Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e.cer
File:                     e1fca709-9829-483c-a335-41bcfa34ee4e.cer (raw, json)
Hash identifier:          UkTAIIdbbwwkqbVdgxv4a8e/lVnlWIVixzKk5NQ261M=
Subject key identifier:   6D:D1:1A:73:4B:14:07:01:55:9D:F0:29:6D:F6:5F:6E:BA:0F:27:BF
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842CE7D0C05ABD89173FB3C2900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:33:44 +0000
Certificate not after:    Sun 09 Nov 2025 15:33:44 +0000
Subordinate resources:    IP: 204.108.176.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:7d:0c:05:ab:d8:91:73:fb:3c:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug  7 14:33:44 2023 GMT
            Not After : Nov  9 15:33:44 2025 GMT
        Subject: CN=e1fca709-9829-483c-a335-41bcfa34ee4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:73:3f:6f:aa:ad:d0:1f:12:d2:a3:2b:42:
                    22:33:9b:82:04:28:c7:ef:3f:96:bb:08:67:4c:59:
                    0a:89:e2:56:87:ec:e6:41:31:bd:75:88:5e:41:a9:
                    19:a6:54:d1:96:e3:a4:47:0f:24:7b:0a:a4:81:0e:
                    55:bb:2b:40:c8:2c:ce:e1:84:ca:bb:e7:e0:af:84:
                    e6:9d:8d:b4:78:7a:d1:84:3c:ec:6c:19:67:e4:a7:
                    60:c3:cb:39:6c:a9:a1:96:03:bf:4f:4e:22:f2:d8:
                    99:f3:eb:dd:c4:cd:7e:2c:3d:d9:76:bd:35:fe:4a:
                    f7:75:1d:bc:18:71:85:70:e5:37:c9:a4:a6:65:41:
                    30:34:7d:bd:e6:e5:b6:69:30:d5:d6:83:52:d9:5a:
                    24:6b:d5:1f:f1:0b:cb:4b:86:2c:89:56:b9:64:3d:
                    cd:a7:16:c0:22:3f:e6:8e:7e:d0:3d:fe:56:35:30:
                    c8:33:a6:84:12:ef:3e:99:ff:ef:93:2f:4c:0d:cb:
                    b1:42:eb:f8:d1:f5:26:92:97:75:de:7b:0c:f0:89:
                    71:5b:a9:4a:71:39:57:d7:d8:0f:9b:36:75:c2:f5:
                    78:98:8d:a5:cb:51:70:06:0b:29:1f:f8:a7:49:8a:
                    75:c7:7c:41:d2:a5:59:4c:fb:c9:f7:6c:32:e2:6c:
                    1a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D1:1A:73:4B:14:07:01:55:9D:F0:29:6D:F6:5F:6E:BA:0F:27:BF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:34:11:f3:6a:c7:d2:40:b1:99:fb:79:52:bf:a8:45:ad:8b:
         c2:e4:af:f5:cb:18:b8:a0:b5:f8:99:b6:2f:76:cf:28:a7:af:
         d5:66:22:ae:fe:24:18:87:1c:39:5d:f9:93:bf:12:be:9b:96:
         58:27:79:33:ee:ea:88:be:c0:af:11:46:f2:b3:97:b8:7a:3e:
         5e:e8:88:c4:61:2a:69:97:2d:a0:43:cc:17:78:4f:84:b8:22:
         ac:9c:f7:6b:a4:75:d8:72:f9:f9:2c:8f:85:54:eb:b8:28:f3:
         97:46:75:f9:d9:36:03:68:61:dc:e6:cf:54:e1:1d:dd:f1:c3:
         d2:e2:f7:ac:d0:b4:55:51:86:c4:c4:e3:f1:e6:41:0e:bb:70:
         48:90:a3:01:32:f3:1a:9e:2f:46:96:4b:e4:be:a5:04:f5:18:
         bb:0e:60:1c:43:2e:30:d7:82:d4:55:22:97:99:45:be:fd:4d:
         c2:a5:2b:39:d0:a1:ec:1f:21:f0:10:c5:c1:0e:84:cb:fe:5e:
         a9:a3:a3:38:9e:81:25:a8:87:de:75:3c:f6:38:da:40:4c:be:
         65:c9:bb:13:02:88:43:54:e1:dd:c0:38:1e:46:2f:f9:0c:c1:
         ed:90:0e:05:22:c2:5f:8a:0b:d0:4a:43:81:fc:c8:f5:da:86:
         2b:c3:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----