Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5.cer
File:                     45366c7b-8de5-4622-9f3d-89bb36e57df5.cer (raw, json)
Hash identifier:          FXEppuS4pXMAp4ZvUCRbxhRH6fUGSEq9RrjgNVDz8HQ=
Subject key identifier:   AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858440707298A23864B4A90B32EF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 27 Nov 2023 13:24:14 +0000
Certificate not after:    Wed 12 Nov 2025 18:13:34 +0000
Subordinate resources:    AS: 46906
                          IP: 104.245.248.0/21
                          IP: 146.71.16.0/20
                          IP: 160.79.80.0/20
                          IP: 192.30.160.0/20
                          IP: 2606:c440::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:07:07:29:8a:23:86:4b:4a:90:b3:2e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov 27 13:24:14 2023 GMT
            Not After : Nov 12 18:13:34 2025 GMT
        Subject: CN=45366c7b-8de5-4622-9f3d-89bb36e57df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:ad:6b:1f:c2:9a:49:06:dd:b3:0f:6f:8d:
                    74:6a:4a:30:77:73:f2:33:7b:d6:c9:a6:8d:c6:52:
                    21:e5:3b:fe:de:f5:7c:bd:6c:87:9d:f2:15:64:6a:
                    26:30:c6:74:fc:a2:b7:b1:d6:94:4e:33:fc:f6:cf:
                    36:bd:b9:53:8d:2f:ed:f2:a0:ad:13:9a:8f:e7:16:
                    68:8f:ac:f9:64:d6:bc:f8:84:ad:46:61:bf:de:71:
                    7b:db:98:b2:06:d2:3e:87:c7:24:cd:01:44:36:77:
                    3d:70:4d:52:10:b7:34:a3:0b:a8:43:9d:a6:4e:a9:
                    25:72:88:fe:ea:91:e4:f1:64:0f:bf:58:25:a3:72:
                    fc:57:84:b8:12:59:26:ab:0b:52:52:20:c5:60:34:
                    b8:be:0c:32:f5:54:59:7b:78:47:e0:8e:5a:24:cc:
                    cf:9a:95:75:68:c9:fb:99:9c:25:6c:e2:87:17:06:
                    36:e2:c6:c8:6c:cb:a9:b3:2b:46:1a:b0:d3:ea:d9:
                    b6:90:c3:b6:71:6b:0f:5c:45:b1:c2:13:31:a5:dc:
                    a9:21:f3:3b:3a:19:c9:a8:53:72:99:0b:aa:94:cd:
                    4e:e8:98:d1:04:27:0a:f3:87:94:2e:b5:5f:40:7a:
                    3a:78:fc:89:a6:65:07:e5:e6:3b:8f:ef:04:10:24:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BF:85:DF:F0:14:8F:E3:C6:66:08:E2:00:0C:82:25:FE:EF:98:00
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45366c7b-8de5-4622-9f3d-89bb36e57df5/45366c7b-8de5-4622-9f3d-89bb36e57df5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.248.0/21
                  146.71.16.0/20
                  160.79.80.0/20
                  192.30.160.0/20
                IPv6:
                  2606:c440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46906

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:3a:36:3d:03:93:6f:72:56:fb:1c:0b:63:89:19:ab:d1:03:
         ca:55:e8:ca:fc:9c:72:c3:34:1a:04:e9:9b:15:cd:ee:0f:5f:
         5d:8a:d8:83:de:69:92:b0:db:5f:a6:dd:c2:08:26:29:0e:d6:
         44:4f:c3:61:06:44:d9:d3:f0:3c:0d:44:2f:ff:f1:59:d0:43:
         78:e1:ec:19:b7:19:81:ba:48:80:d8:cb:d2:96:fe:f1:1e:5b:
         a2:c6:91:5c:3a:b5:c3:25:b8:19:13:50:20:4d:45:d3:32:93:
         3a:94:20:1d:54:1c:c9:d8:f1:d9:e0:93:26:11:c8:ca:b4:b0:
         6b:ba:67:1e:1e:dc:db:57:9a:7f:4c:a0:81:a5:a0:64:50:8d:
         9b:f0:0b:47:69:9d:9f:33:1a:dc:72:f8:fe:18:e6:85:98:0b:
         36:b1:5c:a9:94:7a:59:ee:aa:a8:f1:30:8f:09:56:eb:83:ea:
         ac:e4:6f:9b:b7:68:33:5b:0a:b3:a4:36:bd:21:96:e7:db:42:
         50:ac:45:4f:c2:bc:57:6a:62:1c:17:5f:56:ae:2b:45:78:0f:
         94:a1:af:27:d7:6c:33:0c:7f:09:cc:2a:24:b7:6c:90:74:92:
         98:0b:b2:f8:76:e6:c5:bc:75:a2:b5:7d:90:a5:14:af:48:54:
         6d:0a:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----