Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d248b4a-2962-46d4-ac24-d4caa170eb3d.cer
File:                     5d248b4a-2962-46d4-ac24-d4caa170eb3d.cer (raw, json)
Hash identifier:          hng7nSBZF0VHjlq7d2Q6huO11EZgiK6lxGHkRR1vOL4=
Subject key identifier:   E4:54:94:1B:5B:82:FE:8D:83:46:EA:39:B0:7B:6A:C1:AF:A3:69:91
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858433994B064ED3DFB182E25A600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d248b4a-2962-46d4-ac24-d4caa170eb3d/5d248b4a-2962-46d4-ac24-d4caa170eb3d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d248b4a-2962-46d4-ac24-d4caa170eb3d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Sep 2023 23:12:52 +0000
Certificate not after:    Thu 18 Dec 2025 00:12:52 +0000
Subordinate resources:    AS: 31762
                          IP: 23.154.168.0/24
                          IP: 2607:4fc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:39:94:b0:64:ed:3d:fb:18:2e:25:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 14 23:12:52 2023 GMT
            Not After : Dec 18 00:12:52 2025 GMT
        Subject: CN=5d248b4a-2962-46d4-ac24-d4caa170eb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:03:6e:33:dc:3c:35:e3:82:d6:f2:00:fe:
                    99:19:1b:e5:56:4e:74:d6:f0:51:32:21:82:95:4d:
                    d0:a7:29:3f:c0:f5:c5:54:d8:44:9d:40:d4:12:a0:
                    b0:32:ff:b6:00:d5:50:18:5f:a7:ea:cc:b7:a8:2d:
                    ad:8f:d2:df:0b:ed:02:89:30:14:41:5d:10:df:d8:
                    8c:18:34:ec:02:a9:f9:4e:cf:b5:45:65:9d:a4:cb:
                    0c:c9:7b:a0:33:33:2f:67:25:03:d0:de:00:c1:07:
                    3f:3a:7a:06:60:0b:69:2e:62:ce:f4:d8:1e:37:b8:
                    21:c0:cf:1c:2a:ea:ee:21:1a:15:8d:74:62:e8:f4:
                    fa:bd:47:48:79:c1:1b:5a:a3:d8:34:76:a2:a4:3e:
                    a0:f2:7c:d5:43:0b:bf:e1:05:b9:ea:44:59:82:46:
                    a2:50:c1:a2:76:cb:39:78:ed:0f:37:fd:be:43:eb:
                    c0:47:0f:17:f9:89:cd:ef:77:ca:c5:3c:df:1a:b0:
                    66:ea:d5:36:98:d2:79:9f:27:0a:bc:47:15:ba:cb:
                    82:9e:07:e5:02:af:66:d8:03:ac:03:a6:a5:96:1b:
                    8c:c9:f4:15:68:09:e7:16:4d:6f:d7:c9:61:ba:75:
                    3d:4c:bd:2a:ee:70:5d:69:63:f4:90:f7:14:49:da:
                    e4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:54:94:1B:5B:82:FE:8D:83:46:EA:39:B0:7B:6A:C1:AF:A3:69:91
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d248b4a-2962-46d4-ac24-d4caa170eb3d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5d248b4a-2962-46d4-ac24-d4caa170eb3d/5d248b4a-2962-46d4-ac24-d4caa170eb3d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.168.0/24
                IPv6:
                  2607:4fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31762

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:26:1e:50:0f:00:49:81:3e:95:be:06:a4:2e:ee:79:9c:9c:
         c0:f5:3b:07:23:21:da:39:66:c6:67:c0:df:53:8e:82:a7:6d:
         9d:8f:f8:19:d0:45:02:ce:6d:8a:f1:ad:77:96:1e:ba:59:71:
         fd:cc:eb:8a:0e:37:e5:73:98:3f:bf:6a:9b:50:9b:76:ea:41:
         37:d9:e4:6f:17:a5:2e:06:79:ba:16:d9:db:6c:c0:40:18:49:
         fb:a8:1e:74:3a:5d:de:a7:ed:36:c4:d1:1e:5c:e0:f0:70:9d:
         2f:f8:7c:a5:2a:f5:c8:a3:d9:46:5f:dc:4c:6d:e9:46:b3:a1:
         2f:14:3b:43:28:00:7b:b8:17:3f:26:34:d3:47:70:0f:56:7a:
         16:e1:aa:81:29:95:36:55:3f:8f:7a:1c:cc:d6:e4:de:76:2e:
         2f:6b:e2:85:db:d9:8f:b3:3f:e8:70:f3:8f:6d:b7:d7:d6:f4:
         67:b0:27:38:75:a7:df:46:13:d1:35:08:0e:8a:16:91:bb:dd:
         a2:ff:4b:2b:eb:cb:0b:de:79:1c:b3:5e:dd:8e:65:20:f2:8b:
         fd:8f:7f:27:79:2e:3b:45:30:49:ad:d5:24:f0:79:09:eb:e3:
         dc:c0:05:d0:58:83:77:bd:4a:50:73:b7:3e:38:8d:f9:1e:fc:
         8c:c0:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----