Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
File:                     1a319486-03d5-4fb1-997e-228350330847.cer (raw, json)
Hash identifier:          O5W3VLOsgirKhrLHDcsQ/h4xbx7d31iEoU/06WNmpzk=
Subject key identifier:   A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858428610ACFE16FC8043B7907FC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Jul 2023 15:57:11 +0000
Certificate not after:    Thu 02 Oct 2025 15:13:08 +0000
Subordinate resources:    AS: 46983
                          IP: 23.157.200.0/24
                          IP: 2602:815:3000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:86:10:ac:fe:16:fc:80:43:b7:90:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 12 15:57:11 2023 GMT
            Not After : Oct  2 15:13:08 2025 GMT
        Subject: CN=1a319486-03d5-4fb1-997e-228350330847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:27:0a:1f:73:92:61:55:92:be:4e:ea:6e:
                    8d:ba:9a:be:3a:c1:53:14:90:91:c9:ad:00:bf:f4:
                    e8:3b:34:50:5e:a5:e1:f2:49:d9:db:e5:1d:0f:55:
                    8d:37:43:00:1f:17:1e:db:be:d6:d2:5b:71:36:24:
                    74:ad:1a:96:7a:45:c5:7c:4e:e4:8b:a3:78:62:b3:
                    c2:ac:bb:73:e0:84:06:85:02:99:74:f2:ec:0a:11:
                    52:51:ee:bf:21:1a:4e:d7:46:26:d6:10:59:f9:76:
                    1f:30:49:3c:d0:0d:10:59:d1:ef:52:05:51:c1:f3:
                    e3:9a:25:9c:84:ec:68:a4:e3:57:ce:6d:6a:a9:76:
                    c7:28:4c:a8:c4:9b:b6:87:9d:f0:69:9e:a3:34:dd:
                    57:67:de:ad:3a:4f:83:4a:a7:a5:7d:c5:b7:dd:fb:
                    50:aa:6e:c9:51:61:be:03:c7:33:69:cb:5f:9b:c1:
                    01:3f:b1:9b:8d:2c:f0:3b:21:97:5a:e2:91:35:4b:
                    18:33:bf:a1:8b:f2:13:12:ed:c4:b9:85:7f:12:10:
                    63:c7:5e:1c:34:42:e6:17:8a:a6:bb:38:69:46:4c:
                    ae:29:d4:93:0e:28:6c:56:77:1f:97:0e:f9:86:1b:
                    84:6a:d9:ff:6f:44:bf:6d:9e:1a:14:78:d1:35:66:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.200.0/24
                IPv6:
                  2602:815:3000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46983

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:7e:ae:ca:12:50:c3:88:a8:63:70:7a:c3:7d:1b:95:8f:3f:
         35:3b:0b:a8:44:c6:e1:ff:7c:9a:ed:12:89:de:06:28:b5:34:
         40:c7:b4:6f:2f:a2:63:97:6f:67:20:6c:3d:0a:65:24:0e:db:
         c0:7e:72:15:51:94:83:f1:2b:fa:cb:19:f6:54:8f:4a:43:75:
         e2:28:2b:8d:64:7c:a3:fb:d1:2f:f1:4d:c7:36:b3:6a:09:41:
         14:db:5e:dd:e8:b5:e0:29:06:b8:22:56:78:8f:db:9b:d0:c2:
         24:44:e6:5d:47:ff:cc:fe:ca:65:b7:bc:04:e4:9e:31:b2:45:
         f6:77:b6:87:41:81:66:1a:94:bd:d0:74:60:2b:74:b8:4a:70:
         3a:d7:fc:ce:3f:64:03:87:ca:68:0f:88:35:84:70:ca:22:11:
         3f:1c:25:5c:7c:a9:2b:e8:9c:50:71:7e:ad:ae:4d:87:58:68:
         6e:a8:68:b2:eb:e3:70:43:d8:4b:dd:38:4f:78:70:5b:23:a8:
         56:22:14:83:75:61:cd:cf:65:13:10:7d:bb:02:2e:83:68:d2:
         08:76:8b:42:44:84:f2:a3:6f:d1:f9:fa:31:23:12:b4:25:f9:
         fc:47:a7:bf:b4:da:b5:4d:c3:7e:cc:d4:02:90:fd:eb:9b:a9:
         b0:1e:35:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----