Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
File:                     9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer (raw, json)
Hash identifier:          hbxYwzHwwe1tREIcYiPjxW16CmQGoKGFH3ntjSMGIeM=
Subject key identifier:   ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858428F01BF6825122A17F38DF420
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 15 Jul 2023 20:49:23 +0000
Certificate not after:    Fri 17 Oct 2025 20:49:23 +0000
Subordinate resources:    AS: 25828
                          AS: 54885
                          AS: 394217
                          IP: 192.102.16.0/24
                          IP: 192.207.45.0/24
                          IP: 2620:63:8000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8f:01:bf:68:25:12:2a:17:f3:8d:f4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 15 20:49:23 2023 GMT
            Not After : Oct 17 20:49:23 2025 GMT
        Subject: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:c1:f5:31:a7:e9:63:25:61:b9:c6:b1:f3:
                    19:5d:f5:1a:22:3e:94:c5:94:ef:e8:05:40:c4:1e:
                    a0:4b:96:6b:80:d2:87:de:cb:21:b6:0e:05:e9:9c:
                    49:96:61:a4:a6:16:5b:54:0e:21:e4:95:fb:5e:1b:
                    c1:3a:d3:4a:29:fa:e2:38:c6:53:61:df:16:7c:dd:
                    6e:1a:8f:96:05:8a:ac:fd:0b:16:40:6f:de:ca:90:
                    36:89:83:aa:a2:95:ed:87:e4:5a:fd:4e:a7:4d:fe:
                    bc:bf:5c:5c:ac:61:07:4a:6f:3a:06:52:59:fd:29:
                    e1:ff:4c:8b:df:38:63:b9:ac:0d:a1:46:df:3f:56:
                    f6:6a:d3:5b:3c:70:e2:63:6e:4d:d3:56:ca:5c:e7:
                    23:36:55:5f:9d:3e:30:9c:4f:2d:08:8b:da:fc:67:
                    bb:9e:e6:2d:81:51:7e:2e:fe:d3:fe:44:74:55:a3:
                    6d:9c:2c:4e:57:20:b0:c1:a4:5b:61:6a:0b:2f:63:
                    55:b1:27:25:27:81:00:6e:f4:17:c3:76:44:d2:b3:
                    e2:8d:41:bb:11:d7:20:98:37:38:f8:a0:78:5c:b3:
                    ae:7b:4c:9d:3f:f9:f5:b5:6c:dd:f4:17:8d:fd:a4:
                    fe:18:69:55:f4:51:e0:59:c9:b1:24:41:bd:59:34:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.16.0/24
                  192.207.45.0/24
                IPv6:
                  2620:63:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25828
                  54885
                  394217

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:86:76:d4:8c:d5:10:1c:f1:a8:c1:89:16:cb:a0:a0:e8:27:
         51:c9:2b:21:21:a8:48:24:7f:a4:e4:1e:a9:ad:e8:d1:f0:1a:
         44:1e:9c:22:b7:fc:3a:f3:aa:a3:d4:71:d2:4f:77:80:fd:a7:
         d7:a5:98:23:6a:bc:bd:55:f6:05:e4:0e:74:04:2f:a0:9d:9f:
         51:ea:62:0c:2d:7b:04:1e:89:55:d3:65:f4:63:ee:13:5a:ce:
         e7:f5:90:50:7b:85:12:6b:d5:31:e5:2b:37:0c:46:73:9d:5b:
         66:47:ef:66:10:1d:13:b5:7b:93:27:0b:02:29:18:bf:db:c6:
         f0:aa:a7:06:e6:ab:95:62:de:da:0d:be:44:fb:14:00:c6:0b:
         1d:3c:05:45:46:20:62:db:67:cf:9a:79:7e:d6:22:8b:f5:ae:
         04:bb:9d:f4:f9:10:3c:1f:da:7d:fc:83:b0:b5:f6:8b:1c:a7:
         03:8f:37:95:88:d6:d1:7f:4c:7b:02:a7:6b:e1:1f:68:e1:c3:
         f7:41:a4:4e:ec:5b:5d:b3:9f:04:64:2d:96:01:2a:0f:a3:23:
         13:9b:b7:20:cd:b1:1d:cd:ba:9f:4b:2b:cf:f1:cd:ff:87:e7:
         df:ad:ee:b6:37:99:18:09:d5:42:6a:58:5a:90:69:68:8e:53:
         47:2f:91:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----