Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72.cer
File:                     d5776a8f-6996-4275-a804-f1fb7cdf0d72.cer (raw, json)
Hash identifier:          /EkqyJ2dd9gWnqWZsMa19fUxeEMNGlO2/Gf3NN/wfkM=
Subject key identifier:   DA:E4:16:F2:8B:3A:BB:A3:60:CE:08:55:96:C9:87:78:3F:C8:A6:A7
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285844DEF2071BA30DCF646E945A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d5776a8f-6996-4275-a804-f1fb7cdf0d72.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Feb 2024 21:36:15 +0000
Certificate not after:    Fri 03 Oct 2025 07:36:11 +0000
Subordinate resources:    AS: 1037
                          IP: 172.83.83.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:de:f2:07:1b:a3:0d:cf:64:6e:94:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Feb 12 21:36:15 2024 GMT
            Not After : Oct  3 07:36:11 2025 GMT
        Subject: CN=d5776a8f-6996-4275-a804-f1fb7cdf0d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:68:25:07:53:4f:a7:90:7f:2b:56:ff:b8:bd:
                    d7:c7:3e:0e:02:e9:ff:23:42:00:68:fb:ec:53:51:
                    06:f7:98:9c:79:c3:ec:8e:64:a8:0e:15:59:b9:bd:
                    03:b2:8f:d3:21:4c:80:04:81:43:d4:8b:96:41:90:
                    e9:66:11:b7:c8:49:d2:4a:b3:4d:db:87:d3:58:0f:
                    c5:e8:81:12:03:81:b4:1c:f1:00:41:f4:07:c5:d0:
                    f5:a1:8d:1c:c1:ef:df:30:fe:2f:86:d5:29:9a:43:
                    14:e1:a2:97:6e:df:16:21:82:70:61:b4:23:2e:82:
                    fd:23:39:f4:ea:8b:1f:58:68:66:ba:c2:15:ca:d6:
                    c6:96:46:ac:b7:80:b3:9f:03:a2:b9:e4:9d:f8:d3:
                    df:49:53:af:a8:70:bb:da:29:f8:b4:9d:97:34:1b:
                    8d:f7:e3:b8:89:59:63:44:6b:de:6b:f9:d8:2f:25:
                    2a:b3:c7:d4:4e:43:4d:58:4a:02:01:2e:3a:6f:05:
                    ba:01:9f:d7:45:79:6b:7e:b3:a8:3c:8f:a1:ec:ce:
                    15:47:76:49:5c:7b:f1:b3:c5:2b:0f:62:b8:01:56:
                    c2:85:8b:80:23:4e:56:f2:a6:85:25:ab:11:9e:57:
                    9e:43:13:a0:e8:56:e9:b3:ab:8f:a5:e9:22:7c:49:
                    90:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E4:16:F2:8B:3A:BB:A3:60:CE:08:55:96:C9:87:78:3F:C8:A6:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5776a8f-6996-4275-a804-f1fb7cdf0d72/d5776a8f-6996-4275-a804-f1fb7cdf0d72.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.83.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1037

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:70:f0:41:c1:f1:97:f4:71:67:01:a5:bf:fc:12:3a:a1:7f:
         0b:8d:5e:ad:18:48:8a:e5:f2:57:08:c7:00:f2:7e:09:ca:3c:
         f2:05:34:99:3c:d6:ee:8e:ff:73:ff:c9:7b:e8:54:5c:6a:14:
         fa:01:94:f3:95:3a:be:b9:78:23:ee:0f:a7:91:ea:c9:81:d6:
         ae:bf:b8:ef:a0:ff:5f:25:28:52:78:44:c5:3c:5b:2b:20:5b:
         5d:b8:01:7b:c1:d6:11:06:d9:5b:03:ec:c4:72:81:5d:87:dc:
         67:c5:1f:d2:00:14:79:a4:f1:8c:0d:ac:fd:36:0d:36:2c:fb:
         b3:16:ff:00:05:ab:ad:0c:17:4d:30:7f:b3:d2:b9:0c:1d:cd:
         48:1b:32:e4:a3:af:da:4b:d3:9d:7c:0c:02:7c:1e:0b:c1:89:
         af:fb:35:99:2c:9c:02:d1:09:a0:59:e7:ee:3b:86:77:3c:64:
         75:91:ce:49:e8:62:2f:5c:92:cb:ad:7b:bb:7f:49:fd:3f:1a:
         c2:73:19:d1:32:1f:1b:c8:c4:55:6a:be:cc:ec:58:8c:a1:cd:
         02:37:cb:56:b0:a0:41:51:2b:93:d6:d5:7f:f3:df:08:56:f1:
         44:9a:1f:ba:60:46:77:e2:b3:43:28:dc:36:aa:30:53:90:87:
         27:25:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----