Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer
File:                     afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer (raw, json)
Hash identifier:          TndV9rB8FfV1+9NyMTxhTyXJpeCLtZG7lqZRkMbq20k=
Subject key identifier:   DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842F1885C594CC43BD0E63D3980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 20 Aug 2023 03:49:49 +0000
Certificate not after:    Sat 22 Nov 2025 04:49:49 +0000
Subordinate resources:    AS: 32526
                          IP: 23.160.168.0/24
                          IP: 2602:fa48::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f1:88:5c:59:4c:c4:3b:d0:e6:3d:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 20 03:49:49 2023 GMT
            Not After : Nov 22 04:49:49 2025 GMT
        Subject: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:f6:96:8d:7b:5b:88:88:48:90:49:91:29:
                    8f:7f:cc:b6:08:5e:ae:fe:8d:3a:f1:18:1b:c8:02:
                    49:e2:f4:dc:9b:40:cd:75:99:72:0b:9e:1d:14:ac:
                    43:05:4c:65:51:9e:40:75:1d:52:1a:26:de:39:39:
                    c8:c1:13:67:28:04:72:6a:91:40:5a:69:c5:5f:da:
                    af:94:bf:27:95:84:8b:b8:95:1a:89:75:95:98:a1:
                    55:69:90:08:fd:a8:c4:fb:d7:5f:ad:30:77:c6:82:
                    1b:f2:ee:d4:b7:1c:f7:53:3c:37:66:cd:ad:fe:c5:
                    b2:5d:69:80:f8:a6:6e:b8:57:4b:f8:13:46:8d:3f:
                    77:44:58:2a:50:17:db:c7:3a:80:84:03:34:d2:3e:
                    9d:38:bf:51:71:3e:d8:98:d4:52:e1:95:8e:db:78:
                    cc:85:7c:26:2d:5f:23:db:57:cb:7a:33:cb:70:0f:
                    3c:4e:e8:cd:1f:f1:26:59:5e:87:e8:32:2f:76:c7:
                    54:25:77:b2:47:a0:c7:de:07:e4:6d:d5:9c:c5:d2:
                    51:20:11:1f:df:79:eb:48:a2:6a:63:e0:ab:ed:cd:
                    a1:1d:1f:fd:78:d6:a1:c7:02:28:e8:27:22:24:18:
                    99:fb:d1:ba:d8:b3:42:79:81:4b:61:4d:e4:62:d6:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.168.0/24
                IPv6:
                  2602:fa48::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32526

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:39:54:8a:d6:83:5c:5c:29:af:91:fa:59:47:a8:d1:e8:
         83:38:c0:51:9c:4a:b1:e9:99:cf:b5:9a:d0:5b:95:c1:a8:dc:
         89:93:28:95:7b:f8:3e:4b:f2:b0:a9:f5:d4:63:6a:f1:5b:ed:
         93:6e:43:f0:8e:55:36:9f:fe:7f:1a:9a:7a:e3:c0:79:2e:26:
         36:2d:84:75:53:59:d7:3c:29:93:45:9a:fa:bc:e3:06:f3:39:
         d3:18:a2:2c:42:c7:63:8c:1c:56:2d:0a:d0:e5:23:9b:f1:b0:
         4f:93:97:be:5a:f2:e4:b7:1d:3a:05:70:d3:0e:25:18:31:e5:
         10:72:ba:99:64:75:b8:c2:34:42:ac:5e:43:ed:c1:f5:75:e6:
         4b:28:8f:21:fc:5d:99:07:ab:f9:ee:8d:c1:37:98:78:03:ea:
         29:31:26:00:18:4c:c5:85:83:13:07:50:72:dc:6d:5e:e2:da:
         5e:36:58:43:d9:ee:a5:0c:2a:9d:55:46:33:f2:9d:1e:27:0b:
         8e:ff:4c:a0:2d:9b:ec:4f:01:c8:5f:eb:ac:0c:59:3a:a1:c0:
         6b:86:22:d7:83:34:ec:2a:f5:50:f0:88:5c:01:48:21:f3:1b:
         05:e4:5e:bd:3c:9e:60:f8:be:19:10:da:14:77:75:2c:b3:5a:
         84:64:f7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----