Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a.cer
File:                     bae7ed2b-d42a-42fa-947d-f719eddc984a.cer (raw, json)
Hash identifier:          q7Br04bsEpvpPZ6pc0qLLT0bBSXEkeoZt9zjmJYfz8I=
Subject key identifier:   88:44:B3:56:01:51:95:24:A9:70:95:2B:95:87:67:9B:64:DD:DB:3A
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285843C40B36942233D7DDDF0F5480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 03 Nov 2023 13:33:14 +0000
Certificate not after:    Sun 14 Dec 2025 19:55:35 +0000
Subordinate resources:    IP: 23.151.232.0/23
                          IP: 2602:2c8::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c4:0b:36:94:22:33:d7:dd:df:0f:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov  3 13:33:14 2023 GMT
            Not After : Dec 14 19:55:35 2025 GMT
        Subject: CN=bae7ed2b-d42a-42fa-947d-f719eddc984a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3a:2c:79:10:5d:3a:ff:cb:93:27:cf:d2:00:
                    dd:b4:cf:70:c1:42:71:0f:22:50:78:e4:a3:6a:b6:
                    7d:39:c5:3d:c8:7f:b6:2b:8b:64:70:e3:7b:3a:24:
                    d3:dd:ec:7b:e5:86:91:12:07:ca:e4:54:c4:62:13:
                    6c:00:a7:cd:f0:66:a3:1f:ee:e8:7b:f2:01:ba:aa:
                    11:42:43:25:86:70:32:bb:18:0e:8e:43:06:30:51:
                    0f:d7:d7:6e:ea:7c:42:cd:7b:c8:81:2e:03:df:56:
                    59:6b:d8:e6:c7:5e:f6:bd:77:48:04:a9:e7:4b:29:
                    81:aa:57:07:f0:89:eb:e1:c0:d9:21:c3:71:0b:05:
                    ec:5d:d6:ac:c7:f8:15:09:63:9a:94:6d:3a:3f:ba:
                    b4:54:c0:1a:ae:27:ee:74:bd:80:38:36:84:af:47:
                    5f:92:05:07:7f:ef:dd:6d:01:cb:7a:39:ba:32:67:
                    a3:ef:c2:c4:dd:9a:93:f7:cf:07:c1:cd:69:31:fb:
                    21:21:8e:ae:f0:c8:42:3a:aa:97:4b:ec:f4:83:00:
                    1f:ac:61:f1:e6:24:50:b8:0f:b5:55:51:01:80:ae:
                    49:8c:2c:de:6d:48:3f:60:fc:e7:57:0c:dd:28:39:
                    b8:67:46:dc:44:fc:b4:ff:b8:7a:dd:9f:5a:a9:6c:
                    69:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:44:B3:56:01:51:95:24:A9:70:95:2B:95:87:67:9B:64:DD:DB:3A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bae7ed2b-d42a-42fa-947d-f719eddc984a/bae7ed2b-d42a-42fa-947d-f719eddc984a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.232.0/23
                IPv6:
                  2602:2c8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:29:34:bb:d1:62:34:e0:b1:ec:2e:db:34:ad:c4:70:80:e4:
         28:bb:d9:dc:36:d5:68:28:86:11:42:95:08:e6:4f:a6:75:f3:
         e0:ec:fc:e1:0e:18:0d:a8:a4:df:e7:1f:73:5b:82:f7:81:62:
         19:0b:a0:d6:40:53:b6:38:9c:3d:57:70:6e:24:b3:9f:43:97:
         05:5e:8e:80:61:d0:df:90:ec:53:65:f2:2a:37:78:9f:99:e4:
         63:4e:35:ba:1b:22:d3:67:c4:25:62:0b:ec:e3:ef:3a:97:bd:
         40:75:00:2d:cd:f0:e1:7f:fe:00:09:0a:bf:39:86:26:6a:40:
         7a:d6:8e:b8:30:bd:a7:e6:03:b4:b0:78:6c:24:88:0f:dd:96:
         57:bf:f7:c8:12:76:d1:46:9e:8c:39:5b:44:b9:6b:ff:6e:25:
         c5:2d:fc:ec:cd:f6:3d:49:66:31:b9:d8:20:09:9c:59:e0:90:
         f8:61:f8:52:be:0b:6e:9b:aa:95:82:69:f7:31:70:f5:68:02:
         df:e3:6f:6b:a6:ee:32:a1:a5:61:3f:c4:72:cb:bd:68:b8:1a:
         5f:8c:4b:09:bb:4e:9d:bc:11:94:87:20:bc:9d:2f:b7:e0:8a:
         91:24:25:75:58:cf:47:8d:bf:e0:8e:60:35:cc:9c:83:56:5e:
         3c:41:34:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----