Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer
File:                     1a319486-03d5-4fb1-997e-228350330847.cer (raw, json)
Hash identifier:          g2glyNBM0OC87qucRBvERUK1ppjt3e2PJWlBpah+tgs=
Subject key identifier:   A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584769C94FD7754355FA66307580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 03 Oct 2024 00:45:26 +0000
Certificate not after:    Wed 06 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 46983
                          IP: 23.157.200.0/24
                          IP: 2602:815:3000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:c9:4f:d7:75:43:55:fa:66:30:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct  3 00:45:26 2024 GMT
            Not After : Jan  6 01:45:26 2027 GMT
        Subject: CN=1a319486-03d5-4fb1-997e-228350330847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:06:27:0a:1f:73:92:61:55:92:be:4e:ea:6e:
                    8d:ba:9a:be:3a:c1:53:14:90:91:c9:ad:00:bf:f4:
                    e8:3b:34:50:5e:a5:e1:f2:49:d9:db:e5:1d:0f:55:
                    8d:37:43:00:1f:17:1e:db:be:d6:d2:5b:71:36:24:
                    74:ad:1a:96:7a:45:c5:7c:4e:e4:8b:a3:78:62:b3:
                    c2:ac:bb:73:e0:84:06:85:02:99:74:f2:ec:0a:11:
                    52:51:ee:bf:21:1a:4e:d7:46:26:d6:10:59:f9:76:
                    1f:30:49:3c:d0:0d:10:59:d1:ef:52:05:51:c1:f3:
                    e3:9a:25:9c:84:ec:68:a4:e3:57:ce:6d:6a:a9:76:
                    c7:28:4c:a8:c4:9b:b6:87:9d:f0:69:9e:a3:34:dd:
                    57:67:de:ad:3a:4f:83:4a:a7:a5:7d:c5:b7:dd:fb:
                    50:aa:6e:c9:51:61:be:03:c7:33:69:cb:5f:9b:c1:
                    01:3f:b1:9b:8d:2c:f0:3b:21:97:5a:e2:91:35:4b:
                    18:33:bf:a1:8b:f2:13:12:ed:c4:b9:85:7f:12:10:
                    63:c7:5e:1c:34:42:e6:17:8a:a6:bb:38:69:46:4c:
                    ae:29:d4:93:0e:28:6c:56:77:1f:97:0e:f9:86:1b:
                    84:6a:d9:ff:6f:44:bf:6d:9e:1a:14:78:d1:35:66:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.200.0/24
                IPv6:
                  2602:815:3000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46983

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b1:d6:b8:4e:21:f7:63:d8:16:e6:b0:08:6d:c3:1e:a6:59:
         ee:2b:75:72:2d:21:89:ec:54:70:30:af:6e:68:d9:a6:2e:70:
         b3:00:39:27:b1:af:ab:0a:43:54:74:eb:e3:5f:59:1e:43:fe:
         d6:5e:a4:c2:8d:c7:a8:62:ce:2c:34:ef:0b:6c:43:6c:2e:e0:
         04:b9:17:8d:2a:c0:f6:fb:dd:e8:27:4e:ab:0f:4d:18:a4:1f:
         79:5e:f0:a0:93:1b:f8:b5:db:7d:e6:67:b1:ea:0d:76:fb:02:
         18:74:6b:06:e2:1c:c6:1a:ea:df:48:93:e1:8d:b3:70:25:6c:
         ca:5d:2a:89:95:29:13:f2:2c:71:85:f9:de:48:57:cf:61:5d:
         f5:66:9b:6d:68:88:ca:53:10:45:b6:59:e6:f3:e1:e8:b8:ee:
         16:3a:30:2e:54:01:4f:14:3a:ad:ab:b0:64:68:9f:96:79:4c:
         e4:a9:42:e7:7e:4f:e9:58:17:29:83:fd:bb:8b:b8:2a:32:06:
         b4:8d:a6:54:77:38:16:cf:8e:3f:e6:fb:b5:d6:d3:43:8f:e3:
         7b:15:1d:b3:21:78:4d:69:60:05:90:d6:20:c0:6d:c8:9c:56:
         a1:99:d8:6a:18:8d:61:2e:12:f3:32:5c:5a:c3:bd:9a:f8:4f:
         ac:ef:fd:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----