Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a.cer
File:                     adc13d52-89e4-4093-b3d1-37a98702dc7a.cer (raw, json)
Hash identifier:          t/Z12REuC3rYVnkla37aySTDZ0HuzFwY0ruxeKc0910=
Subject key identifier:   65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858432833B9D2F796BBE456536440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 08 Sep 2023 17:48:45 +0000
Certificate not after:    Thu 11 Dec 2025 18:48:45 +0000
Subordinate resources:    IP: 159.208.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:28:33:b9:d2:f7:96:bb:e4:56:53:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep  8 17:48:45 2023 GMT
            Not After : Dec 11 18:48:45 2025 GMT
        Subject: CN=adc13d52-89e4-4093-b3d1-37a98702dc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:67:13:6d:cd:31:56:4d:6d:ce:4e:98:2d:
                    13:51:11:fe:e2:99:ba:05:03:cf:2f:e3:63:15:63:
                    5c:3d:5b:fe:94:ad:b2:67:c8:16:f0:68:cc:f4:7c:
                    c6:f1:2e:38:71:21:b8:a5:76:28:2d:4f:fc:50:e0:
                    d8:d7:82:8f:51:a7:d5:81:65:34:99:bd:95:52:c0:
                    49:24:ed:43:96:9e:78:77:bc:47:6c:ab:99:0c:35:
                    ff:1d:25:b1:0e:fa:14:8a:e4:8f:78:84:38:60:b7:
                    25:2c:b6:fa:7d:13:b1:9d:16:c1:94:46:10:54:91:
                    b7:47:36:8f:25:77:71:c6:9e:be:0d:7d:74:bb:36:
                    fd:fe:cf:c1:09:1a:52:82:d2:2f:5a:7b:d3:76:63:
                    bb:ea:d1:9d:b1:28:90:0e:c5:f6:88:e9:a8:68:13:
                    04:dc:e0:33:14:e8:2c:77:d2:78:7d:71:36:26:80:
                    f2:0c:20:69:c7:e9:7a:20:8f:2c:58:f6:e7:8d:7c:
                    10:3e:d6:88:a9:42:24:d9:85:0c:88:ad:7f:7f:d5:
                    10:1c:16:a1:60:17:cc:f9:74:6a:b9:8c:59:f0:9f:
                    bd:bc:67:81:64:29:c0:a4:4c:7e:88:bd:cf:94:4e:
                    0a:b5:ee:a1:91:72:ec:f8:98:30:24:f4:e7:3e:5c:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A4:02:C6:82:78:C9:9B:E8:22:C7:D4:41:68:56:4D:11:BB:AE:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/adc13d52-89e4-4093-b3d1-37a98702dc7a/adc13d52-89e4-4093-b3d1-37a98702dc7a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.208.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:31:94:20:a6:34:23:a7:83:cc:c9:9d:8b:7a:9f:0f:7f:b3:
         0c:c2:82:89:11:c3:da:0e:94:77:f6:1b:6b:a2:71:56:8d:34:
         96:24:2b:12:3e:a1:d7:d9:9c:62:32:78:97:5b:9b:ad:1d:e7:
         aa:71:3a:92:22:54:82:b0:aa:a9:b3:89:54:88:81:32:03:95:
         77:bc:4d:1c:10:a9:8f:d1:59:23:9d:56:52:89:a3:b3:95:c5:
         a1:ad:10:82:b9:bd:84:99:fa:48:81:c0:e8:98:41:ec:34:6e:
         d1:62:99:a3:5b:b1:ee:89:c8:48:bb:07:fe:b3:3a:4e:93:79:
         bc:b8:56:cc:ec:22:8e:1c:ac:0b:ac:e3:05:8a:45:38:b8:20:
         47:df:10:5c:fc:63:b0:01:05:6b:4b:c5:a5:d6:9b:67:f5:19:
         7a:95:3f:f4:3f:ad:9c:d3:31:00:cf:90:94:ef:8c:0c:13:a4:
         11:95:06:3e:ee:fa:ae:86:d8:fa:e7:7f:57:19:96:ea:10:c2:
         3e:b2:e4:4d:d6:5b:97:11:91:d1:3b:cc:e7:f2:ee:7c:b3:60:
         82:d8:5d:a4:4c:27:e3:72:74:97:be:15:2f:da:61:89:41:f5:
         7a:e0:88:c7:85:f2:c6:85:92:60:02:d7:99:21:4b:78:c0:94:
         5d:5b:46:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----