Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer
File:                     34f935ff-170a-4b14-b64c-790e52fa9534.cer (raw, json)
Hash identifier:          1smGVsVu//YVdceKT5cdTNlnkxGmkVCjJK8M19mVzPw=
Subject key identifier:   FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847EBB7F52A41390DEA419F4740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Nov 2024 13:45:33 +0000
Certificate not after:    Sun 21 Feb 2027 13:45:33 +0000
Subordinate resources:    IP: 131.162.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:b7:f5:2a:41:39:0d:ea:41:9f:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov 18 13:45:33 2024 GMT
            Not After : Feb 21 13:45:33 2027 GMT
        Subject: CN=34f935ff-170a-4b14-b64c-790e52fa9534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3e:6c:57:36:3d:e6:26:60:be:24:3f:35:80:
                    9b:eb:ad:48:d0:6a:f0:38:e6:87:f3:44:0a:22:1e:
                    d1:dc:a0:4b:6f:92:19:b1:2c:7f:8b:d6:9d:30:76:
                    ca:5e:c4:51:f0:9e:f9:17:7d:89:ff:69:d6:a4:e6:
                    40:9e:31:65:e5:6a:21:ef:58:ce:36:ca:38:8e:08:
                    6f:ea:92:56:d3:3e:f8:10:75:c2:cd:4d:e2:ca:94:
                    4e:c9:b0:65:51:2f:e3:36:f9:4e:ab:08:20:26:81:
                    29:e1:dd:81:b2:40:e3:dd:3b:93:cf:26:8b:3e:f5:
                    37:9c:02:cc:91:2f:fe:10:b6:35:da:e0:54:2c:2c:
                    54:af:d6:7e:33:14:3d:45:f0:67:3e:5e:a3:96:45:
                    ca:8a:0f:23:be:9a:11:b5:f5:cf:be:66:87:79:1a:
                    5f:53:e1:cb:1f:32:8b:44:78:6c:05:b3:a8:bf:d9:
                    6a:6a:de:04:e9:07:6c:a4:f8:53:87:ae:c9:b6:39:
                    8b:2f:2a:46:86:20:10:48:45:ce:2b:90:d8:39:94:
                    6b:cf:ba:22:1a:6e:78:3c:f3:46:1d:91:25:58:bb:
                    8d:36:fc:d1:af:49:2d:37:f4:b1:18:fe:c1:b8:ca:
                    2e:5e:e8:79:81:c1:b9:75:5d:7f:56:32:ad:3a:ec:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ed:92:98:8a:d2:11:c0:18:db:55:37:3a:fe:05:8f:6f:62:
         8f:d7:30:96:fd:2d:c2:c7:cf:48:4e:57:80:82:c1:fd:55:da:
         d8:01:aa:00:c3:b0:ae:ce:1a:a2:09:f8:ea:d7:9c:8e:31:43:
         85:72:1c:c7:d9:38:93:93:65:e8:a9:b1:a9:4f:ca:bc:b7:f9:
         ac:45:71:27:bf:3a:b8:c8:84:91:df:b6:77:9c:8e:72:bb:ff:
         2b:19:4c:56:16:5c:ca:01:00:6d:ad:01:df:78:68:e1:fe:6e:
         77:7a:ed:1f:d2:ea:4b:a3:2d:48:e0:a4:43:1a:bd:ef:1d:ca:
         51:4f:b8:0e:af:67:be:62:d2:29:e9:1a:ec:9f:80:a8:11:cc:
         9e:72:0f:86:c2:ae:34:ee:79:c8:7f:7f:2e:63:5f:6f:0f:30:
         1b:af:18:8c:8e:08:80:81:7e:50:11:3a:4b:65:70:83:c3:15:
         58:1c:a5:2a:13:48:0b:f8:d4:a3:52:17:79:a4:66:a7:7a:01:
         86:20:78:0c:9d:a2:75:5c:58:82:42:d3:42:f1:81:fe:d7:64:
         d9:f0:c3:b6:40:e7:18:7e:c3:7e:bb:f9:b2:7e:0b:ed:61:7b:
         49:e2:a8:f0:0b:6c:c8:43:b8:b2:ef:1f:b7:29:15:6a:76:29:
         cc:47:af:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----