Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/168b95c3-5342-4407-ba13-c69491755a26.cer
File:                     168b95c3-5342-4407-ba13-c69491755a26.cer (raw, json)
Hash identifier:          gKx+Oo7ZpPiRBzA9eVSScsGv9gLEU18WPCpYvOLYqQw=
Subject key identifier:   5C:10:34:F7:60:E6:55:2C:3F:E5:69:72:60:59:A5:E2:BA:50:74:9E
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842B2F440D7FC1BEFC033897980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/168b95c3-5342-4407-ba13-c69491755a26/168b95c3-5342-4407-ba13-c69491755a26.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/168b95c3-5342-4407-ba13-c69491755a26/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Jul 2023 17:51:17 +0000
Certificate not after:    Thu 30 Oct 2025 17:51:17 +0000
Subordinate resources:    IP: 157.62.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b2:f4:40:d7:fc:1b:ef:c0:33:89:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 28 17:51:17 2023 GMT
            Not After : Oct 30 17:51:17 2025 GMT
        Subject: CN=168b95c3-5342-4407-ba13-c69491755a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:11:d2:45:f7:1f:06:23:48:90:43:1b:42:
                    85:11:5a:ef:3a:4b:28:60:2a:75:ee:04:cd:76:b2:
                    96:b4:50:d1:fd:84:2a:24:b1:49:d5:12:d4:23:41:
                    4e:3d:14:68:34:e4:e5:49:b9:37:e6:d9:53:ef:6e:
                    2c:4d:de:c0:60:b9:02:7d:f2:30:a3:8d:e2:32:b9:
                    c7:77:45:e8:23:91:bb:b5:c4:19:26:c0:c3:c0:d5:
                    2d:fe:95:8b:26:47:71:c1:62:88:7f:85:91:b7:b0:
                    7d:53:ef:fd:5e:c8:74:12:aa:77:02:55:92:63:22:
                    83:ae:93:20:80:e7:82:5b:82:f1:90:7b:98:f4:12:
                    c2:6d:26:83:79:05:8b:4f:fa:d2:70:0e:a9:9b:9f:
                    70:81:33:ac:b2:f9:f9:fb:92:08:de:98:8e:f6:be:
                    8c:5b:82:1e:2e:63:2b:c7:8f:24:a2:91:73:88:49:
                    7f:68:2f:dc:be:24:40:42:59:99:00:44:68:8c:1d:
                    f4:cc:da:18:57:34:2a:c7:ea:e2:d8:02:cf:f9:0d:
                    73:05:61:ee:ea:d5:a6:18:f1:69:80:af:ab:4a:50:
                    26:f9:c6:0a:0e:54:ef:3c:26:06:ee:7b:00:fc:32:
                    e3:d9:5f:e2:19:9c:4b:32:e0:9c:32:4d:ba:2d:ff:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:10:34:F7:60:E6:55:2C:3F:E5:69:72:60:59:A5:E2:BA:50:74:9E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/168b95c3-5342-4407-ba13-c69491755a26/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/168b95c3-5342-4407-ba13-c69491755a26/168b95c3-5342-4407-ba13-c69491755a26.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.62.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:7b:b2:8d:01:90:48:a2:0a:55:65:99:22:47:4f:f4:40:69:
         c1:0e:a7:23:d9:85:e8:de:01:87:5e:6d:24:eb:5b:61:07:0c:
         60:00:dc:58:f4:c1:b8:ae:87:30:d8:de:6d:17:02:0b:24:89:
         96:72:f9:8f:dc:b6:03:6b:2a:97:46:2d:00:23:ee:da:6c:8b:
         11:89:92:45:33:c4:68:52:aa:9b:64:60:2a:e7:5d:e7:00:12:
         e3:aa:ca:44:47:2a:28:5d:fe:f0:8a:1a:14:29:66:e2:62:4b:
         87:db:a8:9c:c7:7a:29:ba:91:8a:3e:3b:0b:9b:d5:ad:c4:bb:
         14:39:25:3b:93:04:60:10:3a:b8:55:ae:02:fc:9d:d2:67:c4:
         80:68:4e:dc:ef:07:31:68:56:54:6a:23:41:9d:69:ea:4d:c6:
         d8:5a:e9:9e:ec:1b:ed:2c:c6:24:32:d7:13:16:90:09:e5:3b:
         31:54:ed:46:c4:cb:0d:c9:ff:01:97:67:96:30:da:fa:10:0a:
         be:b8:f8:56:dc:58:cb:d7:9b:11:63:6a:dc:0d:f9:f9:11:72:
         e6:8c:29:80:0d:17:32:c3:39:38:2d:de:b0:33:c3:a0:5f:3a:
         e0:cb:97:09:19:4d:c4:42:de:17:2c:46:5f:fb:f7:7c:4a:ef:
         6f:2b:d8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----