Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626.cer
File:                     45644f39-69e4-4e08-bb44-b87bd3387626.cer (raw, json)
Hash identifier:          ApE3s3x+7rbveiY6F2ZTrtAN7Oun0JkrSkKBsoFE95Y=
Subject key identifier:   8D:11:F6:78:78:90:C7:14:99:72:0F:30:5D:A5:8D:CB:4A:10:A7:45
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842AD9D24D3328257816DE63780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/45644f39-69e4-4e08-bb44-b87bd3387626.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Jul 2023 19:56:44 +0000
Certificate not after:    Tue 28 Oct 2025 19:56:44 +0000
Subordinate resources:    AS: 398813
                          IP: 204.235.168.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ad:9d:24:d3:32:82:57:81:6d:e6:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 26 19:56:44 2023 GMT
            Not After : Oct 28 19:56:44 2025 GMT
        Subject: CN=45644f39-69e4-4e08-bb44-b87bd3387626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:39:00:27:1d:f7:d1:55:67:69:a3:c0:17:fe:
                    78:a0:19:a2:48:e7:7b:cb:b6:40:f9:e0:98:5b:9a:
                    4a:f2:26:1c:b0:be:68:f9:61:d6:a6:0b:69:84:0c:
                    77:ff:de:8d:5a:f4:ea:15:96:a3:23:8e:97:f1:09:
                    e0:44:f7:88:b3:f4:e9:4b:95:b9:ab:ca:b5:4d:fe:
                    63:e3:12:c6:72:e5:a3:63:0c:94:b6:04:e2:bc:92:
                    09:33:c8:66:3b:b8:0f:c4:69:f7:c0:14:9e:aa:d2:
                    44:6b:58:8f:d6:84:b4:73:d3:18:ea:8e:ba:79:a4:
                    6a:60:91:90:21:66:12:17:e8:be:1b:ab:6b:a2:80:
                    5e:2d:c5:7b:17:27:f4:b6:8a:08:d9:d2:79:a2:53:
                    85:9b:a1:98:1c:45:5f:a0:5e:19:62:fc:29:94:cd:
                    68:7a:32:d1:18:40:b6:c0:65:30:a9:75:cb:ec:e0:
                    d7:67:70:86:11:84:2c:47:e9:96:4c:bc:75:cf:b0:
                    9f:cb:3b:14:02:27:86:cc:12:75:7e:cd:18:e3:76:
                    cb:16:ce:1d:8f:18:70:78:b9:45:44:4e:a6:ba:45:
                    69:68:39:79:e8:25:3a:fa:80:04:88:36:fc:a7:db:
                    f3:7c:bc:a9:56:06:e9:d9:b4:8c:7d:ab:ca:af:66:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:11:F6:78:78:90:C7:14:99:72:0F:30:5D:A5:8D:CB:4A:10:A7:45
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/45644f39-69e4-4e08-bb44-b87bd3387626/45644f39-69e4-4e08-bb44-b87bd3387626.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.168.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398813

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:a4:9f:81:1a:24:4f:78:3d:d0:e2:d9:2a:e2:9c:9d:87:c6:
         90:16:59:7b:b2:b2:14:ac:6a:19:04:49:4b:51:b7:60:5c:ca:
         aa:a1:da:00:70:ff:f6:44:4d:e2:27:5b:6c:5a:71:69:36:aa:
         d2:21:8a:91:13:53:86:0d:df:cd:bb:82:c2:7b:20:18:d8:5d:
         a5:0f:ba:50:96:85:b3:7d:a5:09:bb:c5:b3:27:c1:e0:4a:a5:
         91:10:b4:95:c8:8d:0a:bd:55:ab:5a:90:8d:93:47:99:fc:1f:
         5f:19:7f:f8:90:50:22:95:01:f8:e8:b2:a1:e1:59:08:3d:63:
         e5:99:8e:74:2d:5b:7c:d4:30:63:16:c2:46:e4:29:22:d8:a8:
         9c:81:64:56:50:4e:55:86:9a:2e:cf:ee:9f:13:91:9c:e9:c9:
         e3:e4:53:d0:65:fb:fb:26:bd:9d:28:2d:7d:3c:90:c6:f6:4e:
         4d:19:49:f4:25:40:48:37:90:16:63:c2:95:fa:5a:09:59:26:
         b2:86:85:34:7f:05:e0:87:f7:c5:fd:34:e6:26:b9:2d:01:87:
         a8:b6:37:fe:ae:92:b7:fc:92:9f:d1:18:44:57:24:f3:73:17:
         45:8e:71:c1:aa:e3:7a:4d:43:8b:b2:e6:e1:f0:91:e0:1d:fb:
         17:1c:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----