Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.cer
File:                     c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.cer (raw, json)
Hash identifier:          wYI23dX9Sy2H3k/89qUa1s/u3LQ2SGgbreH5cSJRlsc=
Subject key identifier:   87:7C:67:99:50:4F:CE:A6:C9:1F:C0:56:69:1E:E6:A5:08:C4:7B:DB
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858428F2B152CF5285688363B9EC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 15 Jul 2023 22:12:40 +0000
Certificate not after:    Fri 17 Oct 2025 22:12:40 +0000
Subordinate resources:    IP: 192.154.94.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8f:2b:15:2c:f5:28:56:88:36:3b:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 15 22:12:40 2023 GMT
            Not After : Oct 17 22:12:40 2025 GMT
        Subject: CN=c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8c:04:a3:fc:5d:ce:6f:14:46:b8:10:81:10:
                    a4:cb:1c:93:78:f2:a7:08:82:2d:1f:fd:08:a6:7f:
                    7a:f5:23:6a:a7:6f:f9:5a:5d:16:10:d4:47:c9:71:
                    da:ab:78:01:59:bf:90:86:03:da:36:27:36:52:30:
                    4e:7c:99:2e:de:0a:3f:fe:3f:9f:a9:45:5c:4a:80:
                    77:f7:a5:28:35:2d:56:5c:9d:a2:c9:61:0d:eb:9f:
                    34:b1:4c:32:b5:69:e4:3f:93:57:ca:12:e9:51:72:
                    83:33:3f:c5:78:89:ff:1a:79:16:b2:54:63:1e:0b:
                    99:53:02:14:cf:9e:83:dd:ad:30:1e:7c:e9:28:b9:
                    ff:fe:89:ec:b5:35:57:5c:60:5f:1a:6c:c2:0a:e0:
                    02:18:e3:b2:4a:6a:bb:89:4e:e6:61:09:4c:0d:e0:
                    9d:eb:2b:1b:e4:d4:ad:56:98:29:8c:96:d1:f6:cc:
                    0a:cb:7e:a5:19:43:39:9d:68:67:4a:dd:fb:3b:9e:
                    3f:ee:4c:b2:4f:fa:0c:e2:63:7a:5d:cc:ba:23:45:
                    92:e9:a6:b0:6c:21:bc:f3:53:53:b7:bf:d3:78:23:
                    39:f2:8f:ba:76:e7:f6:71:7b:f2:5a:14:62:fd:a0:
                    ca:93:08:40:e6:de:ca:cd:2c:98:23:e1:66:88:13:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:67:99:50:4F:CE:A6:C9:1F:C0:56:69:1E:E6:A5:08:C4:7B:DB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92/c8fd6911-8fd4-4cbe-a9a6-dcd6b1866e92.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:89:75:81:89:29:13:d0:f1:ed:fd:52:57:79:04:dd:bb:a3:
         6e:c2:39:71:c6:6e:79:5b:c9:e6:21:4f:38:16:99:79:5a:e1:
         93:33:f6:1e:63:9e:97:98:df:7e:ef:7d:48:72:b5:07:0f:3e:
         94:4f:54:f1:de:e7:b1:a3:44:29:f1:68:f6:a2:7e:c6:27:1c:
         3b:2c:3f:d4:3f:6b:50:06:f4:3f:72:d8:17:a5:9e:8e:71:c6:
         8f:1a:78:02:3e:6f:ef:6e:77:5c:ed:58:8d:01:f5:42:cd:45:
         2e:a1:35:af:4e:88:7e:89:fe:de:49:60:fc:b7:bc:ac:ea:1c:
         37:17:a9:da:43:78:40:f7:79:09:db:6a:1e:f6:66:75:9b:3f:
         76:ce:6e:a6:a7:09:87:bb:a6:c6:9f:e4:72:0b:4f:63:e0:df:
         25:3c:f4:c9:af:8a:12:3f:cf:cc:c3:51:73:74:45:0c:58:9e:
         c1:b6:76:03:9e:5e:8a:c9:21:b3:64:31:c7:13:54:30:95:07:
         e5:21:fb:f3:64:ee:68:94:46:d0:a2:14:b0:e0:6c:6a:2d:ab:
         b5:80:84:48:1e:5b:38:45:e4:79:e2:be:20:c4:3d:4f:71:b7:
         2d:6c:ba:12:a6:f1:cc:6b:ab:df:4d:2b:78:a0:28:d4:59:26:
         e6:cf:6d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----