Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer
File:                     2c9dc640-2f2e-4d96-b672-187e81d3d4ff.cer (raw, json)
Hash identifier:          qrYTBgkEOdoEM8gmWFQBIYOWwAI6ya50viBD0V2NJgk=
Subject key identifier:   8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858424F5635139A52FFFD43C74EE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Jun 2023 01:27:49 +0000
Certificate not after:    Thu 25 Sep 2025 01:27:49 +0000
Subordinate resources:    IP: 23.155.248.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4f:56:35:13:9a:52:ff:fd:43:c7:4e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 23 01:27:49 2023 GMT
            Not After : Sep 25 01:27:49 2025 GMT
        Subject: CN=2c9dc640-2f2e-4d96-b672-187e81d3d4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d0:0e:f7:c2:b3:61:96:a3:48:d0:28:ea:69:
                    99:1e:76:5f:2d:c5:5e:06:6f:cd:a7:1e:bc:45:29:
                    38:ac:97:29:e5:82:c9:69:7c:9f:a6:aa:7a:03:54:
                    8a:6a:4d:28:d4:98:eb:32:6f:23:4f:39:bd:26:a9:
                    b2:0d:72:58:40:b1:e8:fd:eb:40:a5:a4:98:1b:72:
                    8b:f7:50:1f:d7:8e:65:b3:cc:03:a5:2d:0d:e7:26:
                    46:20:53:43:a4:9a:78:16:b5:97:39:30:b9:01:e5:
                    91:1d:66:1e:c1:1e:29:09:a1:0c:c9:c9:18:1b:32:
                    ed:dc:c7:b9:65:03:97:1a:a3:62:f5:0e:bb:f1:34:
                    d7:3e:dd:85:3e:ff:4f:7f:a3:66:d4:97:14:f5:7b:
                    46:40:d1:46:29:46:f1:12:8a:48:60:ed:46:9f:eb:
                    44:6c:91:37:8f:8d:6a:eb:ed:27:a4:db:2c:56:d0:
                    83:3a:f9:9b:87:1e:98:10:c4:f2:4f:e3:20:52:a5:
                    fd:8c:71:32:f6:3f:1c:e1:f9:42:1a:70:c2:29:65:
                    5e:9a:02:c1:ec:c3:ab:92:26:fa:af:77:32:79:e9:
                    cc:b7:90:0e:80:fe:27:7d:2b:34:48:b1:36:52:f3:
                    22:8e:8a:e4:d4:f9:80:d9:f3:ea:e4:0a:8f:95:2a:
                    0b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:31:9A:8C:B7:13:DC:7B:1B:DB:6D:6A:B3:69:24:8E:B0:0C:09:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2c9dc640-2f2e-4d96-b672-187e81d3d4ff/2c9dc640-2f2e-4d96-b672-187e81d3d4ff.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:dd:52:5b:8d:92:31:b5:29:42:9b:0b:8e:46:2e:71:29:f8:
         aa:18:2b:d2:4c:75:a1:29:60:6d:82:ab:2c:9f:3f:94:0b:8b:
         fd:3e:04:08:8b:91:bc:13:1b:84:ba:47:a8:80:80:81:42:89:
         fb:45:ed:37:3c:22:c1:f6:98:1a:a2:21:26:18:e0:de:1f:a6:
         9b:58:64:a3:0b:cb:45:ee:d9:48:16:46:96:9c:5f:a6:38:bd:
         1b:c3:88:c6:16:20:7c:30:cd:75:73:2c:dc:33:33:e4:c1:18:
         50:b2:cc:96:95:f8:4e:bd:a8:fe:6f:a4:10:64:1d:3a:a1:43:
         48:96:77:b4:86:8a:d6:f9:ce:e2:a2:28:b1:99:72:ac:1c:3f:
         03:5e:c7:a7:81:43:89:b5:f8:5e:09:05:d8:6a:f8:e5:d7:e6:
         db:72:c6:9b:c1:e2:a3:3f:7e:e6:37:26:c1:9a:bd:78:c5:6d:
         b8:96:d9:90:07:85:89:ed:72:26:d6:bd:31:55:e2:70:9e:a5:
         df:18:61:61:7c:0a:5d:c4:95:13:cd:61:ee:31:8f:5f:04:e4:
         1d:72:17:61:e3:a3:dc:77:b0:bf:4f:90:a1:10:63:55:31:66:
         44:15:1d:c9:4c:b6:14:7e:69:1d:b0:5a:6a:f6:1e:6b:8d:1d:
         96:27:fa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----