Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0c81d5-620d-4b16-bd9c-4f5a7e809683.cer
File:                     de0c81d5-620d-4b16-bd9c-4f5a7e809683.cer (raw, json)
Hash identifier:          IBXIezdWwhsuGfcMC+0UkaH6xaWYJrL9t00dlDTyhNs=
Subject key identifier:   77:53:2A:4C:65:87:A4:1E:5F:DF:D0:CD:E7:9D:4C:23:25:39:A9:02
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858422A82473AEAD5A8408CDEB380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0c81d5-620d-4b16-bd9c-4f5a7e809683/de0c81d5-620d-4b16-bd9c-4f5a7e809683.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0c81d5-620d-4b16-bd9c-4f5a7e809683/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Jun 2023 20:51:42 +0000
Certificate not after:    Thu 11 Sep 2025 20:51:42 +0000
Subordinate resources:    AS: 33753
                          IP: 216.183.110.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2a:82:47:3a:ea:d5:a8:40:8c:de:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun  9 20:51:42 2023 GMT
            Not After : Sep 11 20:51:42 2025 GMT
        Subject: CN=de0c81d5-620d-4b16-bd9c-4f5a7e809683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:73:f6:92:4b:c3:00:83:e3:2d:de:79:e9:
                    b9:2a:7d:98:d2:87:78:ed:41:5a:88:f0:00:d5:6a:
                    52:3a:d4:c4:40:2e:0d:d1:49:ec:61:ec:2a:8c:4d:
                    a7:3b:08:20:e0:af:5f:11:93:84:e0:7b:89:29:d2:
                    c0:3b:e7:97:3b:7c:83:a6:e2:8b:29:2f:bd:51:0f:
                    55:12:84:49:09:87:22:3a:91:44:dc:ca:c9:9b:13:
                    22:eb:74:68:41:8b:0e:a0:33:e7:d0:f3:2a:34:e9:
                    ed:78:c1:51:25:66:4a:13:fc:b0:bc:a1:fb:ea:9f:
                    a5:c1:1f:65:f7:5f:92:ca:4b:70:14:71:b3:86:86:
                    50:23:6d:81:df:69:e4:fd:83:39:fe:99:c4:f4:58:
                    e0:27:b3:c4:3e:91:3c:09:39:7b:0b:bf:0c:56:1a:
                    30:44:94:45:e4:ac:72:ec:3f:4a:9b:5c:00:39:19:
                    3d:22:50:71:48:fc:cb:57:ee:bc:8f:95:ce:cf:37:
                    80:d8:4d:45:3a:ff:c7:02:b3:28:f3:bb:b8:de:74:
                    98:d3:6b:23:f1:c6:0b:0d:25:59:86:57:8c:69:18:
                    7b:59:43:e5:ee:73:bb:44:07:28:bc:0f:b4:bf:a3:
                    a1:28:b7:46:1c:1d:60:6c:b0:a1:3f:f5:8e:bf:ba:
                    5a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:53:2A:4C:65:87:A4:1E:5F:DF:D0:CD:E7:9D:4C:23:25:39:A9:02
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0c81d5-620d-4b16-bd9c-4f5a7e809683/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de0c81d5-620d-4b16-bd9c-4f5a7e809683/de0c81d5-620d-4b16-bd9c-4f5a7e809683.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.110.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33753

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8b:44:07:88:03:df:90:59:3e:45:43:61:8a:d6:05:ea:10:
         9c:17:37:1c:ea:f6:48:14:4d:43:0d:84:3c:e2:82:07:f2:01:
         bd:54:77:1e:73:39:e1:97:6b:f9:89:04:14:cf:d1:8f:05:2e:
         97:a5:fe:3b:13:e4:00:a3:aa:32:18:3b:3a:da:40:ff:a6:5f:
         46:e9:a5:28:5f:58:23:0f:14:14:15:72:44:02:f9:75:08:41:
         5e:2d:e3:8b:23:6c:00:6d:e4:3e:9a:2c:0c:85:9f:ba:a8:d8:
         49:45:30:9c:30:29:03:8f:6a:e6:76:8f:f3:d4:ea:57:1c:79:
         fa:e9:32:86:de:e5:40:66:a6:fb:e8:c1:25:6e:2d:5e:7d:72:
         63:65:04:87:df:f1:8b:1a:ea:17:fc:cf:46:fd:c0:6a:68:4f:
         ad:bf:4f:92:b3:e6:df:b9:a6:01:64:1b:c3:a4:e3:80:16:de:
         c6:20:1a:3b:4e:b4:e4:3b:ba:e6:b3:e7:17:be:5d:94:7e:ae:
         6d:d4:84:82:66:75:b7:57:ac:4f:f2:4d:27:f7:be:b7:01:94:
         38:dd:83:1d:b7:37:c1:da:d9:14:6b:1b:e1:8f:a7:fb:f5:fd:
         e7:f7:b3:53:43:21:16:85:ac:7f:3c:76:30:ac:6e:df:73:02:
         98:7c:b3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----