Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6fda2ee4-1d24-48e9-9e22-00ce91419480.cer
File:                     6fda2ee4-1d24-48e9-9e22-00ce91419480.cer (raw, json)
Hash identifier:          LkLhcoGqzlII0XRAGmLOugb07RbLhorTOJoM44XzSZU=
Subject key identifier:   12:0C:B7:F4:12:BE:94:E6:73:06:27:A4:2F:EB:9B:AC:F5:C2:45:17
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584410D6FE530AC15E40AC516000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6fda2ee4-1d24-48e9-9e22-00ce91419480/6fda2ee4-1d24-48e9-9e22-00ce91419480.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6fda2ee4-1d24-48e9-9e22-00ce91419480/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 01 Dec 2023 01:45:15 +0000
Certificate not after:    Thu 05 Mar 2026 01:45:15 +0000
Subordinate resources:    AS: 399750

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:10:d6:fe:53:0a:c1:5e:40:ac:51:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec  1 01:45:15 2023 GMT
            Not After : Mar  5 01:45:15 2026 GMT
        Subject: CN=6fda2ee4-1d24-48e9-9e22-00ce91419480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:62:a0:a2:e1:ae:b9:cf:8d:31:91:02:39:78:
                    ba:3d:f6:80:c9:e6:fa:fc:9c:31:dd:95:ac:22:a1:
                    a7:dc:db:41:f3:c7:07:af:e2:ab:5a:2b:a3:10:19:
                    72:63:e6:99:ef:ac:59:ec:be:62:4c:0e:3e:f2:b0:
                    ce:d7:28:9a:05:f2:ce:f2:a0:dd:c5:d9:b5:f4:b1:
                    32:f6:0e:3f:98:db:08:c1:9c:8c:aa:eb:db:4c:8b:
                    15:ff:e7:cf:e1:f4:28:b9:cc:83:87:8e:b4:f3:52:
                    8a:84:2b:8b:cb:b6:71:ea:84:e9:a3:31:49:ed:f6:
                    3f:05:22:32:55:85:3d:0c:ff:34:5d:a2:3b:cd:03:
                    50:c9:68:8d:17:84:03:8f:bd:88:8f:9b:0d:c3:6f:
                    ea:57:36:0b:93:90:36:84:f8:a3:11:b1:13:ba:e7:
                    f4:2f:a5:e1:d7:c4:3b:9d:3e:04:65:98:6c:dc:0a:
                    97:d1:3e:e8:9d:31:64:ce:dd:cb:84:be:b3:0f:f6:
                    64:11:55:eb:65:44:64:bc:6b:c2:a3:42:91:ad:10:
                    87:38:fa:f3:82:e4:cf:fb:ed:65:db:63:3d:f3:ee:
                    64:2f:9c:13:4a:e0:d2:dd:54:f2:3f:4e:12:7b:8d:
                    76:aa:5f:87:a1:a2:d4:28:bd:fe:1f:d6:ab:15:43:
                    3f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0C:B7:F4:12:BE:94:E6:73:06:27:A4:2F:EB:9B:AC:F5:C2:45:17
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6fda2ee4-1d24-48e9-9e22-00ce91419480/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6fda2ee4-1d24-48e9-9e22-00ce91419480/6fda2ee4-1d24-48e9-9e22-00ce91419480.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399750

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:3e:49:4f:49:6f:94:fc:88:ee:bb:1e:0a:3b:4f:15:ff:dc:
         e9:73:c7:14:78:a0:fd:69:6d:dc:ee:6a:62:1d:9b:52:72:f4:
         e7:01:be:58:42:bf:87:f1:3b:05:35:34:5c:2e:65:d4:7c:b9:
         b1:9f:fb:07:49:ba:b4:61:f4:72:92:ca:d2:e8:d7:e3:fb:81:
         a5:f3:b4:fc:fd:79:d6:79:b8:ec:b7:75:7b:59:ae:84:6e:2c:
         da:b3:d2:ce:9d:16:40:98:e2:ae:3b:87:8d:24:dd:0c:d0:2c:
         69:e4:ad:9f:57:ba:48:55:63:5c:fa:91:87:9e:51:b8:ab:67:
         12:43:73:11:1f:fd:43:bb:04:30:14:db:1b:0a:bd:1b:aa:95:
         26:e6:35:04:4f:ee:25:9a:01:b4:6c:78:df:5c:61:08:b0:c6:
         1c:71:6d:ac:9a:a5:0c:c6:f8:58:d0:ed:09:39:2e:27:64:57:
         ab:65:94:5e:c7:67:ed:df:49:47:e9:d6:18:23:a4:d6:c6:0e:
         f4:cd:43:3e:89:cb:2d:5f:2d:1d:c0:ed:35:42:fd:24:0e:a0:
         11:e0:6a:85:b2:68:a9:ac:8c:1a:6f:08:8d:20:c2:89:4a:47:
         ab:26:ca:09:fb:dd:1b:91:90:93:bc:02:e6:ae:fa:4d:d1:39:
         04:6f:49:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----