Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40.cer
File:                     05c4d8ff-f038-444b-a203-ce4e118ffa40.cer (raw, json)
Hash identifier:          kn/3zrn49q1RFPskaFw8eHQ2nGpmRU6mEOnlj3r5/Lo=
Subject key identifier:   BF:56:C7:F6:9B:14:38:66:93:3D:44:62:AD:7E:6E:FD:F0:A9:22:8D
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858450B0B0CB62A446C19EE879E40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40/05c4d8ff-f038-444b-a203-ce4e118ffa40.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 28 Feb 2024 16:42:14 +0000
Certificate not after:    Fri 19 Sep 2025 17:24:12 +0000
Subordinate resources:    AS: 15287
                          IP: 23.155.88.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0b:0b:0c:b6:2a:44:6c:19:ee:87:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Feb 28 16:42:14 2024 GMT
            Not After : Sep 19 17:24:12 2025 GMT
        Subject: CN=05c4d8ff-f038-444b-a203-ce4e118ffa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:5f:69:3e:8e:10:bc:cb:a7:35:a9:48:81:
                    f5:b5:be:12:5f:76:aa:9e:b9:6e:71:32:a2:85:13:
                    92:6b:f7:f4:ad:b9:40:b2:0e:f7:f9:f0:0b:6d:7f:
                    2c:4c:b9:44:0c:9c:09:09:69:74:88:02:72:2f:1d:
                    75:11:a9:0c:06:29:17:80:12:9f:40:a4:1a:95:b7:
                    1d:57:7b:e4:b1:eb:62:ad:6e:78:00:59:8e:b3:38:
                    69:67:5d:c5:a0:c7:93:e1:f4:cf:5a:49:02:3b:9d:
                    11:7c:d8:3d:80:a3:88:79:b5:12:6c:51:22:07:7a:
                    9f:88:fe:88:34:4b:59:97:b9:de:1a:d3:1c:77:68:
                    bf:9d:a7:fb:50:50:39:ca:08:47:69:8a:85:fa:6a:
                    31:47:b5:c3:49:bc:ac:40:66:71:f0:f3:92:6a:49:
                    9f:74:47:99:f1:c8:93:72:66:4c:8f:16:9b:99:e8:
                    21:46:53:b3:65:0a:2e:2d:01:a0:09:a0:25:cd:d0:
                    bc:51:34:85:00:13:7f:26:03:59:73:ef:f4:7e:16:
                    c1:f6:64:4c:17:f5:27:59:fa:cd:eb:20:1f:37:a1:
                    a9:e7:1c:e0:8f:7b:8d:ab:72:38:16:29:aa:7d:30:
                    aa:29:32:c0:3e:bf:7b:cc:71:0a:0d:e6:9f:2c:94:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:56:C7:F6:9B:14:38:66:93:3D:44:62:AD:7E:6E:FD:F0:A9:22:8D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/05c4d8ff-f038-444b-a203-ce4e118ffa40/05c4d8ff-f038-444b-a203-ce4e118ffa40.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.88.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15287

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e7:b9:cb:44:75:99:53:e8:c4:36:a4:1a:e9:29:f2:4b:1b:
         42:89:85:e7:29:2b:fa:e6:1a:5b:9b:b8:42:c2:aa:e1:01:55:
         03:25:6e:5d:85:d3:e2:07:c8:e5:28:cc:f0:1a:d9:7b:df:ff:
         e3:fc:d8:44:61:fa:ed:49:80:06:30:1b:99:62:1d:41:ed:e7:
         97:75:0c:08:99:72:4d:c0:5b:cf:7c:a2:f0:2c:0e:50:fb:91:
         51:3f:37:3a:f2:8d:2f:b8:64:9e:9b:11:16:62:7e:99:4d:9c:
         ff:37:0b:2e:3a:d9:69:b3:78:db:4c:87:43:06:f7:8c:cd:50:
         f1:fe:ae:51:7f:51:b7:f8:38:81:3f:ed:0e:a0:2c:9d:cf:a6:
         fb:4c:23:b9:6b:14:c3:a1:34:a4:d6:11:44:ca:90:2e:98:6e:
         8e:5b:3b:4b:27:91:6b:71:87:f0:12:35:a5:e1:51:23:ca:60:
         e4:ce:41:80:2b:ab:83:07:e9:86:d5:4a:1c:9a:64:6f:bb:70:
         4a:d1:e1:a8:ce:76:ea:e2:a7:58:6c:dc:6a:c9:3a:1b:98:db:
         c3:2d:45:69:de:6e:23:9e:4b:98:29:1c:c6:b4:b7:9a:28:24:
         ca:c5:33:d2:83:ec:a3:49:29:1a:a8:af:a2:fd:91:3f:64:dd:
         89:38:1d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----