Can you define multiple values for a CVE/URL like this in the array? I have always seen each reference defined explicitly, so you would have two CVE arrays, and two URL arrays.

Might be mistaken though. Never seen this before.