Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer
File:                     9281adc0-928e-432b-8a28-e77e9cddfcfe.cer (raw, json)
Hash identifier:          lc7zbdY589P/dkV3xLSHkNvrszqZmpmz6RKE5kFgCCs=
Subject key identifier:   B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285843E42C0C91927B2A51C3719D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 15 Nov 2023 01:45:15 +0000
Certificate not after:    Tue 17 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 13543
                          IP: 162.253.96.0/22
                          IP: 2620:f4:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e4:2c:0c:91:92:7b:2a:51:c3:71:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Nov 15 01:45:15 2023 GMT
            Not After : Feb 17 01:45:15 2026 GMT
        Subject: CN=9281adc0-928e-432b-8a28-e77e9cddfcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:f2:85:17:64:fe:6b:a2:14:a3:02:3b:94:
                    62:b1:e5:5d:f6:f5:e0:53:c9:eb:f4:98:6c:92:29:
                    ff:7b:ba:f3:fb:bc:43:4e:02:60:8d:c7:34:62:a9:
                    0b:66:d2:21:a2:88:f5:8a:90:2c:30:76:33:04:09:
                    8f:55:29:a1:ec:f3:e9:31:e4:da:4e:29:1c:c2:c4:
                    02:89:79:9e:e5:2b:d3:83:7c:f9:5a:e5:3e:03:0e:
                    95:88:c6:51:99:e7:98:8b:9a:51:40:9e:37:af:b0:
                    76:ee:51:54:83:16:1b:8c:21:dd:fd:3f:4c:1f:91:
                    48:28:3e:fa:93:e1:fa:e9:39:a7:a1:4f:46:91:18:
                    8b:b6:67:3f:9f:87:53:24:0d:9d:f6:86:ac:9a:44:
                    8b:db:ed:70:ce:23:09:20:09:29:15:6d:73:e1:36:
                    77:2a:7e:77:7e:1d:a3:61:8e:bf:02:8b:af:13:b4:
                    56:5b:c2:e9:99:47:9f:7c:2c:c6:3f:4e:f8:9d:34:
                    d9:74:f6:92:95:08:03:a3:5b:cc:f5:e4:35:d9:70:
                    a7:7d:18:03:a7:72:8b:6b:0d:c9:06:c5:6a:69:f5:
                    54:fb:45:b5:e2:10:2a:ac:ac:32:b3:e0:cf:03:82:
                    81:10:f3:65:e0:02:f6:db:6c:a5:99:53:7b:92:00:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.96.0/22
                IPv6:
                  2620:f4:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13543

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:38:0e:29:9d:28:77:43:b2:16:9a:c9:2f:da:33:e6:52:
         29:68:c5:f2:a1:d0:de:bc:9e:a1:5f:97:54:31:bc:a7:8b:95:
         5e:0e:cc:78:44:68:37:cc:c1:6f:3b:77:a9:88:fb:a6:1f:72:
         e4:70:c6:29:f5:22:0b:da:62:95:6e:29:c6:ba:85:63:4b:6b:
         91:56:ad:7c:5a:df:14:c9:f5:ec:4f:68:e8:21:90:ce:db:af:
         1c:11:34:f1:0e:ab:fb:85:af:2e:93:c3:61:98:20:10:0a:18:
         31:69:fa:3a:5d:fd:96:cf:96:ec:d6:45:1a:ad:75:02:c6:12:
         34:dd:ca:fb:8d:26:8c:81:ef:f5:f3:7a:5a:66:36:b5:64:d3:
         b7:28:75:9a:b4:57:bd:e0:27:c6:4f:b2:b6:6b:4a:82:cb:72:
         f7:07:23:4f:a7:87:42:df:6c:45:81:f6:48:b8:12:8b:dd:25:
         0a:61:3a:85:5f:48:96:ab:e6:43:c7:7c:d3:70:9e:2b:e6:6a:
         b0:94:cc:04:0e:db:3d:cc:69:c0:d9:5d:2e:9b:0e:5d:96:23:
         78:79:b0:79:25:f8:be:65:c1:c1:9e:77:e5:df:23:ce:ab:b7:
         5d:4e:65:16:5f:72:73:25:03:97:50:a2:cf:3d:d5:21:5d:97:
         f2:9f:76:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----