Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae.cer
File:                     6ae88fcc-f987-4b2c-abc0-89a278cc29ae.cer (raw, json)
Hash identifier:          HDrS4Ce3QPRiWOJo8aiqpgES+QtTJmFQzr21wUYkgc4=
Subject key identifier:   86:F7:AC:0C:C6:B3:3F:93:49:73:97:29:65:70:FC:1A:3A:90:32:38
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584312AD053CF41EC33A7C928300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/6ae88fcc-f987-4b2c-abc0-89a278cc29ae.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 01 Sep 2023 00:45:21 +0000
Certificate not after:    Thu 04 Dec 2025 01:45:21 +0000
Subordinate resources:    IP: 24.170.208.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:12:ad:05:3c:f4:1e:c3:3a:7c:92:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Sep  1 00:45:21 2023 GMT
            Not After : Dec  4 01:45:21 2025 GMT
        Subject: CN=6ae88fcc-f987-4b2c-abc0-89a278cc29ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:39:2b:86:96:16:22:c1:80:61:00:5d:4d:
                    e2:38:8c:06:e9:11:5d:38:c0:7b:39:95:7c:f3:f7:
                    e1:d7:36:db:1f:d5:38:c1:0b:82:af:fb:2e:67:7a:
                    06:64:0e:54:22:38:4f:24:7f:62:56:23:53:46:f0:
                    09:81:e5:f2:52:17:d5:b6:71:53:01:e5:04:27:e6:
                    4e:64:4c:0e:20:08:7f:83:c1:3e:01:a4:d4:6b:66:
                    ea:40:d1:f6:75:0d:29:d9:09:4f:72:43:50:78:d0:
                    5a:2a:14:49:2b:96:6b:fb:f1:ae:5b:09:5e:de:9b:
                    f8:4e:e9:3b:6a:5f:be:2c:e7:e1:cf:49:4d:e3:74:
                    8b:21:3b:0d:66:b5:9b:9c:35:1b:77:5a:2f:db:c2:
                    05:ee:ed:89:0f:c2:13:ae:28:d6:a2:d8:fa:4c:61:
                    4c:d1:d0:36:06:c7:51:aa:27:cd:24:0d:e3:e9:96:
                    be:c2:bc:d9:03:2b:bf:a6:78:26:1d:fb:2a:17:85:
                    23:01:29:f2:e4:4a:3b:5b:b3:4c:70:97:47:19:29:
                    43:e0:df:3e:c9:0d:99:6b:7a:0a:51:94:1c:37:a6:
                    36:07:b9:8a:68:d6:d5:46:4a:fa:8c:38:1b:cc:0e:
                    39:70:c2:22:f4:62:b9:bc:27:29:6e:20:10:7e:45:
                    22:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F7:AC:0C:C6:B3:3F:93:49:73:97:29:65:70:FC:1A:3A:90:32:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6ae88fcc-f987-4b2c-abc0-89a278cc29ae/6ae88fcc-f987-4b2c-abc0-89a278cc29ae.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.170.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:8b:35:e3:8f:e1:ea:f1:16:bd:5c:f4:12:df:f8:07:05:df:
         67:c2:85:e5:41:d1:cb:9a:bf:ca:cc:54:5d:6a:54:bd:f1:ee:
         47:61:5f:59:ff:56:c5:e5:7a:7a:ac:a7:56:e3:3d:1c:0f:fb:
         91:da:2a:f7:d4:4a:72:ed:84:3d:0f:87:42:02:82:7e:19:7a:
         60:2a:da:7f:72:62:ee:78:66:67:e8:5f:67:d3:b7:56:12:26:
         79:05:d9:34:bd:50:e4:cc:db:b9:10:f2:96:ae:ce:02:aa:a8:
         4e:af:83:5f:a7:b3:6b:77:10:06:aa:e7:58:1d:62:8a:12:26:
         40:9d:c5:0e:a1:cf:bd:50:e0:af:c7:ec:59:d5:fd:33:c9:9b:
         0a:d2:52:56:4e:d6:be:b2:ad:02:5a:9d:3d:64:84:4a:30:14:
         2a:8f:3d:c9:f6:d7:c5:8f:39:49:26:81:59:1a:6c:14:21:63:
         42:c4:3a:96:93:5c:ab:be:61:0e:2c:63:35:26:f9:b1:af:e4:
         5b:7d:db:28:7a:40:d5:52:29:e4:2e:76:92:44:13:a3:2a:c9:
         1f:2d:eb:58:38:46:21:91:df:37:39:29:e4:71:8b:8d:72:ed:
         fc:94:fc:c7:3e:72:4e:1a:7f:fb:6e:3c:c3:d7:ff:8d:25:93:
         c8:c3:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----