Certificate

$ rpki-client -vvf ta/arin/arin-rpki-ta.cer
File:                     arin-rpki-ta.cer (raw, json)
Hash identifier:          XmSFARb17cG8olcy+V0RzzPLOG4VCcM0S5/RRL+uoUs=
TAL:                      arin
Subject key identifier:   13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
Certificate issuer:       /CN=arin-rpki-ta
Certificate serial:       010D0C9F43285840E8EFE25954ED56EA26157540
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 14 Feb 2023 16:22:16 +0000
Certificate not after:    Mon 19 May 2025 15:22:16 +0000
Subordinate resources:    AS: 0 -- 4294967295
                          IP: 0.0.0.0/0
                          IP: ::/0

Validation:               OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:e8:ef:e2:59:54:ed:56:ea:26:15:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=arin-rpki-ta
        Validity
            Not Before: Feb 14 16:22:16 2023 GMT
            Not After : May 19 15:22:16 2025 GMT
        Subject: CN=arin-rpki-ta
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:56:4f:8d:b1:ef:31:15:79:b0:30:ea:7c:b7:
                    3f:eb:ce:6d:87:91:67:ad:e1:cc:26:38:3c:a4:46:
                    54:6c:6f:18:f1:34:31:48:1b:03:79:b6:ec:0e:99:
                    77:3a:fd:c2:8f:55:ad:76:b2:77:08:87:d0:38:30:
                    8f:ae:b2:5d:38:14:ab:30:04:de:51:b3:c2:f8:99:
                    4d:7f:64:91:3f:75:01:f9:52:45:82:d4:e3:d1:13:
                    7c:70:46:08:ba:10:56:e6:de:80:c5:06:c7:85:d3:
                    50:1f:e0:35:17:f3:89:77:0d:2a:f5:d6:b6:53:6f:
                    4b:c7:ce:67:7c:5c:6f:9c:2d:44:a4:af:42:6c:b2:
                    52:e2:6d:fb:f9:19:69:35:b4:f5:71:b6:be:6f:e9:
                    68:5e:9c:74:41:c6:f5:0b:85:29:24:21:83:cb:bb:
                    8d:7f:9c:3a:ff:e9:7b:46:90:13:00:7a:aa:b1:7e:
                    2a:0a:dc:30:0d:89:5b:1f:3a:76:c6:4f:68:c0:5d:
                    e6:90:2c:73:97:41:f0:9d:c3:be:b0:41:c7:79:a2:
                    f7:3a:3b:70:74:81:ab:44:67:87:8b:63:29:b7:e9:
                    af:58:78:6d:42:a5:46:fb:9d:4c:1d:3c:a0:fa:72:
                    23:58:52:8a:1b:1d:50:f7:e2:83:c7:8c:09:4a:dc:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
            Subject Information Access: 
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            sbgp-ipAddrBlock: critical
                IPv4:
                  0.0.0.0/0
                IPv6:
                  ::/0

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  0-4294967295

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:52:7b:25:d2:d6:51:e4:f0:8e:14:26:ae:ba:bc:ad:a0:d8:
         ec:0e:69:d3:55:dd:36:9d:8a:0e:ac:4b:96:7e:bc:86:92:39:
         64:17:73:9b:ef:f1:9d:6c:e7:21:4f:cc:0c:8e:62:b3:70:31:
         a2:c5:88:2d:fb:04:08:bc:8f:1e:69:88:49:46:06:59:2a:ab:
         44:5a:a1:cb:30:14:b9:a6:93:dc:83:72:17:d7:79:1d:c9:19:
         e9:d4:2d:35:05:a7:4b:c1:f8:b8:96:8e:2d:c7:de:5c:f7:75:
         95:74:9c:62:27:ff:c0:c5:38:c8:91:9d:db:6f:c8:ec:2e:e9:
         6d:be:cf:ed:b0:93:21:60:b3:77:c8:3f:2f:c8:1d:5a:47:e3:
         4b:b6:61:fd:82:b5:02:94:94:a0:b8:bd:cd:3c:8b:2a:d6:45:
         54:e7:fd:18:74:3a:73:c1:f9:06:4e:90:c5:6d:2e:95:9c:2d:
         09:df:e2:38:b5:17:58:0e:27:75:ab:aa:94:b3:f5:26:97:0d:
         cc:cf:29:6f:25:72:73:ed:d3:6c:7d:5d:16:77:e1:98:f1:e8:
         9e:f7:67:08:f9:1b:59:cd:fa:06:20:51:0a:52:ee:e6:72:93:
         71:a6:42:35:1b:2e:59:ed:f3:3c:1a:26:fd:31:13:ae:9e:7b:
         d0:40:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----