:6a:7e:83:89:
                    ce:f1:c7:1b:ce:9e:fe:ba:12:75:b5:2b:c2:55:b4:
                    3a:52:4f:79:40:77:36:91:0e:05:d9:8c:e1:1c:54:
                    bd:6b:a2:29:2e:18:1c:7e:79:d4:5a:18:f5:4a:ac:
                    86:ba:e5:37:a2:c4:6a:29:ce:f4:8e:0f:d8:61:4e:
                    d0:11:56:c5:0a:08:88:c4:72:8f:1b:c3:59:50:ac:
                    56:58:41:5c:d1:82:1b:16:05:ce:35:3a:77:9c:a2:
                    4b:d4:04:4e:06:b7:4a:d2:0a:d1:29:dd:b2:1f:9a:
                    9a:3e:87:05:df:84:93:30:f1:55:06:ff:13:60:fd:
                    3c:e2:e1:44:5f:c6:64:db:78:04:fe:e9:2e:9b:a4:
                    87:94:c4:c8:6c:ec:48:36:54:8f:bb:75:35:3f:88:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:65:50:E9:F8:19:F1:12:15:D9:A6:AC:59:7E:1F:43:51:66:D8:CC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb/54293cd2-1d8c-43f2-90b8-c7fd8b1c2efb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.8.0/24
                IPv6:
                  2602:2e5::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22296

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b8:94:0a:c1:9d:c7:1d:4a:62:d2:40:85:91:f3:1f:92:d8:
         e1:4b:f1:7e:f9:0e:63:b4:16:f8:34:99:50:02:d4:3f:8f:23:
         ba:3b:d4:f8:a0:48:58:a3:42:ae:38:cd:8e:66:68:7a:62:41:
         9d:2d:41:5d:19:b3:f7:e8:5b:10:36:71:ca:15:34:1d:b1:63:
         69:14:f3:e7:e3:fd:8a:ff:5f:b0:fe:98:f7:89:ef:33:72:81:
         d7:f5:a3:f1:54:54:21:e5:b6:2e:93:a9:01:ad:cb:63:06:88:
         ad:96:c9:35:65:4a:45:58:ba:e0:be:03:53:63:b7:71:98:a6:
         6d:e0:1d:cf:3d:2c:20:0b:b9:b3:22:fd:7d:a6:5d:1a:87:6f:
         52:e4:8f:6f:2b:39:01:c4:aa:e1:e0:5c:02:c6:01:b3:dc:df:
         b3:52:b7:8e:c5:17:6b:16:0f:56:4c:bb:c1:9c:0d:67:30:94:
         2e:3c:83:a2:51:55:12:39:cd:1d:c6:37:5e:fd:28:d4:67:55:
         fe:4f:76:b7:0c:f9:10:ad:e4:82:e6:aa:0a:f2:8b:4d:b5:c6:
         50:5e:20:bd:b1:4e:ce:e1:ba:89:fd:94:0c:77:3c:58:bb:5e:
         cc:8f:32:bb:ff:1b:dc:b0:d9:20:4b:c7:fb:e9:73:3f:0d:18:
         dc:e9:6b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----