Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer
File:                     258880f7-56fa-4c7c-a7e7-6d113eda383d.cer (raw, json)
Hash identifier:          3s1NVG8yj+ZUrJdEajOanmtnxRcl7f5r4lwtnBSDB1Y=
Subject key identifier:   E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842A7587C57B2DD1E6F72964200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 24 Jul 2023 14:03:33 +0000
Certificate not after:    Sun 26 Oct 2025 14:03:33 +0000
Subordinate resources:    IP: 23.142.200.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a7:58:7c:57:b2:dd:1e:6f:72:96:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 24 14:03:33 2023 GMT
            Not After : Oct 26 14:03:33 2025 GMT
        Subject: CN=258880f7-56fa-4c7c-a7e7-6d113eda383d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:e1:ff:33:91:4a:8c:c5:0e:57:43:61:d7:
                    ce:6b:f6:e7:cc:bd:84:0a:29:9b:10:c8:85:9c:c3:
                    0c:fc:a9:f0:5e:3b:b3:79:aa:25:b3:de:67:17:d1:
                    45:d7:fd:d6:91:03:ca:8b:94:18:3f:0e:c0:bf:b3:
                    20:09:fa:0c:22:3f:d0:73:26:20:a0:ae:19:3f:0c:
                    67:3b:08:63:82:cb:7d:19:69:08:10:c0:8b:88:fb:
                    67:e1:d0:9f:d6:c9:64:01:f2:f1:d9:53:90:3b:3f:
                    7c:6c:65:5f:22:ad:2d:f2:e3:2b:79:39:0d:ef:a5:
                    99:90:7e:73:32:78:54:0f:ea:9e:d3:4f:f2:4c:b2:
                    d0:29:0e:35:a8:b4:9e:35:44:e2:7a:f1:53:51:f1:
                    ea:99:65:48:24:fd:92:0c:d5:4c:59:19:9c:2d:52:
                    92:54:fe:a0:85:83:fc:f5:63:56:b4:27:85:46:06:
                    c4:5d:71:cf:20:98:16:6e:6f:4d:54:25:d0:4e:a2:
                    02:e7:5f:8a:3e:ba:01:40:13:b9:27:23:e2:10:cc:
                    0b:68:06:0e:c2:bf:b4:0f:45:1f:9f:42:38:22:81:
                    68:6d:ac:33:38:b0:86:72:90:f6:7b:cc:da:4f:2b:
                    26:7e:40:8c:58:91:e5:15:d9:62:b2:d7:d6:58:88:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:39:e8:45:62:f3:4f:5a:eb:9d:c7:7e:0b:15:0a:0a:3f:3e:
         3a:ef:b0:8e:36:fb:b6:44:b2:0c:c8:eb:fa:3a:0e:32:c8:c6:
         75:ea:87:bd:88:45:c0:1f:54:69:63:e1:f9:f0:af:db:ad:3a:
         93:b9:35:91:86:91:12:99:02:eb:50:ae:92:55:f4:ed:da:72:
         d3:73:b9:f6:fd:95:ed:cd:a5:5c:e9:1b:cf:bd:46:f2:d4:de:
         b9:51:a9:5c:d2:84:b0:7d:66:f3:72:20:6d:da:d5:45:a6:54:
         70:db:8c:11:1d:88:98:68:c3:cf:a8:7a:21:91:89:7d:c8:76:
         f0:af:83:8e:bd:93:59:ff:9b:7e:07:ed:6a:6f:90:6e:31:c3:
         b3:ae:a8:33:fe:73:63:70:09:f9:c8:d4:df:7d:1e:7a:f6:42:
         7c:9b:dc:c4:51:1e:2a:ee:68:0c:47:dd:e4:40:2a:b3:1b:66:
         c8:10:77:7b:32:41:fb:3f:df:62:a5:64:26:d7:41:0c:e4:56:
         ca:8d:e5:7a:4f:5d:1e:6d:b4:e1:24:66:6a:cd:0f:2d:95:a3:
         e6:14:3f:8a:35:9c:e4:b6:6f:9d:b9:c7:4e:f1:6e:66:e7:31:
         0b:34:f3:de:d3:37:e7:e4:f1:0c:11:eb:48:89:c5:c4:75:18:
         19:56:0d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----