Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
File:                     cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer (raw, json)
Hash identifier:          Ectm6Gh25ZGblGIGG3v6VlIhQUaPGM4iyk8WtXJ71f4=
Subject key identifier:   DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584203E09E3EB439CDB223B07CC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 27 May 2023 00:45:16 +0000
Certificate not after:    Fri 29 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 396864
                          IP: 199.204.160.0/22
                          IP: 2604:d740::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:03:e0:9e:3e:b4:39:cd:b2:23:b0:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 27 00:45:16 2023 GMT
            Not After : Aug 29 00:45:16 2025 GMT
        Subject: CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ce:74:c9:5d:65:69:9e:76:00:6d:53:80:60:
                    a2:e4:20:2e:72:61:e9:ea:f2:5f:1e:48:ca:30:60:
                    73:a1:a8:a8:c6:d1:8c:89:4c:b1:78:ce:48:bc:b7:
                    4f:a8:7c:9a:a0:c9:39:15:10:ae:fd:b5:19:be:a1:
                    b4:0f:54:2e:27:a9:07:2d:37:a0:5a:19:97:51:87:
                    20:1f:e7:bc:e8:1e:7a:4c:2a:c7:f8:86:29:6c:f3:
                    da:86:ec:c4:57:91:dc:0f:64:e9:20:24:35:1c:fd:
                    1a:be:29:7d:96:6c:8d:a4:43:53:b0:21:33:b8:10:
                    5c:ff:88:80:05:0f:c7:af:b7:e1:9a:45:a8:84:45:
                    21:a4:02:54:e7:12:e8:40:99:94:5a:eb:e2:4a:6a:
                    49:16:00:ad:ec:fd:14:f7:64:2f:d3:4e:61:f1:6c:
                    0e:38:60:fa:67:d0:13:46:98:70:19:c3:07:7b:83:
                    58:d2:80:95:2b:ca:1f:69:ab:99:49:e9:a2:51:e7:
                    8b:d3:d5:15:e1:a9:9e:49:42:04:f0:aa:24:98:2a:
                    3d:96:38:66:8c:ff:7a:ba:15:8f:41:b0:9e:0a:c5:
                    72:f4:fd:e6:ce:b2:2d:e2:25:75:1e:fd:82:68:6b:
                    5b:76:26:20:cc:a7:6a:2a:6c:2e:de:7f:ec:9c:51:
                    20:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.160.0/22
                IPv6:
                  2604:d740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396864

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:58:5e:d5:23:dd:02:c9:92:22:d1:5c:e2:8b:d7:92:47:
         a8:86:89:f1:5f:6c:bf:92:40:30:4a:93:e7:5a:b2:7d:67:42:
         9e:b5:80:8c:49:40:41:18:a3:89:46:a9:cc:46:27:34:de:28:
         a2:e8:54:e5:df:49:aa:ca:13:d0:67:de:2f:1c:95:ed:d7:37:
         0e:38:e2:bf:d6:2e:73:8f:e9:18:c5:67:1f:85:4a:a8:cc:0b:
         e6:07:6b:27:1a:21:de:43:10:f5:e4:d9:83:58:f4:1c:8e:d6:
         19:f5:5b:c3:87:30:29:7c:b9:fd:9e:ac:95:af:c7:dc:2d:a7:
         13:ce:a2:3a:36:6b:31:92:80:6d:18:14:41:76:97:af:ad:6b:
         6d:df:77:ec:94:98:f6:b5:40:af:33:08:82:06:eb:2c:78:69:
         45:af:a6:9d:2f:75:61:db:24:5b:65:47:4c:90:0a:ad:9e:98:
         a0:1c:1e:76:83:d8:b4:16:fd:80:01:16:c2:19:03:c4:ff:f5:
         f2:f6:22:6d:ea:33:c5:e6:38:9d:8a:c3:68:f5:08:c8:8a:b3:
         18:5d:7b:c6:89:34:86:1a:be:a4:a7:75:4b:cf:f5:18:5e:3c:
         22:94:6a:fe:ac:17:33:97:f9:b1:75:50:e5:be:62:60:c7:ab:
         50:5a:fd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----