Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
File:                     c7910a08-9cef-446d-8b36-1ad473d3fb84.cer (raw, json)
Hash identifier:          NNFyeNl+SaT/29fqTHG7pXxzPk0DMhWOwd0Q5Tu27kE=
Subject key identifier:   EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858475D3938E2D543786CBD7617F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 28 Sep 2024 12:45:25 +0000
Certificate not after:    Fri 01 Jan 2027 13:45:25 +0000
Subordinate resources:    AS: 23347
                          IP: 23.156.152.0/23
                          IP: 2602:814:f000::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5d:39:38:e2:d5:43:78:6c:bd:76:17:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 28 12:45:25 2024 GMT
            Not After : Jan  1 13:45:25 2027 GMT
        Subject: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fa:32:b5:53:9c:d6:41:e9:23:7b:47:a0:a5:
                    b9:d6:b7:3d:a2:3d:e3:99:b4:ee:4b:f1:fa:04:20:
                    3e:ad:85:7a:56:03:38:5a:ac:59:be:ad:8f:2d:97:
                    71:45:a3:9a:c1:49:85:28:35:d1:14:2d:8a:4e:2e:
                    ee:46:7c:7f:ac:7f:a2:b2:88:0e:ee:e9:64:21:12:
                    da:fb:68:bf:76:c5:90:db:ae:17:d5:b9:73:cb:39:
                    01:43:20:f8:1f:ad:b5:fb:55:b7:2d:39:01:66:16:
                    d0:99:82:36:53:2e:53:a2:18:0c:da:d7:fe:2e:5f:
                    dc:65:ea:f4:cb:b4:60:59:df:17:0f:cb:b6:b9:06:
                    c2:0b:80:36:43:cf:c8:90:74:00:83:f7:2b:8f:d6:
                    bd:e6:cc:d4:fa:23:26:de:b1:4b:35:e1:d3:35:82:
                    a1:19:66:37:7a:6d:b4:c8:4b:a2:cd:9d:33:6a:67:
                    a8:36:4e:d3:7f:95:7b:bd:29:d9:9b:ed:a6:6d:62:
                    94:f7:a5:29:11:3f:eb:a2:98:90:8b:ee:8e:ca:94:
                    89:4b:06:28:1a:87:50:38:50:97:2a:aa:d6:8d:b4:
                    2d:c2:00:de:83:90:6b:e9:95:63:98:ed:54:7b:ab:
                    a7:9a:15:c9:fd:1e:b9:96:12:73:2e:7e:e9:ad:2d:
                    98:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.152.0/23
                IPv6:
                  2602:814:f000::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23347

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:0a:c8:92:ec:94:7c:5f:ab:65:96:37:e6:2e:45:fa:25:6d:
         1b:08:5a:3c:86:e2:29:23:5c:1d:e9:74:85:35:a2:3a:d3:30:
         09:2a:24:be:47:be:b0:74:65:66:a8:2f:d6:93:28:1b:1b:d4:
         c7:ff:ab:ba:e2:fa:0b:8c:80:65:83:55:b1:45:6b:ad:f1:26:
         24:6c:dc:78:d4:1c:91:3d:df:d6:f0:46:f0:b3:dc:fc:97:21:
         9f:58:bc:50:47:f3:39:10:47:29:26:9e:be:6b:6c:ad:76:3a:
         c2:32:be:94:af:b3:43:a3:00:9d:1c:67:6a:07:d3:2c:d4:43:
         05:a5:dd:86:97:39:ae:70:12:7d:e4:3b:a4:bf:93:cf:67:c0:
         09:59:a2:9d:c6:84:c3:6d:07:e8:ce:c8:45:ff:74:34:cd:c8:
         51:95:fc:33:91:fb:20:b3:44:e9:14:df:0c:b8:6d:47:7a:47:
         a3:2e:03:dd:7d:04:56:93:78:ad:ca:c4:2f:b8:f4:0e:63:f5:
         2d:92:d7:24:52:8d:33:42:38:d8:2f:46:63:b2:89:f7:d2:86:
         ed:99:a4:23:90:bc:a4:1b:89:fa:2a:7b:ea:d2:f2:5a:fb:82:
         04:6d:db:fe:5c:4c:d9:5f:1f:9f:18:5b:59:ca:b4:f0:6d:1c:
         e4:c4:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----