Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96.cer
File:                     460e35b5-8730-404c-9b7c-76c5af2c5d96.cer (raw, json)
Hash identifier:          i1LBnAccsW0ziHO1wWkllOh4JCuCBmuP4w6HfrJ1k8o=
Subject key identifier:   AF:1C:3C:98:12:3F:95:9F:FF:E6:EA:0F:16:0E:18:B5:21:DA:25:D5
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584332EC12B0D584AEE497C37140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/460e35b5-8730-404c-9b7c-76c5af2c5d96.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 12 Sep 2023 13:58:17 +0000
Certificate not after:    Mon 15 Dec 2025 14:58:17 +0000
Subordinate resources:    IP: 132.204.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:32:ec:12:b0:d5:84:ae:e4:97:c3:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 12 13:58:17 2023 GMT
            Not After : Dec 15 14:58:17 2025 GMT
        Subject: CN=460e35b5-8730-404c-9b7c-76c5af2c5d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:4a:50:03:9a:df:bd:e7:cd:c0:9f:dd:3b:
                    76:1b:31:d1:6f:79:48:68:af:cc:1a:75:be:35:31:
                    39:1d:b6:03:e4:39:27:b6:24:3d:93:3d:9f:02:4d:
                    25:66:8a:8d:36:ca:a2:fc:09:af:22:2f:3c:6b:dd:
                    06:e1:60:4c:23:53:38:36:db:b4:93:4f:52:ae:82:
                    58:ba:48:77:42:16:f2:6c:f2:3b:3f:29:61:27:c0:
                    dd:1b:78:37:69:77:06:fc:a2:ab:40:70:7e:3a:25:
                    99:f1:0c:33:bb:5f:ff:38:61:53:aa:a0:aa:20:95:
                    b7:32:cd:6e:3e:5e:76:04:4c:72:d3:f3:8f:48:26:
                    42:a9:5c:7f:7d:4c:6b:a9:01:94:0b:96:3a:d4:59:
                    39:38:f2:4c:46:ec:b7:d7:e1:08:5e:60:fe:26:b6:
                    0a:81:9b:cc:79:69:8e:2f:fc:d7:55:b9:8b:96:e5:
                    a8:e8:99:20:57:3d:b2:a8:37:e5:35:a4:ee:21:3a:
                    b5:33:67:9d:b0:d4:eb:da:96:b0:d5:c7:36:5f:5e:
                    22:5d:85:9e:74:5b:7d:fa:b5:76:80:91:87:88:51:
                    c1:b1:fe:64:08:99:82:0c:61:82:1b:04:77:2f:ce:
                    3d:c1:cd:08:7e:92:4a:de:55:20:1d:34:5e:cd:fc:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1C:3C:98:12:3F:95:9F:FF:E6:EA:0F:16:0E:18:B5:21:DA:25:D5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/460e35b5-8730-404c-9b7c-76c5af2c5d96/460e35b5-8730-404c-9b7c-76c5af2c5d96.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b2:64:fc:29:f8:0e:cb:f1:d0:60:1b:1e:82:13:81:00:d3:
         0d:62:00:c6:70:9b:30:41:24:9f:11:25:a2:0c:b6:45:12:be:
         88:ed:1f:f6:9e:17:f8:7c:c4:ba:6a:33:3c:8d:23:3d:ed:b4:
         ec:ef:91:8d:4a:bb:21:71:b6:ed:5c:df:b6:2b:84:e5:87:30:
         74:38:bb:f1:03:34:32:ed:f2:3c:bf:e5:3c:1d:ee:18:b9:e7:
         7f:24:04:88:01:d1:3d:2e:19:9e:a2:96:eb:9d:5a:56:7a:97:
         f0:94:96:32:62:39:ef:a1:b9:2a:e5:ec:ba:78:47:47:c2:34:
         05:65:11:96:a0:28:63:6e:0f:67:76:c8:8e:0d:ed:62:75:91:
         aa:cc:ba:29:7c:93:02:4e:8d:3d:a6:9f:bb:71:e2:2a:8f:94:
         ae:93:57:a6:4c:79:eb:30:e9:9a:f9:68:06:7c:d9:b0:11:88:
         85:c0:31:2e:78:e0:c3:aa:0b:35:8d:63:37:b7:02:11:1b:c6:
         59:86:58:fa:1e:8e:9f:e8:1d:76:4e:de:a7:7e:5d:b1:32:86:
         bd:28:b4:46:1b:80:8e:23:6e:db:94:41:d0:f5:b2:20:63:ee:
         ed:a8:55:d7:f8:59:4c:70:1e:03:0a:7d:61:99:b4:63:33:5f:
         e6:2d:d3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----