Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
File:                     ec697c9d-325a-460f-ab2f-8cf71b1be984.cer (raw, json)
Hash identifier:          Ae8i+OQvrgrqgtn88Xcyy+g2ainIYDa3FCwCoDpA5S8=
Subject key identifier:   12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842D48FDFBA04B808F252F5C7C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 09 Aug 2023 18:46:31 +0000
Certificate not after:    Tue 11 Nov 2025 19:46:31 +0000
Subordinate resources:    AS: 395425
                          IP: 72.42.224.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d4:8f:df:ba:04:b8:08:f2:52:f5:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug  9 18:46:31 2023 GMT
            Not After : Nov 11 19:46:31 2025 GMT
        Subject: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:03:f7:a1:3c:e6:0a:9a:51:85:cc:b5:90:
                    af:1e:7f:49:d8:b8:10:b1:e5:95:54:dc:2c:35:b2:
                    da:36:51:5d:8c:c1:a0:4a:a5:b3:c4:a4:18:ae:44:
                    00:9a:50:9e:7f:2b:50:fc:8e:87:8e:5b:31:c1:f4:
                    ea:ca:c7:8e:8e:ac:4b:9f:f2:2a:29:fa:f7:ed:7d:
                    d4:d2:26:51:90:33:93:12:cd:a4:32:af:9c:bf:eb:
                    ac:d5:60:81:47:92:62:ba:b3:28:0c:52:03:a9:87:
                    ae:c3:60:03:b8:ac:f1:d3:43:a8:f0:bc:de:65:58:
                    4c:e2:ba:85:2c:84:47:65:ac:fd:8f:b0:b6:b1:9c:
                    a5:92:4d:f9:83:82:83:35:8a:e5:fa:a7:43:04:b0:
                    18:41:8b:6f:02:e4:e5:f1:87:6d:c8:73:52:3b:fd:
                    28:9c:8f:6c:5b:c0:1f:63:5b:47:7b:c0:4e:31:bb:
                    b3:49:90:ac:0e:c6:99:e8:a5:9a:d0:f9:58:db:9e:
                    ff:00:92:dc:7b:71:df:df:59:3e:f2:ea:3d:df:71:
                    c7:a5:1f:53:62:1f:e6:85:8a:a1:61:e9:8a:be:bc:
                    8e:15:8b:c0:7c:0f:dd:9f:77:a2:53:77:74:d7:7b:
                    76:16:cb:f9:4a:6e:58:57:a6:27:d9:ef:e2:d4:dd:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.224.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395425

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:99:82:f1:64:61:8b:a7:35:6b:9c:66:97:fd:88:ab:53:a4:
         ed:ea:ec:61:cf:74:cf:47:86:ac:c6:c1:a9:a1:dd:61:bf:ff:
         e0:d6:c8:1f:f6:f0:fd:8b:d2:e0:b6:e7:4c:94:bf:b8:0f:ce:
         cd:fe:b9:3c:e1:ff:ab:f7:cc:71:54:8b:21:0d:51:04:98:46:
         ac:40:66:27:3c:4a:d1:ff:53:f1:7c:bc:13:91:36:78:ba:63:
         75:ba:ab:ee:2f:4e:77:b3:74:38:2d:b6:4d:29:90:aa:b7:7d:
         a3:ee:be:d1:41:8f:d2:07:d4:4e:76:08:14:bc:e1:42:96:6d:
         b9:ac:99:ca:ef:09:70:e2:d6:80:b4:93:75:d8:98:6a:eb:02:
         94:13:33:a6:38:ac:ca:b3:27:4d:a8:bb:ed:2b:76:e3:3f:26:
         41:2b:53:98:b1:f6:e6:b0:5c:8b:46:66:64:ce:23:fd:6d:76:
         8d:53:e4:0f:c6:de:3d:dd:a8:53:af:7b:3a:bd:93:10:9f:c5:
         fc:a7:a7:6c:8b:fa:9b:dd:08:0a:90:0d:9c:b3:ad:2c:54:60:
         0e:23:d4:2c:53:77:b6:87:5f:9c:fe:11:44:7d:39:36:a1:62:
         ef:39:01:89:cc:ab:7b:3a:33:4a:61:db:58:3e:50:2e:f2:a2:
         a1:5d:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----