Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer
File:                     950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer (raw, json)
Hash identifier:          XvwO4K+DhgLDqv/Ka3pcGarpVwqcLw1sy7sEsZkAyb8=
Subject key identifier:   E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858433673AA81F79204907F9DFF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Sep 2023 20:18:54 +0000
Certificate not after:    Tue 16 Dec 2025 21:18:54 +0000
Subordinate resources:    AS: 400512
                          IP: 23.133.200.0/24
                          IP: 2602:fba6::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:36:73:aa:81:f7:92:04:90:7f:9d:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 13 20:18:54 2023 GMT
            Not After : Dec 16 21:18:54 2025 GMT
        Subject: CN=950eb4ff-cb65-4e8f-90a9-11392dacfad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:35:14:87:c7:31:a2:88:47:58:63:5e:55:
                    45:11:49:e9:62:30:a3:47:a3:ab:2b:94:58:74:ad:
                    be:8b:69:22:42:4f:c8:78:fa:ea:e2:aa:fa:46:70:
                    39:20:61:94:63:bf:2c:a7:1a:e2:ca:53:5b:27:ad:
                    55:e1:6e:b2:c1:e0:fa:2a:34:df:13:e0:9a:a2:84:
                    59:cd:d1:f5:d7:c9:3d:71:9b:c9:da:2e:2a:3b:e0:
                    89:7c:38:28:d0:3c:91:4c:c9:34:08:94:4e:3e:56:
                    68:a2:66:e3:e2:e2:56:48:9e:15:f8:c2:69:dd:25:
                    8a:fb:4a:b1:54:d1:97:7a:6c:1e:ce:b0:ad:90:9e:
                    23:02:ad:a8:3b:fc:9e:90:68:cd:7f:28:b1:6c:63:
                    c8:95:3d:8d:22:52:6c:df:f4:5e:e9:4e:4d:e1:80:
                    62:a1:22:39:bf:5e:df:fc:15:55:fb:47:50:27:3a:
                    58:59:36:d2:37:bd:1e:f8:7e:d0:86:f6:3b:9b:c4:
                    e0:0b:a0:45:64:85:a3:6b:df:bf:bb:55:fa:8e:ab:
                    a7:32:78:33:68:c3:df:db:9f:be:0f:1f:80:ce:ad:
                    3a:d2:04:8d:1a:9c:d9:3e:c2:0b:ce:bd:bf:83:ee:
                    96:a1:69:69:ef:b4:c5:81:bf:b8:a1:d1:86:03:bf:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.200.0/24
                IPv6:
                  2602:fba6::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400512

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:20:7b:48:7a:b9:61:54:a4:3a:27:a5:c8:1d:92:42:23:
         7b:20:5d:04:aa:c5:d0:f9:44:ac:15:87:ea:a5:08:80:e5:8d:
         22:b9:6a:2c:37:c7:44:ce:98:c5:13:63:73:5d:1d:f7:4e:99:
         39:28:ce:c9:3d:51:24:f7:f1:ad:ba:6a:e9:ca:0a:70:07:c2:
         0b:13:e4:b5:73:a2:33:c6:3d:db:6d:56:ab:08:da:1c:46:7b:
         f9:f8:af:83:5f:09:50:7d:02:dc:c6:6f:83:43:2c:27:1e:7e:
         d2:e5:20:cd:1d:71:14:a5:9a:90:e9:ae:ee:bf:2a:74:73:cc:
         2c:74:48:1e:89:f5:65:d3:61:cd:b4:d1:bf:86:e6:61:03:96:
         8a:8c:6c:4b:97:ca:e7:d9:e6:0d:53:94:ad:58:96:99:dd:ff:
         f7:dd:07:5c:7e:f0:fb:c8:ae:a0:af:f5:97:f4:2c:d5:af:1b:
         6e:11:d3:75:e1:db:32:16:02:45:a1:c5:65:fb:fa:49:5b:d1:
         e0:8d:59:b4:cf:4b:40:73:f5:54:d6:a3:3b:75:14:d7:3e:48:
         dc:80:1d:6b:42:03:db:b6:c0:cf:75:dc:54:82:52:ec:76:9d:
         ed:52:63:51:ff:7b:07:c8:20:af:3c:cf:1b:03:d6:3c:23:c4:
         21:6f:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----