Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754.cer
File:                     54ef2b12-4c16-4f8f-88fb-0070607e9754.cer (raw, json)
Hash identifier:          pdNt0pqoxZY9tJJlAji+8Wl8Gga1B/Pkvby5AxJVm5M=
Subject key identifier:   B5:EB:90:83:FB:F9:3B:9E:18:AF:9D:0D:3D:A1:19:5C:C8:C9:94:A9
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847B25F185556955A49133E7060
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/54ef2b12-4c16-4f8f-88fb-0070607e9754.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 29 Oct 2024 00:45:26 +0000
Certificate not after:    Mon 01 Feb 2027 01:45:26 +0000
Subordinate resources:    IP: 136.143.131.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:5f:18:55:56:95:5a:49:13:3e:70:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 29 00:45:26 2024 GMT
            Not After : Feb  1 01:45:26 2027 GMT
        Subject: CN=54ef2b12-4c16-4f8f-88fb-0070607e9754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:da:23:22:7c:4e:de:b5:70:6d:5a:f5:82:
                    5b:62:11:50:c3:44:25:2e:2b:8a:c1:f9:83:43:ca:
                    5c:ca:1d:3c:7d:02:9e:83:2d:13:41:fa:66:95:1c:
                    76:69:c6:6c:e4:2d:e3:b5:22:47:6c:9b:12:e0:fb:
                    10:b2:a3:9e:ac:a9:3b:b9:fe:ef:0b:ca:c9:ac:4d:
                    50:66:45:6a:c4:d2:8a:c2:67:24:d8:2c:d6:3c:84:
                    0d:60:6c:af:ca:57:6b:06:ea:88:a1:1e:35:46:6c:
                    36:f1:c1:c7:e9:67:71:11:b3:bc:ce:60:06:c1:23:
                    67:89:62:0d:08:8b:2a:bb:12:8b:28:2f:de:c2:50:
                    6b:96:b0:21:d1:1c:ec:14:79:df:e4:95:29:43:fd:
                    b2:f0:61:9d:09:00:e2:f6:a6:d7:ea:fa:c0:7b:2b:
                    d7:79:72:16:3b:12:36:3a:43:37:81:78:65:b8:64:
                    f5:a1:2e:fb:4b:39:fd:ee:8f:33:9c:09:02:69:29:
                    fe:de:66:fb:5b:b4:16:fd:77:26:2f:f9:f2:94:83:
                    f3:cd:a7:80:89:a3:dd:a6:a5:04:0a:03:99:d8:90:
                    fd:f1:10:d8:5f:c6:6b:c6:59:46:5b:7f:92:23:2f:
                    c2:12:6c:93:76:fa:74:5f:72:65:7c:19:7a:07:8a:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EB:90:83:FB:F9:3B:9E:18:AF:9D:0D:3D:A1:19:5C:C8:C9:94:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/54ef2b12-4c16-4f8f-88fb-0070607e9754.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1d:de:11:6a:24:69:d9:a2:f0:e5:8b:d4:c9:35:63:88:bc:
         2f:a5:e0:40:84:a4:c7:a9:b7:e9:da:0c:73:07:5d:1d:c8:86:
         cc:d1:c5:6c:aa:67:73:cc:26:76:3d:0d:ed:e3:16:76:26:68:
         75:e8:46:f5:b3:eb:50:2c:d3:b9:22:dd:6b:67:55:ca:2e:04:
         7c:3f:1b:94:e1:70:8e:79:44:47:fa:45:8a:f2:bc:b5:50:08:
         9e:e7:d0:8a:01:8a:05:35:ef:b1:34:5f:5d:1d:9e:61:ce:55:
         8e:f3:53:30:ba:80:79:eb:6e:09:44:4c:cb:ee:ad:e6:7c:78:
         a6:af:55:b9:c7:82:9a:c5:74:ef:f2:ea:c8:7b:b9:89:b9:7b:
         f3:4a:1c:df:be:5e:e6:1f:45:a9:0a:ad:6c:3b:55:9a:9b:e0:
         c8:13:6f:5f:88:0c:c3:99:f6:8e:6f:b3:08:19:a3:7f:2f:a9:
         03:99:7b:e7:fe:c2:5b:ec:69:d4:c7:73:ef:a0:f4:b5:4c:ca:
         da:a4:48:44:bf:c6:1c:82:16:43:2e:cb:a3:ff:31:ba:ee:46:
         1b:53:35:de:68:a9:59:53:20:db:16:5e:40:cf:53:77:26:fb:
         aa:5b:fb:f7:14:43:20:da:53:6e:18:15:7b:b1:57:9b:3e:a2:
         62:42:5f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----