Certificate

$ rpki-client -vvf ta/arin/arin-rpki-ta.cer
File:                     arin-rpki-ta.cer (raw, json)
Hash identifier:          S0vJk72gWNXQs6bmjaAkRLwkpuslGHO9ek7qaCiNva0=
TAL:                      arin
Subject key identifier:   13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
Certificate issuer:       /CN=arin-rpki-ta
Certificate serial:       010D0C9F43285842BDEB9584244B3F058898CD80
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 01 Aug 2023 16:07:43 +0000
Certificate not after:    Mon 03 Nov 2025 17:07:43 +0000
Subordinate resources:    AS: 0 -- 4294967295
                          IP: 0.0.0.0/0
                          IP: ::/0

Validation:               OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:bd:eb:95:84:24:4b:3f:05:88:98:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=arin-rpki-ta
        Validity
            Not Before: Aug  1 16:07:43 2023 GMT
            Not After : Nov  3 17:07:43 2025 GMT
        Subject: CN=arin-rpki-ta
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:4f:8d:b1:ef:31:15:79:b0:30:ea:7c:b7:
                    3f:eb:ce:6d:87:91:67:ad:e1:cc:26:38:3c:a4:46:
                    54:6c:6f:18:f1:34:31:48:1b:03:79:b6:ec:0e:99:
                    77:3a:fd:c2:8f:55:ad:76:b2:77:08:87:d0:38:30:
                    8f:ae:b2:5d:38:14:ab:30:04:de:51:b3:c2:f8:99:
                    4d:7f:64:91:3f:75:01:f9:52:45:82:d4:e3:d1:13:
                    7c:70:46:08:ba:10:56:e6:de:80:c5:06:c7:85:d3:
                    50:1f:e0:35:17:f3:89:77:0d:2a:f5:d6:b6:53:6f:
                    4b:c7:ce:67:7c:5c:6f:9c:2d:44:a4:af:42:6c:b2:
                    52:e2:6d:fb:f9:19:69:35:b4:f5:71:b6:be:6f:e9:
                    68:5e:9c:74:41:c6:f5:0b:85:29:24:21:83:cb:bb:
                    8d:7f:9c:3a:ff:e9:7b:46:90:13:00:7a:aa:b1:7e:
                    2a:0a:dc:30:0d:89:5b:1f:3a:76:c6:4f:68:c0:5d:
                    e6:90:2c:73:97:41:f0:9d:c3:be:b0:41:c7:79:a2:
                    f7:3a:3b:70:74:81:ab:44:67:87:8b:63:29:b7:e9:
                    af:58:78:6d:42:a5:46:fb:9d:4c:1d:3c:a0:fa:72:
                    23:58:52:8a:1b:1d:50:f7:e2:83:c7:8c:09:4a:dc:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            sbgp-ipAddrBlock: critical
                IPv4:
                  0.0.0.0/0
                IPv6:
                  ::/0

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  0-4294967295

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:61:44:62:f2:90:b5:1c:a3:67:7b:a2:39:47:c5:c6:92:8c:
         be:6f:93:c4:29:4c:63:ab:ce:1a:b7:40:79:8c:b8:c5:14:3e:
         29:5a:90:e3:55:a6:e8:a7:a7:79:56:04:0c:64:89:ea:cb:4b:
         95:2e:1a:88:83:a7:69:1d:87:88:6c:35:fe:ff:e1:ae:ef:5d:
         fa:29:9d:1f:2f:2d:9e:fe:f9:ea:c8:3d:fd:31:79:92:d7:f2:
         05:aa:18:3a:50:cf:1b:01:eb:dc:71:d3:ba:5a:c5:bb:18:ab:
         58:ac:be:10:e5:5b:fb:97:14:6c:43:5c:37:8d:c7:db:4a:5c:
         e6:93:58:1b:4d:85:df:82:e7:17:c7:80:67:c3:29:37:71:21:
         8e:14:54:3b:7b:b4:4f:b2:4a:69:37:55:cc:a0:62:a1:93:67:
         70:93:af:8b:a2:c3:a9:c9:70:82:2b:98:3e:85:dd:c9:4e:a3:
         21:fc:8a:d9:02:cf:f8:b0:ad:20:0d:21:5a:28:1d:e3:cf:a9:
         e0:8b:b5:dd:72:e0:d3:bb:bb:c8:46:96:98:71:1b:c3:79:15:
         5e:af:bb:94:32:78:b2:13:f8:f5:d7:cd:d9:40:52:65:40:e8:
         cf:6e:01:42:10:38:79:dc:89:99:84:99:c7:de:8e:13:86:3d:
         11:b1:13:44
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 1 16:35:07 2023 by rpki-client on console-fra.rpki-client.org