Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer
File:                     7e81ed8c-9250-496b-9fc6-10701b967c5b.cer (raw, json)
Hash identifier:          X4s2vr7A4p5l+R5g5NVyTm9arfJbEv2jd49A21VcJkk=
Subject key identifier:   26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285845FAD076CF5F07E2EE9E5EAF76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 24 May 2024 13:58:11 +0000
Certificate not after:    Thu 27 Aug 2026 13:58:11 +0000
Subordinate resources:    AS: 20220
                          IP: 23.176.144.0/24
                          IP: 97.64.77.0/24
                          IP: 158.51.116.0/22
                          IP: 2602:fc9d::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fa:d0:76:cf:5f:07:e2:ee:9e:5e:af:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: May 24 13:58:11 2024 GMT
            Not After : Aug 27 13:58:11 2026 GMT
        Subject: CN=7e81ed8c-9250-496b-9fc6-10701b967c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c7:54:ea:88:11:b7:62:19:bb:7a:f5:fb:7b:
                    a7:fa:51:aa:7c:ac:29:2d:3f:79:20:0a:f3:46:44:
                    33:f0:00:1f:85:6f:25:05:dd:c0:16:64:62:50:29:
                    04:17:99:bc:28:87:25:84:c9:93:86:b6:01:0f:90:
                    54:f0:49:dd:15:4c:a8:3e:84:69:3f:2b:f0:bd:9b:
                    21:5e:4d:7c:66:25:fe:1a:24:1b:68:34:40:9e:39:
                    b4:ae:1a:30:b7:98:49:f1:d9:aa:b2:55:c5:8b:0d:
                    af:62:65:b8:60:79:b9:29:45:be:ae:d7:61:b2:c8:
                    70:17:a7:30:d8:a5:a8:46:6c:f4:7f:51:44:0d:68:
                    37:df:cf:f0:4a:bd:5e:35:c9:3d:4d:e6:f4:af:ea:
                    58:d4:1a:7b:de:37:47:9e:bd:c3:92:1c:6c:a2:0d:
                    16:c2:4e:16:40:81:ab:92:11:e6:4d:25:93:6a:a4:
                    6e:98:d0:36:c1:d7:ba:f6:eb:e1:8c:ee:09:b1:4d:
                    83:0f:46:c6:8f:9f:d3:5c:ba:57:07:45:f8:68:20:
                    69:a7:d1:bf:ee:d9:32:ff:47:41:a9:f4:5e:b4:13:
                    c7:a9:0a:e6:ba:56:b2:9c:c0:4f:21:56:55:e9:54:
                    30:f6:93:e6:6f:08:84:28:84:82:91:ae:18:a2:f0:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.144.0/24
                  97.64.77.0/24
                  158.51.116.0/22
                IPv6:
                  2602:fc9d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20220

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7c:d2:61:c0:6a:76:48:fd:11:c7:06:b3:e5:64:4f:6d:08:
         48:09:eb:69:05:7d:e4:85:e5:82:f5:e1:dc:81:5b:4f:8c:a6:
         49:59:ed:0b:6f:ae:3f:80:f4:e9:e2:cb:b3:fa:30:f4:5b:dc:
         a0:8a:0d:f6:28:67:dd:e6:d7:e4:42:38:21:07:77:dc:73:9a:
         75:3b:a4:7b:96:fa:9b:d5:0b:d1:be:7c:e2:a0:e8:fc:07:c1:
         9f:66:6c:d2:fa:78:39:1b:86:07:65:34:fd:50:e9:62:d7:9d:
         0c:d5:7b:39:dc:e2:72:80:04:5f:46:03:75:38:7d:d1:16:30:
         28:ac:bd:57:45:87:64:83:f1:5b:2b:94:6d:d2:29:fb:e6:e9:
         29:d4:10:20:79:17:06:42:e9:c7:81:48:f8:ad:64:46:1f:cc:
         56:89:7c:45:13:c2:71:e1:cc:bc:4d:65:4c:52:62:4f:eb:e0:
         56:c5:71:3c:6e:4b:53:fb:ae:ac:d7:40:2b:9f:68:54:b0:1d:
         45:50:5e:02:38:38:49:b4:27:d7:3f:c3:ea:1b:ea:f7:b1:43:
         b9:1c:46:1d:32:13:62:74:5b:c4:a7:c4:87:d5:e8:ad:c9:43:
         ef:bf:d8:04:24:41:68:f4:e0:f4:55:6f:e3:58:dc:79:1a:9d:
         a5:e9:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----