Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
File:                     7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer (raw, json)
Hash identifier:          6c/DRplK/m9M8aSCiLlYdw0qgiJCpyDkB6mQHHluS0Q=
Subject key identifier:   C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842E27F43F926A32A6884B90DC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 14 Aug 2023 18:34:22 +0000
Certificate not after:    Sun 16 Nov 2025 19:34:22 +0000
Subordinate resources:    AS: 16436
                          IP: 66.187.12.0/23
                          IP: 207.174.100.0/22
                          IP: 2605:abc0::/32
                          IP: 2606:e6c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e2:7f:43:f9:26:a3:2a:68:84:b9:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 14 18:34:22 2023 GMT
            Not After : Nov 16 19:34:22 2025 GMT
        Subject: CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:cf:c5:67:9c:62:c5:25:4b:38:c8:f3:bf:
                    9d:df:4e:ff:47:04:c8:f8:58:26:fd:81:30:1c:16:
                    51:d9:fd:64:fc:02:97:0e:cc:28:ff:8a:bc:e4:6e:
                    56:7d:6b:85:8b:e2:a0:53:c4:83:50:5f:4c:db:9b:
                    bb:5d:ee:f7:04:6f:65:37:64:17:79:ce:51:ce:f9:
                    47:98:c0:4e:1e:e3:18:3b:59:73:ae:08:08:dc:27:
                    ea:6f:59:aa:5f:a8:c9:9f:b1:4d:d8:f9:7c:32:bd:
                    51:c0:5a:0b:ab:38:ba:3c:b8:3c:95:e9:50:ea:91:
                    be:f4:f5:eb:e2:bc:8f:59:a9:15:6b:dc:ba:eb:3f:
                    bb:49:a7:37:de:e9:cd:be:a6:26:28:09:bc:ac:46:
                    a1:6a:9c:df:ba:22:8d:f6:2b:fb:22:f5:24:2f:95:
                    a6:c7:b9:52:3e:e3:2f:14:c5:b7:ca:5e:37:d0:0b:
                    05:c4:0c:85:cf:93:8f:2d:c1:c7:17:30:a9:04:55:
                    2d:01:0d:d7:3c:a6:96:03:cf:73:3f:f2:77:36:3f:
                    4d:76:08:07:82:ae:e5:9f:13:7e:3c:38:a1:0d:18:
                    3b:d3:ee:04:93:96:30:f6:0e:0c:1a:07:f5:0f:ca:
                    8b:68:7b:c1:3a:bb:e1:74:30:44:2f:93:66:75:db:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.12.0/23
                  207.174.100.0/22
                IPv6:
                  2605:abc0::/32
                  2606:e6c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16436

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:9f:10:a1:eb:a9:5c:33:d2:6a:c2:3c:92:7c:96:2e:ec:64:
         08:1c:ed:88:c9:a9:6e:24:17:e6:45:57:cb:1f:2a:85:cb:22:
         8c:3d:00:8d:cd:f6:94:f2:db:5e:4d:30:6b:07:34:93:67:a6:
         4b:01:84:cd:65:16:f4:70:2e:d2:a2:5a:f4:f8:e9:45:d1:e8:
         6b:4b:8f:77:a2:ae:86:a2:51:79:a6:f3:64:6e:40:7e:72:13:
         f0:05:cb:74:94:52:5b:fa:75:2b:69:bf:c7:a7:57:1d:10:d9:
         97:12:22:c5:f9:28:0e:a5:d3:6d:51:e6:c6:dd:99:b2:96:d0:
         9a:48:48:d9:a0:ef:45:49:dc:b9:d5:05:53:40:a2:97:3d:68:
         f2:fe:5f:6e:f8:f2:cd:47:61:ee:13:df:9a:a9:cd:2b:ec:75:
         26:d1:f6:d7:33:ba:c6:60:bd:61:40:3c:c3:dd:ad:c3:31:16:
         5d:41:ee:47:73:b5:25:08:2a:42:3a:c8:e4:9c:cc:2e:c4:12:
         f5:8e:1b:c5:44:58:16:a3:21:e2:d4:84:d1:ca:68:da:0c:e6:
         07:41:7b:ee:d2:31:46:b8:bc:c7:14:cb:31:6b:45:bd:95:3e:
         d8:c4:03:05:36:9c:60:95:9b:7d:0b:9e:88:d8:23:4a:10:53:
         f4:e9:5f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----