Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d.cer
File:                     608a6439-1cee-431f-908b-dcfad7329c1d.cer (raw, json)
Hash identifier:          AH9kyMEhjv/gIbCswFHYsKd08SXw34CeYgS4HUKz1JU=
Subject key identifier:   0D:C4:2C:0A:47:35:26:93:C6:61:F5:DD:3C:1B:3C:7A:BB:7D:35:F5
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584347020EB8B628D7B19530BF40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/608a6439-1cee-431f-908b-dcfad7329c1d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Sep 2023 18:38:44 +0000
Certificate not after:    Mon 22 Dec 2025 19:38:44 +0000
Subordinate resources:    AS: 7358
                          AS: 26442
                          IP: 158.151.0.0/16
                          IP: 159.137.0.0/16
                          IP: 199.33.199.0/24
                          IP: 199.79.192.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:47:02:0e:b8:b6:28:d7:b1:95:30:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 19 18:38:44 2023 GMT
            Not After : Dec 22 19:38:44 2025 GMT
        Subject: CN=608a6439-1cee-431f-908b-dcfad7329c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:a9:b7:67:71:4c:17:dc:7c:a3:6f:d9:4a:
                    9c:7d:76:d4:63:b2:2e:c4:8b:38:4b:fe:3f:56:cf:
                    7b:a7:d6:67:b8:28:2b:1e:a9:c1:93:97:4c:22:6f:
                    a0:6c:44:22:ff:58:9a:2c:2b:98:06:7a:50:05:3e:
                    85:fd:91:d0:35:e6:59:97:24:fb:94:27:d1:75:43:
                    a0:25:d8:f8:98:f8:6d:29:5c:a0:f0:45:fc:20:6f:
                    47:53:ce:3a:36:34:d6:56:94:e5:2b:41:1a:7b:78:
                    da:05:67:31:3e:16:3a:e0:c9:05:b0:7f:88:9d:15:
                    96:72:db:1c:7c:18:6d:0b:84:a9:3f:3a:ea:51:42:
                    af:66:99:17:d4:78:c9:8a:aa:29:0c:12:6f:6d:b8:
                    10:f7:42:f4:fe:8d:be:f8:6b:26:a6:ed:00:61:c1:
                    2f:30:74:93:ad:2a:92:7b:1e:d7:72:e9:a5:cd:cc:
                    5e:4a:af:e7:00:78:37:31:c2:6b:ce:47:72:7c:ac:
                    33:f2:95:16:d0:87:0d:9e:da:ce:e5:6e:ef:35:d9:
                    10:14:ad:25:a3:a7:82:d9:a5:4c:97:27:21:6b:86:
                    6e:11:37:b7:28:0a:8c:c6:63:4f:b6:da:d8:05:2c:
                    02:c9:dc:a5:1f:f6:5c:c2:0e:db:b7:13:ef:d5:1a:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C4:2C:0A:47:35:26:93:C6:61:F5:DD:3C:1B:3C:7A:BB:7D:35:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/608a6439-1cee-431f-908b-dcfad7329c1d/608a6439-1cee-431f-908b-dcfad7329c1d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.151.0.0/16
                  159.137.0.0/16
                  199.33.199.0/24
                  199.79.192.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7358
                  26442

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:e5:f3:4b:84:56:c7:24:a6:3d:ad:e3:0b:7c:2d:de:38:c3:
         7d:a5:6a:c5:50:7f:6b:61:d0:e0:b3:1e:61:15:b1:3f:2d:9e:
         3a:cd:f4:60:89:0e:8e:99:f8:43:4f:db:1a:75:28:31:ee:d3:
         02:18:72:86:ed:00:63:30:31:a4:72:98:ce:b9:e0:fb:f9:78:
         18:32:30:a3:65:68:99:a3:32:16:64:44:07:7f:8b:86:1e:d7:
         54:c4:93:2a:43:fc:79:7a:83:0b:72:0e:a3:35:d0:3f:f5:82:
         79:a7:cc:63:89:d5:eb:e5:0c:d5:f0:1b:6b:ed:d6:33:78:47:
         07:e5:d1:24:65:3f:72:7a:a2:50:cd:1b:33:61:89:35:e7:04:
         6c:61:03:be:ce:24:38:b6:50:77:47:63:e7:af:5a:75:39:72:
         e7:11:af:6b:b9:1d:8b:a7:ad:9b:ac:5a:2c:b8:02:f0:55:9e:
         1d:da:7e:79:4d:c4:6d:c9:19:40:29:b2:a8:4f:3d:64:08:0a:
         d7:67:91:ab:af:88:8a:a1:e9:ca:da:44:72:51:65:fc:2a:04:
         72:62:e9:57:c5:e3:8a:64:01:a1:86:5f:24:b2:9a:84:5d:53:
         2a:44:73:45:60:19:54:14:36:86:00:b2:4c:e5:6a:5b:33:1d:
         95:d5:b1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----