Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
File:                     b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer (raw, json)
Hash identifier:          7bqFZZroWor++8ZvL54w4S8kIItJ6zlxV5IAIPdkA04=
Subject key identifier:   1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858424B358413517546149FB8F780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Jun 2023 13:58:43 +0000
Certificate not after:    Tue 23 Sep 2025 13:58:43 +0000
Subordinate resources:    AS: 11248
                          IP: 204.8.24.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4b:35:84:13:51:75:46:14:9f:b8:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 21 13:58:43 2023 GMT
            Not After : Sep 23 13:58:43 2025 GMT
        Subject: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b5:54:4f:8d:30:aa:fc:2d:58:36:11:16:dc:
                    46:3f:8a:b5:83:8b:14:26:79:9e:af:72:23:1c:e8:
                    22:27:82:eb:b0:55:8d:72:4e:a4:f8:18:06:84:4a:
                    b2:a7:07:93:62:d1:c0:43:f5:8d:31:18:ff:69:a1:
                    d9:a2:c3:ca:cc:6a:4b:a9:84:4e:7f:c4:b3:91:5f:
                    e2:e1:14:81:f3:72:ab:3a:5c:30:d2:19:28:03:1b:
                    d2:d3:78:d2:ca:62:42:2a:e7:b0:91:d9:5e:88:cb:
                    bb:76:a2:f2:fb:1a:8b:91:40:10:3c:94:ba:90:49:
                    65:07:df:94:c8:f2:02:4d:32:97:04:f8:19:b3:f5:
                    f8:00:1a:7a:ff:88:58:03:d3:5f:c0:d8:34:d3:7b:
                    98:16:1b:db:b3:2c:2e:24:5d:7d:16:10:7e:f7:bd:
                    45:2c:40:2e:2b:1f:05:da:82:58:a2:1e:fd:8c:a0:
                    b9:bc:37:b1:35:4d:4d:a0:70:28:c6:1f:38:a3:60:
                    84:bc:8f:c1:68:5a:b0:fc:c3:64:0c:6e:c3:5a:c2:
                    75:a7:76:28:b9:e7:7e:cb:d3:39:ee:37:65:3b:39:
                    b8:8f:98:02:a7:51:d6:67:72:bb:35:30:54:c9:de:
                    f3:07:44:78:7e:03:2a:df:eb:e9:f3:0a:94:b8:e0:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.24.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11248

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:b2:65:0e:8e:d1:06:22:67:6e:76:4e:90:6f:34:c7:14:df:
         60:6b:43:c7:2c:52:3c:6d:5b:66:8d:b6:39:4a:c6:b5:40:e5:
         25:2a:c6:f4:c7:86:3e:03:12:cc:92:ca:74:7d:68:1c:b9:31:
         99:40:e2:1a:fb:5c:7e:ab:b0:d4:d3:10:a8:cb:c8:23:71:87:
         47:01:79:b4:c6:6d:2d:3f:bd:ea:8e:56:43:93:46:20:18:a5:
         66:cc:b1:1a:8c:13:8a:0c:67:78:b9:bc:d0:d4:bc:65:29:bc:
         7a:c3:b8:8f:37:8d:3f:e6:25:54:b0:e2:24:5f:4e:aa:4e:08:
         fa:ba:d6:27:c5:a8:07:4c:86:21:b1:d1:49:d2:f1:95:8c:92:
         3a:e5:c8:99:c4:47:b6:2b:73:a1:03:65:b2:5c:b4:6b:24:73:
         1d:c4:18:f4:b7:a1:ab:2a:c0:ce:0e:55:28:30:70:c6:8b:88:
         a0:f0:6a:2a:f4:09:10:4e:fc:8b:59:fb:56:60:0d:59:06:41:
         df:ec:21:7e:16:f2:23:1f:50:d2:0b:2a:03:05:f0:be:d6:41:
         af:b1:f9:be:21:48:6f:a7:e7:48:a7:ba:ef:1c:c8:56:9d:14:
         73:20:ff:04:70:5d:bb:7d:08:90:ee:45:91:be:cd:46:39:bd:
         62:aa:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----