Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8230a7e7-95fe-4676-aaf3-5ede9bacff5e.cer
File:                     8230a7e7-95fe-4676-aaf3-5ede9bacff5e.cer (raw, json)
Hash identifier:          vG8UZzqZHD2nP6A/Fb3uWv9y2TOVsfdd1oxW85vn7mU=
Subject key identifier:   7D:BD:10:7D:93:B9:93:E7:DD:F6:23:99:06:94:7C:02:A5:C1:81:88
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842FA18916DD221679CFEC02C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8230a7e7-95fe-4676-aaf3-5ede9bacff5e/8230a7e7-95fe-4676-aaf3-5ede9bacff5e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8230a7e7-95fe-4676-aaf3-5ede9bacff5e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 23 Aug 2023 05:26:51 +0000
Certificate not after:    Tue 25 Nov 2025 06:26:51 +0000
Subordinate resources:    IP: 23.161.8.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fa:18:91:6d:d2:21:67:9c:fe:c0:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 23 05:26:51 2023 GMT
            Not After : Nov 25 06:26:51 2025 GMT
        Subject: CN=8230a7e7-95fe-4676-aaf3-5ede9bacff5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5e:55:79:6b:25:6b:2d:14:4e:05:f6:7a:f6:
                    1c:d6:96:9b:9f:83:c9:b1:34:04:ab:3f:91:02:29:
                    36:92:31:80:13:e6:ec:6f:f3:14:ad:1f:a2:02:d9:
                    9a:2f:a9:7c:23:50:c2:4e:de:0d:cc:c1:59:4d:12:
                    47:ed:51:b9:d0:16:f7:fb:ca:b9:b5:09:8d:fc:51:
                    c9:29:bd:28:53:bb:fc:49:72:47:52:74:f9:41:0e:
                    5f:db:5a:7b:20:b5:da:f9:1a:62:eb:c1:1c:73:2b:
                    a2:b7:85:63:cf:96:f4:30:73:d1:6e:09:16:f3:d9:
                    6d:08:a5:09:f2:e1:53:58:d0:a7:77:dc:f1:34:c8:
                    80:8b:06:a5:36:e7:a0:6f:a0:c7:9c:d8:25:c6:87:
                    cf:64:d9:0a:ec:42:ad:60:8b:22:73:ba:ca:22:24:
                    06:25:d7:f5:9a:ec:c8:5d:7d:68:b9:58:d8:c1:6f:
                    56:98:db:20:69:f2:26:a0:16:f8:bf:4b:c9:2d:9b:
                    c8:b0:95:80:81:27:be:1d:da:6d:c7:2b:b3:67:ac:
                    36:46:e6:4c:74:73:44:38:50:e2:49:32:9e:8c:b2:
                    02:6b:02:d6:9a:09:7d:e9:3c:92:b6:9f:92:2c:6a:
                    42:29:02:55:0f:a7:e6:8b:e6:d9:2b:84:dd:a2:34:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BD:10:7D:93:B9:93:E7:DD:F6:23:99:06:94:7C:02:A5:C1:81:88
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8230a7e7-95fe-4676-aaf3-5ede9bacff5e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8230a7e7-95fe-4676-aaf3-5ede9bacff5e/8230a7e7-95fe-4676-aaf3-5ede9bacff5e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:18:61:03:c3:c4:4d:c1:6c:53:33:b6:be:8b:be:bc:17:27:
         fb:62:45:5c:7a:4f:9a:0f:65:c5:59:77:70:f8:5e:14:68:62:
         74:68:60:49:46:14:00:42:1b:e2:85:3a:f3:69:a9:94:7e:d7:
         d7:b3:95:9e:45:dd:d6:84:ad:d3:60:fd:bc:b5:96:96:68:00:
         ab:ca:2a:d2:b4:fc:36:e3:8c:1f:da:ef:7d:a4:c5:60:9f:1f:
         28:4d:c7:2b:bf:e4:65:96:9b:50:59:72:ec:5a:2d:75:fc:cb:
         1b:07:7a:f4:b2:52:6a:6b:a3:a2:6e:b2:07:89:16:92:db:68:
         13:69:ab:88:19:e7:27:39:4a:8c:01:c2:92:42:03:99:06:b9:
         b6:0a:33:13:c2:02:4e:f0:12:7f:3d:2d:73:1d:62:91:c1:94:
         b7:a3:f5:07:cd:77:76:db:3e:47:1d:89:33:dc:48:af:5f:49:
         1d:c6:a9:1a:57:4a:03:4f:ca:f0:46:64:bf:a2:2b:b2:21:f1:
         2b:15:75:93:66:34:7c:f7:b2:7e:19:d4:4a:99:ad:b4:14:35:
         a4:27:24:94:e7:83:5f:41:78:2c:ca:3f:5d:0c:48:0e:dd:56:
         36:3f:88:66:2a:b7:dc:84:91:db:33:ed:68:01:6d:cd:56:ad:
         35:31:65:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----