Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer
File:                     138beb7a-6a99-47ad-a8e7-50bb4d24b667.cer (raw, json)
Hash identifier:          tNvJoV4J5z2GVQb3eoM1pyRiHtaRVKzkci9dFvpnXoY=
Subject key identifier:   FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858479ED44F57D1A6C93217942A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 22 Oct 2024 00:45:26 +0000
Certificate not after:    Mon 25 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 397702
                          IP: 23.164.216.0/24
                          IP: 2607:46c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:d4:4f:57:d1:a6:c9:32:17:94:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 22 00:45:26 2024 GMT
            Not After : Jan 25 01:45:26 2027 GMT
        Subject: CN=138beb7a-6a99-47ad-a8e7-50bb4d24b667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:0b:1e:08:8e:b4:fa:03:ea:8f:7c:88:b5:
                    9b:44:de:37:df:c0:e5:a3:3c:c8:55:79:d2:5e:e5:
                    7c:4b:22:25:71:e5:b0:ed:9a:2b:28:e2:f8:10:57:
                    d1:6a:a7:d7:d6:d4:bc:cc:a2:de:dd:e0:87:4a:c3:
                    b9:04:b5:3a:0d:cc:e4:2a:4b:4e:3b:d8:25:6d:0c:
                    3f:0c:7c:e5:2d:75:a5:fb:c2:ea:29:7a:26:2c:8c:
                    70:ca:8b:29:6a:3d:30:e2:5a:e3:f5:94:65:37:1a:
                    68:04:06:ec:ac:cd:8f:d9:47:2a:17:13:cf:b4:30:
                    25:4f:b3:c3:5a:ff:7c:b7:c9:49:fa:9c:55:6d:5c:
                    ff:ef:82:ad:79:b6:4b:da:a2:86:48:81:f1:45:ec:
                    ea:5e:94:11:c2:cb:62:ad:ff:a4:04:cb:a7:35:34:
                    7d:34:8f:94:2a:57:fe:1c:26:58:f5:f5:3d:f3:d7:
                    1d:ad:4f:ce:6c:5d:51:cd:91:24:98:75:65:d0:04:
                    20:6f:41:ed:86:cc:a2:08:6e:3f:7a:cd:52:37:0e:
                    67:c2:ac:23:08:bb:f6:97:f6:9d:77:a9:5c:2b:e3:
                    29:f3:0d:7a:bc:78:52:32:85:67:26:29:c0:3f:04:
                    ce:92:04:89:d5:e7:d5:1c:5b:6d:fc:ad:ae:87:2a:
                    cb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:59:F2:8E:AB:34:7A:8A:A7:D7:6F:39:AF:D3:9A:32:46:FB:97:61
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/138beb7a-6a99-47ad-a8e7-50bb4d24b667/138beb7a-6a99-47ad-a8e7-50bb4d24b667.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.216.0/24
                IPv6:
                  2607:46c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397702

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:cb:98:f4:d7:54:8d:12:26:56:b9:51:43:0d:e2:73:16:58:
         13:2f:98:5f:63:03:af:85:a0:61:13:94:c9:be:2c:b5:52:27:
         09:1d:41:45:9f:3d:7a:8f:b6:9f:dd:1e:6a:50:fc:96:4a:03:
         f8:38:d5:29:d6:2e:b3:67:76:13:8f:f5:da:3a:37:53:38:c0:
         a4:cb:1e:8b:d5:b3:71:b9:40:ae:1e:46:44:00:58:92:61:27:
         77:e4:2b:b7:06:88:04:77:1f:8a:1b:0d:8c:05:6e:fc:e4:bd:
         7e:0f:91:08:1f:eb:0b:43:b4:ae:92:68:96:a0:19:fc:84:b9:
         3c:8d:1d:c2:53:23:5d:be:b7:3e:2c:13:6d:96:6d:53:5a:d7:
         fa:d4:49:1b:68:f9:42:8c:5a:27:fe:73:c9:7e:89:bb:68:25:
         88:3b:37:ed:69:6e:71:d4:1f:a8:e4:44:da:8f:93:f4:e2:e4:
         02:c8:8f:c7:c0:9a:bf:4d:e6:81:9e:54:4f:f3:26:30:11:8b:
         7e:3e:39:4c:42:23:e0:b0:80:98:27:ce:48:bf:c8:1d:df:d1:
         43:51:89:fc:d2:0c:8a:cd:13:a3:76:a4:c8:36:f0:06:72:68:
         34:01:6a:05:8d:77:ab:13:31:00:c7:30:c6:33:f0:af:8b:8b:
         8c:da:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----