Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer
File:                     d886f3a2-7325-4b74-8802-19528a9f380c.cer (raw, json)
Hash identifier:          4Nhnhw1bZgSpa6gzbJPraphCZ+Wkz+V135IghSn+PuY=
Subject key identifier:   70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858421E93CEA6C475206CCA930B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 05 Jun 2023 14:17:20 +0000
Certificate not after:    Sun 07 Sep 2025 14:17:20 +0000
Subordinate resources:    IP: 158.51.44.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:1e:93:ce:a6:c4:75:20:6c:ca:93:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun  5 14:17:20 2023 GMT
            Not After : Sep  7 14:17:20 2025 GMT
        Subject: CN=d886f3a2-7325-4b74-8802-19528a9f380c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:d2:12:bd:c4:57:43:8c:a7:00:1b:d0:d4:
                    0b:45:e6:23:fb:92:d4:0a:d2:8c:1e:82:d1:c8:1b:
                    90:55:13:48:ff:27:06:20:12:d3:44:63:4e:b4:c0:
                    2a:b1:3c:8f:89:06:12:d1:38:68:b7:64:d8:1c:b9:
                    0f:6b:ae:2c:61:df:73:d6:c3:67:1b:d7:20:72:81:
                    db:3a:ac:ee:25:be:f0:7d:b0:6c:d2:42:8b:b3:7d:
                    37:de:b0:19:7f:1f:bc:23:cf:60:e4:80:52:19:0f:
                    b4:27:a9:01:ea:d2:10:38:ba:36:ec:a4:b9:b0:c4:
                    84:a9:7c:32:ac:59:91:a6:bb:00:80:12:34:c9:6d:
                    2a:64:94:f0:80:0c:d5:18:6e:6d:b4:4c:f5:2a:9c:
                    54:2d:13:bb:2a:07:8a:e3:23:fb:bb:65:7c:21:cd:
                    f1:94:de:fe:7e:90:d2:56:fd:16:5f:0c:8b:80:77:
                    db:13:57:50:8a:3d:51:a9:e1:3e:1e:41:5e:e6:ac:
                    47:da:c2:a8:e7:1d:2e:38:93:e1:36:fc:5a:c9:7a:
                    4b:f6:f6:ea:70:8e:ee:af:cc:8c:1f:7b:63:51:b7:
                    1f:5c:6d:c0:1d:ad:ca:a6:49:d4:23:84:f9:37:50:
                    29:90:b2:bc:c4:64:cf:55:ba:c5:84:86:b4:cc:b2:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:fc:1e:0e:cf:f8:93:60:79:9b:c4:93:28:e5:ed:f5:4f:0d:
         fe:eb:23:6b:88:4c:9d:69:68:fc:4a:71:0e:ac:30:e4:f3:18:
         24:66:e1:ba:1d:df:8c:4c:3d:07:08:0a:75:29:57:c8:92:90:
         e7:7c:78:9f:bb:05:db:28:6e:e1:af:76:98:d5:b9:45:8b:22:
         62:67:1a:99:07:01:fb:b4:1d:f2:b8:7c:c1:4d:64:92:51:4f:
         5f:60:d8:d8:55:02:6b:3e:36:45:ca:ef:2f:34:d9:f9:b5:68:
         e3:0e:f2:09:bb:ab:ef:7b:2a:96:5a:97:99:32:86:bf:31:3b:
         46:f3:5f:98:79:25:95:60:94:ec:01:73:26:d2:fc:bc:4f:32:
         dc:6b:91:bd:ac:85:5e:29:16:b7:13:52:6a:b4:46:eb:81:02:
         7b:ff:88:16:f1:96:f8:00:bf:33:a4:35:8b:c7:70:4e:59:31:
         24:95:22:1f:67:c2:9f:93:63:e5:ac:0c:41:82:08:10:d4:76:
         7f:da:89:2c:d5:5a:3f:aa:20:42:d8:e9:a8:c3:d8:d9:a5:81:
         c2:9e:bf:65:19:54:b8:0c:d3:b0:9b:7a:e5:0d:bb:f2:ee:cf:
         7f:7e:d2:cc:42:95:c6:a6:c9:97:cb:21:06:12:ef:e6:4a:5f:
         04:58:6d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----