Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
File:                     4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer (raw, json)
Hash identifier:          7l3cao3AwcinUtgbdjOBdEfCEmXNRQHsArj0GlnGnTw=
Subject key identifier:   CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858433880BAC362EF0AA095CA0F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Sep 2023 13:56:50 +0000
Certificate not after:    Wed 17 Dec 2025 14:56:50 +0000
Subordinate resources:    AS: 21713
                          IP: 66.172.64.0/19
                          IP: 104.160.48.0/20
                          IP: 168.182.64.0/18
                          IP: 216.14.64.0/20
                          IP: 2605:c380::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:38:80:ba:c3:62:ef:0a:a0:95:ca:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 14 13:56:50 2023 GMT
            Not After : Dec 17 14:56:50 2025 GMT
        Subject: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:62:b7:dc:0a:4f:e2:6b:cb:02:f6:03:2f:cc:
                    42:1c:40:ba:30:14:18:ef:78:67:14:75:8b:f3:09:
                    26:ed:ca:00:6e:66:2b:e2:1f:0d:5d:93:91:0c:80:
                    3f:25:b5:d6:15:50:2c:30:87:ab:a2:f9:ea:cf:a6:
                    31:5f:04:c4:b6:44:43:dd:35:fa:d8:fc:54:db:d6:
                    b8:55:b0:b5:73:04:37:7c:f9:08:0d:fd:14:25:4e:
                    b6:31:40:eb:ee:87:eb:d9:f0:ad:45:02:69:bb:65:
                    42:6e:c3:c4:6f:92:a4:13:fe:00:b5:71:b0:65:eb:
                    36:af:cc:15:20:dd:df:57:18:60:df:b4:11:aa:42:
                    9a:c2:eb:4e:53:3f:44:f1:03:3c:58:b1:ff:1c:9b:
                    68:77:bd:1c:bb:bf:ec:b6:31:6a:b1:a4:4b:b2:04:
                    42:21:14:03:7e:b4:42:82:44:bf:d6:f6:97:db:f9:
                    cb:e2:e1:c0:bd:92:ad:6e:a7:2b:46:31:8b:ac:a1:
                    24:eb:77:2a:24:8f:32:d7:35:35:6f:0b:d7:75:46:
                    76:e0:84:86:0b:33:1e:ab:ea:9e:33:e2:f0:36:34:
                    d3:d5:7b:30:8e:a4:37:d3:c8:dc:02:16:8f:79:85:
                    6e:f8:b3:90:93:f1:44:14:ea:3e:1c:15:dc:54:7b:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.172.64.0/19
                  104.160.48.0/20
                  168.182.64.0/18
                  216.14.64.0/20
                IPv6:
                  2605:c380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21713

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:aa:13:80:c0:cc:7a:72:41:d9:47:86:59:9c:99:3f:d6:93:
         16:97:4d:39:1d:49:fb:32:9d:3e:ee:48:c6:38:32:fe:ed:31:
         21:d9:db:4e:36:86:6e:02:57:78:39:c5:68:1b:2a:5f:37:c4:
         0b:0c:08:02:30:d6:20:9d:ac:79:15:a1:c7:35:f1:40:cc:fe:
         31:56:47:56:22:45:18:49:c4:98:54:b7:08:f0:22:89:46:1a:
         e4:c5:97:18:b3:b8:a6:8a:05:d0:7f:56:f0:b6:cb:7a:0d:03:
         39:3f:45:c8:21:50:7f:f9:45:47:b7:31:7c:73:ea:ed:3a:64:
         af:4d:b9:14:7b:84:eb:b2:03:a3:7a:46:6e:92:66:f1:cc:64:
         e2:10:38:43:9e:e2:f0:bc:f6:25:02:b8:01:2a:7b:9b:37:60:
         18:d2:71:8b:bf:0d:40:45:72:f4:c0:8d:1f:16:1c:94:63:e1:
         f9:d5:08:4b:ee:e5:9b:4e:5a:ad:97:0b:48:b4:08:82:7a:24:
         5e:c2:c1:19:31:ee:5f:c4:57:55:ac:a3:67:99:7c:47:a5:78:
         1c:b0:3f:4b:30:91:4c:37:f1:46:65:36:e1:fd:22:f3:86:51:
         fc:13:0c:8d:40:be:17:00:81:23:1d:50:f1:1d:49:a2:33:80:
         6f:0a:a8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----