Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer
File:                     380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer (raw, json)
Hash identifier:          TXUfQ8XYGDsXFWMTZ2/t7cP4nNKPVFErJ6baXH2c8Yw=
Subject key identifier:   71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858434C8ECBF32F143F3A5F4B3760
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Sep 2023 18:21:21 +0000
Certificate not after:    Wed 01 Oct 2025 20:44:26 +0000
Subordinate resources:    AS: 53616
                          IP: 70.42.212.0/23
                          IP: 2602:fa67::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:4c:8e:cb:f3:2f:14:3f:3a:5f:4b:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 21 18:21:21 2023 GMT
            Not After : Oct  1 20:44:26 2025 GMT
        Subject: CN=380e678f-a53e-4fa7-8c2f-15f6fca7c8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:06:5c:b2:50:f4:94:37:5f:f2:f9:9b:b6:72:
                    79:48:71:e7:d9:af:23:4a:7a:c8:dc:22:d2:9b:18:
                    be:17:ab:d0:f8:d9:a6:ab:2e:55:aa:ed:fe:e3:d7:
                    23:93:e6:83:40:2e:3a:e3:1e:15:c5:04:1e:08:a9:
                    6e:72:f3:28:a3:99:81:d0:f6:4a:47:b7:7e:df:68:
                    2b:b9:8d:7e:22:1c:f3:0a:cd:1a:55:ed:4e:13:7f:
                    79:69:ab:23:08:06:cf:88:31:38:f7:aa:ea:8a:87:
                    24:19:45:de:8a:88:e0:ca:f3:6a:27:8d:37:78:48:
                    04:e1:56:39:d6:3f:2a:ea:79:b8:48:25:05:72:13:
                    d2:d7:a4:e1:ea:12:38:63:6a:1e:7b:9c:11:54:2b:
                    d2:e5:28:01:8b:2d:3c:cd:dc:e5:b2:65:c1:3d:6e:
                    85:1e:9d:86:6f:aa:0b:9f:0f:bf:be:7c:25:de:d6:
                    e2:b3:d6:c8:d4:8a:ae:28:1a:9d:a5:68:15:07:45:
                    18:8b:a5:0d:36:04:19:79:6d:cc:d5:2b:9a:43:4b:
                    33:6b:bb:9e:b4:a2:03:21:df:7a:48:bf:4f:83:29:
                    72:42:71:bc:85:cc:a1:62:b0:db:58:7f:e3:a3:a9:
                    92:44:83:cf:60:ae:49:41:78:c1:9c:33:ee:82:00:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.42.212.0/23
                IPv6:
                  2602:fa67::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53616

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:95:bd:91:0c:f5:7c:38:87:82:09:0e:65:42:ce:a8:14:47:
         b6:82:8a:69:5c:e4:0b:2b:e3:9e:c7:9f:96:56:8a:87:c8:cf:
         91:d1:f2:67:94:7c:50:65:27:b6:64:2c:1a:ce:5c:65:ca:63:
         84:1b:fd:ce:ad:67:0b:f8:54:68:b1:b9:4e:fa:33:11:12:ae:
         f9:24:5b:3c:a4:65:ef:d6:4f:f0:7b:7d:91:63:76:92:31:dc:
         16:63:1d:c5:29:7c:df:a7:c8:94:5b:d6:ee:78:c7:7b:1b:39:
         d1:b2:b3:04:d1:be:08:a9:35:dd:b9:9f:20:19:28:d3:6c:5e:
         83:43:92:b3:e1:47:b8:db:b4:80:bc:cf:5b:2a:cd:0f:ce:86:
         31:eb:ee:cf:d7:c7:c1:05:bb:61:de:ec:f6:e5:df:4b:50:6d:
         30:e4:04:6c:cd:fc:77:23:24:4e:a5:c5:cf:05:0a:62:45:8d:
         9d:0c:30:7d:30:53:f0:5b:aa:c3:23:a2:9a:8d:50:d5:4d:91:
         15:a6:91:34:60:92:ec:4d:06:8d:56:ff:34:23:ba:e9:d2:fa:
         98:c9:00:46:80:5d:9b:62:d1:8c:e4:3e:46:91:79:82:86:04:
         27:ac:19:9d:e6:9c:a4:09:ed:ec:d1:70:86:95:6d:21:95:b9:
         b4:c3:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----