Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959.cer
File:                     94f832e1-6acf-4c03-921c-64ee0a78e959.cer (raw, json)
Hash identifier:          1+WQt1VF45uRRXAzrKBTW935aq6111v+Mva5njz0a70=
Subject key identifier:   5B:20:1E:F6:AA:8B:11:93:8B:75:FD:E3:82:A2:DE:E8:F0:B4:D2:41
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842F2D7BC7A906707B724C4C400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959/94f832e1-6acf-4c03-921c-64ee0a78e959.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 20 Aug 2023 15:05:34 +0000
Certificate not after:    Sat 22 Nov 2025 16:05:34 +0000
Subordinate resources:    AS: 63063
                          IP: 198.134.6.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f2:d7:bc:7a:90:67:07:b7:24:c4:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 20 15:05:34 2023 GMT
            Not After : Nov 22 16:05:34 2025 GMT
        Subject: CN=94f832e1-6acf-4c03-921c-64ee0a78e959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:a7:36:0d:8a:c6:e0:ba:3b:7d:1d:10:b2:
                    2d:82:99:b2:cf:e2:d1:2e:6b:36:0c:3c:12:29:7f:
                    56:c5:72:94:88:25:e2:8f:46:94:0e:28:52:50:3e:
                    c8:14:e9:5e:a7:af:9f:d6:2d:9c:cf:c2:4c:05:38:
                    2e:ae:5e:ee:41:b8:01:a0:54:04:c3:e5:f8:62:13:
                    e0:ba:5e:c3:27:c5:42:55:a2:52:e4:25:c0:63:94:
                    2b:7b:ea:cf:9c:f8:94:22:2c:8a:8b:14:1c:c5:a2:
                    3f:5c:bf:23:66:c3:d0:a5:00:ef:27:af:50:53:57:
                    c5:f1:c5:0f:62:16:af:2d:11:19:6f:ea:fa:1f:21:
                    ee:f8:7b:4b:26:3a:92:7e:48:a9:98:51:c7:59:6b:
                    4f:f3:c1:20:5a:82:19:65:ae:6e:00:c7:9f:32:1d:
                    fd:69:a0:c3:97:03:f3:79:b7:48:c6:f1:90:13:ee:
                    31:8c:c1:08:01:69:5b:70:2f:1e:2f:07:e9:c4:95:
                    ee:6c:f0:99:50:83:17:fe:5f:df:b1:42:1c:63:f6:
                    3d:6e:2a:54:66:58:1c:e9:8f:33:ab:08:9f:b5:bd:
                    65:f2:f7:85:6c:40:75:bf:d7:6f:96:f6:e1:3b:fa:
                    46:0f:dc:cb:1b:01:a7:25:9e:d4:70:5b:0d:89:72:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:20:1E:F6:AA:8B:11:93:8B:75:FD:E3:82:A2:DE:E8:F0:B4:D2:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/94f832e1-6acf-4c03-921c-64ee0a78e959/94f832e1-6acf-4c03-921c-64ee0a78e959.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.134.6.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63063

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:cb:1d:07:75:d5:7c:d5:e3:e5:b9:a0:7e:00:06:ff:3a:76:
         8b:14:27:ca:05:60:9d:46:ca:d4:51:10:04:26:fc:b0:e5:59:
         6c:b5:73:53:75:e8:c7:d6:1f:b1:52:c5:e9:f5:e3:36:c8:63:
         a2:2b:a4:82:26:c9:aa:0e:61:ff:0e:3e:70:bf:0d:86:dd:5b:
         ce:db:0d:ca:fe:df:45:be:fd:c7:a7:65:b6:df:52:eb:fc:b8:
         37:dc:51:ad:43:d4:1b:53:d3:d4:96:3d:24:ba:5e:a3:2e:b2:
         6f:c6:23:5b:e0:a3:07:d3:5c:de:cf:d6:c3:3a:bb:48:2e:bc:
         52:a4:a0:b3:02:1c:69:22:c0:bc:86:3c:d6:c4:67:b0:e2:24:
         18:53:03:2d:57:a8:be:ee:e1:2d:da:0b:d7:2e:d9:e6:58:20:
         b4:28:81:9c:10:90:15:e0:14:db:8b:f1:a0:05:71:6b:76:3d:
         9e:e5:f1:ac:c3:45:3f:9b:c3:b8:f3:a9:14:ef:15:c6:da:0b:
         99:a5:6e:59:ab:91:ce:37:2e:e9:0d:cf:75:3c:8a:4d:a6:03:
         ab:e0:d2:da:3c:c9:e2:26:2f:6e:cd:7d:23:d3:08:51:a1:a8:
         b4:6d:23:19:e0:1b:77:e8:32:08:2d:62:a9:2e:08:87:a6:87:
         d6:aa:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----