Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda.cer
File:                     77728ad0-067a-4ac0-884f-39d45b479fda.cer (raw, json)
Hash identifier:          0L/KznO9PVdXWpRUgOJfkWKL7QNBfDaI2m8Y42XOXtg=
Subject key identifier:   D7:9F:73:41:48:B7:DC:6C:32:16:B0:5C:84:6F:63:BC:52:E2:EA:D6
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584312BB30A2A66E47BFA510B650
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/77728ad0-067a-4ac0-884f-39d45b479fda.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 01 Sep 2023 01:13:55 +0000
Certificate not after:    Thu 04 Dec 2025 02:13:55 +0000
Subordinate resources:    AS: 14482
                          IP: 2602:fa3b::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:12:bb:30:a2:a6:6e:47:bf:a5:10:b6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep  1 01:13:55 2023 GMT
            Not After : Dec  4 02:13:55 2025 GMT
        Subject: CN=77728ad0-067a-4ac0-884f-39d45b479fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:8d:f0:e1:fc:19:2d:49:6c:ae:ad:d0:bf:
                    e9:8f:2f:82:a6:ea:a3:0b:22:4a:ea:95:b0:4a:ff:
                    d9:15:b3:97:4d:1c:3b:8d:b6:6f:21:73:aa:ad:88:
                    30:63:e6:8b:57:32:37:b2:bd:68:01:9d:84:62:63:
                    a8:d0:4b:99:b3:8e:71:39:14:a8:f4:79:3c:0b:47:
                    5c:22:54:08:f9:37:91:90:36:85:bc:9a:04:72:49:
                    37:a5:d3:11:f4:5c:81:a5:9f:92:b7:38:bc:ac:df:
                    97:a1:08:cb:9a:55:9f:ae:3d:6f:a0:5b:7b:a4:2f:
                    3b:b5:fd:85:0d:94:93:50:df:7a:06:da:28:80:7a:
                    f8:fd:34:3d:03:1a:03:05:f4:7f:53:47:e7:ec:1d:
                    11:b6:c6:5f:b1:c1:6a:9f:64:7b:7f:57:07:20:84:
                    c7:34:64:d0:6a:9b:af:03:be:b5:c1:4e:b7:74:e3:
                    b9:e1:a5:a7:25:16:e3:36:15:0d:99:8c:19:00:42:
                    e7:a1:12:5e:2d:ba:89:08:be:2a:b5:7d:f9:5d:e0:
                    76:be:09:a5:14:47:04:c0:f2:26:f8:69:cd:9f:c5:
                    f3:b5:a2:1d:51:33:4d:55:67:54:b1:da:f4:ba:ba:
                    3e:0f:42:85:09:a1:95:09:b1:35:fa:e4:fc:07:13:
                    ca:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9F:73:41:48:B7:DC:6C:32:16:B0:5C:84:6F:63:BC:52:E2:EA:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/77728ad0-067a-4ac0-884f-39d45b479fda/77728ad0-067a-4ac0-884f-39d45b479fda.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa3b::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14482

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b0:a6:46:68:23:c9:3f:49:1e:a4:51:04:d8:15:04:75:92:
         7a:27:37:dd:2f:e7:f4:7d:e2:20:2d:8f:6d:de:a4:a4:dd:6e:
         94:e1:fb:09:98:1d:ac:ed:6e:07:35:19:c3:9f:1e:b5:39:f2:
         06:2d:6f:ff:57:13:3f:41:d2:1c:70:68:8f:6a:90:6b:c0:4a:
         50:a2:25:e9:f9:02:71:6c:d6:0a:e1:cf:c3:67:50:4e:21:b4:
         3e:7c:61:44:88:2c:16:60:63:31:09:fe:63:49:8b:95:a1:1a:
         74:c2:9d:7f:86:56:4e:3c:18:9d:86:f6:c8:38:10:a1:80:e8:
         5f:6f:d0:69:86:87:b1:96:e9:f7:2f:4f:88:44:a5:43:d8:b5:
         35:ea:f3:15:2f:ba:14:d7:e1:0a:68:e3:c3:90:13:92:13:70:
         d9:23:68:38:d5:99:8a:78:f9:8c:f4:21:10:9a:94:ee:8f:d1:
         7d:1e:5f:5b:02:9f:50:ee:93:f6:4d:d1:36:17:4d:2d:02:b5:
         cd:0f:7f:8d:4a:4b:2b:26:29:94:eb:4b:a2:5c:92:17:84:ff:
         e2:97:84:d1:53:73:96:48:3f:db:cd:be:d1:02:6e:98:cd:f4:
         68:b6:d9:6f:aa:2c:78:ba:0f:a5:5a:e1:52:bd:2b:b5:b2:36:
         d9:50:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----