Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
File:                     cba86acd-9af7-450a-ac5c-6c872671a7a3.cer (raw, json)
Hash identifier:          WFI+obfqXcuK9BVtDybk2DEkzlL2/IR3dAyMdUFNAyU=
Subject key identifier:   AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842B05AE9959B8FEAC65B81E300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 27 Jul 2023 19:30:43 +0000
Certificate not after:    Wed 29 Oct 2025 19:30:43 +0000
Subordinate resources:    AS: 62534
                          IP: 23.138.96.0/24
                          IP: 2604:d9c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:5a:e9:95:9b:8f:ea:c6:5b:81:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 27 19:30:43 2023 GMT
            Not After : Oct 29 19:30:43 2025 GMT
        Subject: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:67:45:d2:0a:14:e3:ef:e3:15:db:08:48:8f:
                    a3:26:1c:2e:c1:b2:92:26:c6:c1:5d:8c:a2:3f:70:
                    07:a9:77:1e:2c:4a:28:da:ff:ab:37:32:96:e2:30:
                    68:c5:3e:09:f2:d7:a9:31:5c:05:c2:de:5c:a9:33:
                    6f:71:f4:5d:54:bd:5e:de:2d:cc:b7:e0:63:8d:cf:
                    00:5d:f3:61:0b:1a:ac:fe:c5:cf:d6:f4:66:c3:5b:
                    a7:5a:32:90:ef:e7:c9:e0:57:20:80:da:da:37:e4:
                    7d:5a:0e:50:65:28:6f:1e:64:a7:95:d4:b0:83:e2:
                    ac:08:6c:d8:46:5a:fe:57:8b:f1:d2:7f:fe:6c:88:
                    78:5a:33:f7:18:56:20:5c:02:93:76:5e:0e:88:b1:
                    00:52:60:8a:2e:12:36:0a:ca:bd:c9:6a:8b:39:a8:
                    47:1a:dc:52:1c:3c:22:f7:54:e0:c1:1f:1f:ed:bb:
                    97:e0:2a:ed:e7:9d:2d:ba:f3:2f:7c:3a:5e:8f:dd:
                    eb:84:9c:f6:d2:05:6e:61:e0:42:9a:90:fe:d8:e5:
                    0e:0d:a3:8e:e4:e0:fb:cc:97:6b:1b:27:2e:df:65:
                    e3:1b:c9:ec:cb:f6:8e:0b:3c:a8:fe:1f:12:23:33:
                    e8:3e:7e:b6:80:48:b8:63:33:2c:7b:d8:c2:cb:a9:
                    08:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.96.0/24
                IPv6:
                  2604:d9c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62534

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:9b:c1:50:19:28:c4:4c:7d:0a:65:1d:c6:c3:52:c1:17:ee:
         fe:6e:a6:67:e0:bb:7d:47:89:5b:55:0a:48:93:20:cf:c6:cf:
         2f:2e:fe:bf:c8:69:a7:45:97:28:31:54:39:59:89:c5:3a:69:
         79:ae:09:65:e8:ee:f6:78:50:5f:be:23:45:3e:08:9e:e4:4b:
         36:ca:ae:41:f8:20:88:43:4e:6d:69:27:0c:38:37:7e:67:c0:
         1f:a8:44:92:c1:a6:1c:a1:5e:6a:e0:2a:cb:f3:7b:5a:2b:dd:
         fc:44:f1:a1:45:0a:73:d1:8b:f7:78:de:0d:96:77:d0:6a:c1:
         cc:91:2e:00:29:08:b2:a0:19:2e:9d:af:72:88:ae:b8:8d:7a:
         c5:79:a3:a9:9e:43:63:96:13:92:c4:b5:ad:bf:e0:da:ba:58:
         e1:33:54:ae:42:03:d6:92:bd:9d:8a:1d:72:05:5b:d1:04:8f:
         bb:e5:99:e5:68:04:b9:24:23:c2:16:b1:8f:ef:ce:0e:27:60:
         3a:ec:8d:08:c1:9c:08:2f:ec:af:7b:b4:0b:48:48:42:23:79:
         35:80:c1:ff:68:1e:dd:63:56:66:7c:10:4f:6b:93:22:a2:aa:
         ba:9d:53:62:3c:14:f4:77:5f:02:23:d3:9b:3b:91:ba:b7:28:
         aa:96:02:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----