Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer
File:                     78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer (raw, json)
Hash identifier:          Ni3ZN/aRlGN6de9SiBJLVmebmjgxyaqmfvIEgS4ACTg=
Subject key identifier:   37:A8:04:0E:9F:D2:37:72:00:94:6E:60:47:99:1C:96:40:CC:49:9F
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584338F6ECA20CB1D96672082300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Sep 2023 17:54:59 +0000
Certificate not after:    Wed 17 Dec 2025 18:54:59 +0000
Subordinate resources:    AS: 398894
                          IP: 209.142.115.0/24
                          IP: 2620:98:2000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:38:f6:ec:a2:0c:b1:d9:66:72:08:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 14 17:54:59 2023 GMT
            Not After : Dec 17 18:54:59 2025 GMT
        Subject: CN=78a2f9a6-28a7-4fb5-ba32-6f4af07c0026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:3a:e8:3f:dd:7a:f9:ea:e3:2f:31:5d:02:
                    ac:9b:60:3e:38:25:99:d5:a6:b6:f5:ba:cd:90:5b:
                    14:39:62:92:e0:ed:5f:e7:97:db:4e:0e:17:42:08:
                    32:b7:c1:5a:2c:e3:c5:ee:8c:88:5c:fc:41:e9:96:
                    23:ec:5d:2b:63:33:36:57:13:d5:38:b1:ec:92:b5:
                    5e:3d:bd:bc:fa:97:0b:0d:17:a4:c8:80:eb:60:03:
                    1d:bd:a1:f1:ae:b1:4c:8a:9d:58:da:bb:c8:32:5b:
                    16:55:04:0e:ef:84:df:3c:b3:25:ca:d6:3e:a8:f3:
                    bd:a1:2b:16:d1:be:55:38:da:2c:c8:f2:bd:a6:06:
                    5a:1d:9d:8b:d1:0c:b9:00:76:4c:19:65:cd:19:71:
                    65:e4:02:71:fb:1f:98:6f:5d:06:f0:da:ef:d0:22:
                    80:86:86:15:e0:c9:dd:d5:2d:a3:d2:95:9c:bb:f8:
                    b3:86:7f:c5:cd:7d:b1:e1:74:52:54:74:6e:a3:51:
                    73:17:ce:ae:97:b9:b0:6d:ac:a8:c5:ca:2d:08:3b:
                    6a:eb:6d:be:2b:c4:c4:d5:1f:a9:b2:ae:aa:9b:10:
                    51:0c:9d:ed:f4:5c:55:f2:ec:34:29:39:91:a6:e9:
                    6c:74:24:fb:df:17:a2:9a:cf:84:d8:b2:44:b8:bf:
                    b5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A8:04:0E:9F:D2:37:72:00:94:6E:60:47:99:1C:96:40:CC:49:9F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.115.0/24
                IPv6:
                  2620:98:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398894

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:03:c9:26:77:70:8a:c3:43:7a:6c:4a:06:b6:9f:5b:97:10:
         47:fe:ec:37:6c:5a:c7:73:24:5b:ed:f3:54:69:60:71:8f:21:
         b3:81:2b:cb:9f:85:cd:23:ab:74:da:51:e6:47:53:10:01:e7:
         e2:08:70:0d:14:2b:99:36:53:07:39:72:7c:41:37:25:18:5b:
         95:e5:cf:57:d8:63:d7:e3:be:a0:54:98:40:56:9e:be:11:29:
         6d:4d:1c:91:76:40:92:e6:6f:c6:42:b2:0d:70:fd:6a:dc:de:
         72:c0:03:9f:25:a7:8a:58:b2:76:7b:3a:e3:7a:db:62:fe:02:
         2a:7b:20:90:39:1b:d4:a3:50:ba:fd:7b:1a:61:2a:a1:9d:46:
         1c:8f:18:ca:ab:4c:fa:c5:e7:75:8c:fc:cf:92:97:8b:2c:2f:
         60:06:c7:8c:0c:37:84:90:b7:36:df:3b:88:80:f5:c9:ca:0a:
         aa:68:93:e3:10:c2:7e:47:04:26:fc:02:b9:59:ee:71:88:f9:
         16:f5:a5:cd:53:06:62:97:8f:9e:bc:8a:d0:6f:a5:eb:8b:37:
         a9:c3:a1:38:71:67:e4:4d:73:a1:a2:b2:f8:03:3f:1f:86:e8:
         4c:20:4a:94:15:55:2f:f3:85:e9:8d:b1:93:00:b1:27:3f:9b:
         50:a1:bf:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----