Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer
File:                     159b5e7c-05eb-4d55-a0f0-ca82400a921b.cer (raw, json)
Hash identifier:          C+yFNSzRY2xVMzvesyfjJvRBPvFHgrz0+/HWDOUBm9c=
Subject key identifier:   E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E7F5C77CD44D585068631280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 May 2023 00:45:16 +0000
Certificate not after:    Tue 19 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 6456
                          IP: 208.90.168.0/22
                          IP: 2620:0:cf0::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e7:f5:c7:7c:d4:4d:58:50:68:63:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 17 00:45:16 2023 GMT
            Not After : Aug 19 00:45:16 2025 GMT
        Subject: CN=159b5e7c-05eb-4d55-a0f0-ca82400a921b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:37:cd:b4:45:a0:f3:b0:45:7a:9b:8e:05:
                    58:6d:05:89:50:dd:3a:fb:82:e7:3e:a8:73:c2:e4:
                    82:a4:c0:b5:b3:a8:76:17:91:e6:d3:19:86:0f:b0:
                    55:2b:8a:fd:2e:6b:e1:2f:d1:18:d4:96:21:dc:4d:
                    6f:5f:bb:cc:4e:95:e6:18:1e:a7:86:9b:32:e3:71:
                    cf:e1:08:f6:10:03:fa:d5:01:25:c2:ef:15:b0:18:
                    3c:3f:31:79:93:7d:f9:7a:50:c2:a9:34:d9:4f:da:
                    01:a0:0d:11:a9:b3:56:3f:c3:75:47:97:21:f4:f1:
                    4b:1c:ba:5f:9e:30:cc:5c:27:e0:bd:74:10:07:3c:
                    78:3d:6d:f9:86:d5:d9:09:13:b9:f0:54:f0:37:c7:
                    9d:e4:a5:83:7e:17:ab:ba:39:4c:66:d8:44:a3:d4:
                    b2:28:4b:ed:ea:7f:fd:5e:52:a2:1c:61:22:20:13:
                    72:1c:5a:e1:db:60:48:64:c2:2d:9a:5a:e8:aa:a8:
                    70:1b:ce:e6:96:87:0a:90:d1:cf:ed:b1:c8:93:69:
                    af:54:65:65:e3:8f:1a:3e:f6:af:30:74:d3:da:3c:
                    1c:62:30:2c:d2:85:68:55:08:fa:86:e9:ab:02:6c:
                    d9:d6:2e:88:7e:8a:e3:01:b3:25:b2:d9:2b:85:5b:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D3:71:A1:A3:A5:B0:9F:76:2C:0E:44:F3:CE:73:B1:CE:1E:2F:6D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/159b5e7c-05eb-4d55-a0f0-ca82400a921b/159b5e7c-05eb-4d55-a0f0-ca82400a921b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.168.0/22
                IPv6:
                  2620:0:cf0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6456

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b9:c5:66:ab:46:98:e7:f7:09:d6:e9:e1:e4:96:b9:3b:00:
         0a:5b:b2:8f:61:1d:95:4b:af:37:10:e2:5d:6f:c5:1f:82:8b:
         00:18:70:a6:97:36:d8:54:26:3d:30:d1:9c:34:f5:98:d0:a1:
         15:ce:cd:81:02:85:43:f2:eb:e1:82:42:f3:e2:32:bc:89:85:
         ce:12:46:45:16:33:10:d3:53:b0:3a:5c:86:e5:fa:69:85:fe:
         cc:f9:14:c6:46:ad:ce:a7:1c:0c:24:7f:37:5f:66:d7:16:e7:
         34:ba:49:d6:f3:b3:97:72:5f:55:aa:d7:34:58:34:cd:6c:c5:
         a0:cb:3e:14:62:6f:1e:67:ce:b9:73:0d:a8:1e:62:7a:8c:1b:
         ac:58:d4:b7:d0:71:db:e2:95:d0:f4:3a:22:73:fe:5e:cb:39:
         9a:f8:bd:41:3b:c0:16:42:08:4f:b2:38:e1:e8:da:3d:ab:ae:
         69:d9:3c:80:71:0d:95:e7:ed:e5:54:a2:ce:3d:83:bf:10:14:
         b2:3b:83:b1:a2:25:ad:a3:86:37:10:96:7d:3c:1c:20:a1:d5:
         f1:df:71:c7:2b:30:b7:6d:80:a0:c8:71:85:27:5d:36:2b:50:
         c6:69:20:b6:18:68:78:b8:fc:dc:ae:48:d1:51:b1:2a:37:ac:
         ca:97:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----