Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314.cer
File:                     d826c88d-e62d-45fe-a08c-0b0a021a5314.cer (raw, json)
Hash identifier:          gQ9M47Ifd4nQPqAn5DUAYML0zMfe9ozENWos5vh7qDw=
Subject key identifier:   A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842B13276A6B04BCF5586FDA9C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Jul 2023 02:45:01 +0000
Certificate not after:    Thu 30 Oct 2025 02:45:01 +0000
Subordinate resources:    AS: 393875
                          IP: 2620:7:2000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b1:32:76:a6:b0:4b:cf:55:86:fd:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 28 02:45:01 2023 GMT
            Not After : Oct 30 02:45:01 2025 GMT
        Subject: CN=d826c88d-e62d-45fe-a08c-0b0a021a5314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:da:75:58:a5:29:28:a1:86:bd:7b:80:cd:
                    80:6a:18:09:10:a1:4d:fa:e6:44:75:7e:c2:49:9a:
                    96:e9:40:05:af:cf:56:c7:ca:90:e8:e3:5a:63:ca:
                    e7:64:3b:53:58:9f:24:6d:32:02:4a:b5:42:af:2f:
                    d2:b0:2a:b4:a1:54:94:45:62:e4:f4:02:d2:b2:87:
                    80:e5:d1:58:26:f7:3b:e3:e6:18:cc:11:a5:94:6a:
                    9e:9a:ea:d9:9d:c8:d7:c7:78:ea:7c:e3:47:61:06:
                    73:9b:b1:8c:a4:05:da:c0:5a:04:9f:26:ae:e0:21:
                    bf:70:ff:a6:b1:b9:82:7a:de:9d:96:e0:bc:f7:b3:
                    63:09:88:38:96:85:ed:c5:6b:65:44:c5:83:2b:cb:
                    4c:c9:91:66:53:9a:81:68:06:4d:a1:de:c4:28:a6:
                    5f:5e:8c:14:96:96:e1:d8:ba:2a:5d:17:86:ee:79:
                    36:3c:4b:06:6b:3e:ac:2f:26:5a:bb:bb:7b:b2:10:
                    cf:8c:2d:2e:81:a3:17:ef:3a:b1:53:ee:fe:16:9d:
                    97:22:74:e2:61:e7:7a:0c:23:3e:57:c1:31:23:89:
                    4d:c7:cf:f2:e9:d9:21:40:e7:79:02:5b:3d:a5:19:
                    27:93:eb:1b:84:e4:bd:e3:a9:72:df:54:d7:4c:20:
                    82:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CF:A2:F0:DE:CA:A4:4B:99:13:F3:EA:92:FC:76:9E:9F:EE:80:64
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d826c88d-e62d-45fe-a08c-0b0a021a5314/d826c88d-e62d-45fe-a08c-0b0a021a5314.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393875

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:7d:8f:e8:ac:9a:8c:46:09:3e:8b:63:af:50:03:c3:e7:
         22:38:5e:d1:9c:57:1d:c1:d0:cb:f1:01:4c:6d:bc:96:86:ae:
         de:ab:21:1d:fd:84:2e:9f:a5:c7:88:89:64:19:47:3a:45:34:
         90:e8:c2:a1:9a:6e:88:c6:e8:06:ca:7c:65:49:3d:c2:08:71:
         08:d8:5e:92:c1:03:a3:a7:0e:cc:ee:00:fd:9c:18:a0:14:e4:
         28:eb:74:54:de:24:6b:80:d8:42:2e:66:c7:e7:64:b9:2d:4f:
         4d:0c:73:3a:60:8f:d4:93:b5:4c:bf:77:eb:0c:87:be:73:42:
         fa:8a:71:b5:29:b3:5b:ae:7c:42:9a:6b:74:88:05:60:22:49:
         c7:42:ba:de:2a:0c:57:de:f3:87:99:47:6c:b7:79:de:96:4f:
         35:83:69:0e:36:17:fd:39:af:08:9b:4d:aa:64:c9:b6:1e:30:
         c2:09:5e:0e:2a:cb:75:20:6c:db:eb:fe:1b:fc:8f:3f:8e:d1:
         db:55:8d:42:0d:1d:c0:a3:4c:ea:c8:24:74:63:62:21:2f:b1:
         5d:0c:1f:60:d9:cb:5d:44:1b:8d:51:b0:79:2a:40:3e:d8:f7:
         2e:c2:ea:1d:0a:da:ec:15:3f:a8:34:bc:aa:7c:c4:11:b5:3d:
         2a:d5:db:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----