Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e.cer
File:                     7de612cf-a880-4f90-bd0f-bf90530a8f4e.cer (raw, json)
Hash identifier:          4txPMZCkctXCLwBG4Ecq8oaYKPpl+2u86GzWHpz9SyU=
Subject key identifier:   3B:7B:1A:C4:65:16:4E:24:D1:94:87:5D:9D:9C:17:0F:E8:8A:B6:4C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858431AA41FCA00CF73C5AD5E7380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/7de612cf-a880-4f90-bd0f-bf90530a8f4e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 03 Sep 2023 21:13:54 +0000
Certificate not after:    Sat 06 Dec 2025 22:13:54 +0000
Subordinate resources:    IP: 23.158.200.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:1a:a4:1f:ca:00:cf:73:c5:ad:5e:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep  3 21:13:54 2023 GMT
            Not After : Dec  6 22:13:54 2025 GMT
        Subject: CN=7de612cf-a880-4f90-bd0f-bf90530a8f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:c5:44:22:be:14:ff:40:10:7a:e6:34:99:
                    53:8a:37:6d:47:8b:01:2d:62:68:1b:be:d8:03:f9:
                    a2:69:25:7c:dc:bc:b9:76:96:f8:7c:2c:01:d5:8a:
                    01:dc:3b:5a:44:88:58:3a:ed:ad:d7:4d:39:af:46:
                    6c:66:1f:e4:c6:8f:23:65:59:0b:5c:1b:9d:b6:a8:
                    15:6f:4b:2b:9e:00:52:b4:d1:f3:48:c4:af:c6:e0:
                    e3:25:2a:f5:84:ba:f8:2d:88:e1:e9:b9:53:05:f2:
                    1a:c1:2e:97:e7:41:14:45:18:04:65:0e:73:4e:ef:
                    3c:30:84:78:36:26:95:75:0c:15:09:8e:18:e6:11:
                    a4:0a:51:a5:37:63:6a:a8:75:d6:c0:cc:34:a4:d2:
                    88:47:ca:e5:c5:31:92:4d:4e:db:8b:6d:5c:2f:90:
                    72:3e:6e:21:48:e6:4c:1e:87:0d:c7:e5:cb:f1:4b:
                    f1:72:46:84:f3:b8:4c:1a:ea:eb:16:96:10:1a:dd:
                    d5:06:e8:65:99:2d:a7:d4:74:98:b1:d3:1c:09:c3:
                    12:99:06:59:a0:88:e6:07:f3:fa:aa:9c:e2:30:bf:
                    10:a3:33:9b:ee:91:fa:5f:62:a6:78:f3:85:93:6b:
                    fd:3d:ab:b7:eb:5f:88:93:5b:e9:70:16:ca:31:48:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:1A:C4:65:16:4E:24:D1:94:87:5D:9D:9C:17:0F:E8:8A:B6:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/7de612cf-a880-4f90-bd0f-bf90530a8f4e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:83:28:5e:48:c1:68:f6:87:90:ad:f8:87:7a:44:53:ed:
         89:42:8d:27:d4:d6:c9:14:db:9a:4e:51:f4:31:5c:97:14:b2:
         4f:8e:99:ef:ce:fe:d2:01:39:6d:d1:d8:53:76:66:5f:25:d6:
         ad:92:af:e9:74:eb:fc:0c:9a:9f:9f:68:b0:b0:87:e8:1d:18:
         23:82:15:65:9e:ac:b6:94:46:f7:73:ba:68:df:fa:c0:fa:92:
         a0:6d:42:b7:70:e7:77:c1:5b:79:65:78:91:34:e3:fe:6e:25:
         17:0f:aa:fc:00:86:4e:4e:60:6c:c9:ad:ab:a0:1b:29:11:53:
         9a:ad:94:a3:71:68:dc:8b:75:d1:c2:bd:e1:c2:65:11:27:6c:
         75:0a:e8:87:09:d2:24:7f:36:4f:ae:ab:87:c1:ce:b1:40:0e:
         af:9d:bb:3c:b3:c8:d5:04:2c:0f:57:ef:2e:e3:60:2c:bf:96:
         ef:bd:1f:ea:ee:7f:b7:9e:73:c2:9b:37:64:13:db:1c:bc:4e:
         1c:b0:35:7c:c2:67:6f:73:45:00:25:f0:3e:db:81:8c:ba:61:
         09:f8:71:8e:bc:4c:25:39:81:0d:d4:1f:78:c6:18:27:8c:f4:
         01:a4:48:7e:75:2c:d2:42:95:74:bf:32:05:fb:07:0b:68:44:
         79:d1:0a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----