Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
File:                     efe14a74-8339-4fa1-885a-2ed37947399a.cer (raw, json)
Hash identifier:          aF5XTGHh2RT9muM5n90YLS7OC3UUjUq3PrwUTB4OVvw=
Subject key identifier:   C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858428D95C653A62322800630FA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 15 Jul 2023 08:36:01 +0000
Certificate not after:    Fri 17 Oct 2025 08:36:01 +0000
Subordinate resources:    AS: 14956
                          IP: 2602:fa59::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8d:95:c6:53:a6:23:22:80:06:30:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 15 08:36:01 2023 GMT
            Not After : Oct 17 08:36:01 2025 GMT
        Subject: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:05:95:95:89:a0:1c:0d:0c:9a:bc:f6:c4:c7:
                    5f:79:f0:05:66:f6:72:bf:a2:f4:a4:9f:a7:68:ff:
                    35:61:eb:2a:7f:09:e0:6d:82:6e:71:dc:b0:91:20:
                    23:59:c6:e9:c5:d8:5f:21:48:d0:96:f7:a6:d4:42:
                    a0:c7:09:93:51:6d:b5:c3:b8:89:93:89:fe:17:15:
                    70:86:4e:a6:ac:2e:90:51:75:24:49:17:ed:14:c1:
                    ae:48:9b:82:14:ae:ca:6e:b9:74:cc:76:9a:1b:40:
                    a3:cf:be:fe:16:db:fe:b2:8b:e5:a0:07:2e:de:2a:
                    de:c0:52:57:7b:68:e1:60:df:07:33:51:77:75:6d:
                    bb:83:d9:8a:13:19:85:ad:67:c8:d4:24:af:f7:a7:
                    f9:c7:3c:58:69:21:03:d2:9c:de:bd:8a:24:60:f6:
                    61:be:7d:b8:31:0f:11:4c:55:f7:8d:2f:88:1e:b9:
                    52:a3:bf:84:80:f4:f1:29:86:15:31:3c:c0:45:7d:
                    f1:57:9a:06:7f:52:22:5c:07:b3:b6:9b:e8:ab:75:
                    00:5d:d2:1a:4c:9a:b8:17:f9:c0:4a:3c:50:32:f6:
                    2d:1a:e8:7b:15:b9:f3:61:8f:5d:2d:42:86:f7:5f:
                    5d:be:07:c8:f3:75:1c:af:81:25:d4:1d:d7:3f:cd:
                    a0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14956

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:2e:e5:a4:ab:89:cc:16:1c:79:2e:62:16:90:e2:cb:44:
         41:1a:9a:ee:f6:e3:1b:0d:82:ea:de:a3:3a:3d:a0:12:f4:3d:
         80:25:9c:7c:4d:cc:c0:37:3c:bb:77:47:a4:f3:95:92:41:f8:
         c9:28:e6:87:4c:9d:fa:e3:6b:d5:02:ae:75:25:a3:e4:6f:e9:
         f8:64:b7:d5:cd:3d:73:4f:6c:fb:8e:b8:93:d8:a5:cc:e8:aa:
         7b:78:36:2d:32:50:8e:8c:0b:8a:a0:98:5c:ab:66:c8:11:a0:
         f5:75:35:f3:30:14:d2:62:dc:d7:ee:b2:a8:b3:e1:c1:9b:2a:
         7f:2d:50:15:c1:96:f0:5e:cf:5f:1d:dd:2b:09:3d:0c:b3:ce:
         00:5e:bd:12:9c:6d:df:72:63:bc:2c:a4:c4:ee:a4:b7:d2:bd:
         df:91:0a:7c:40:27:48:d0:9a:5a:4a:10:9a:5e:4f:89:36:f8:
         3c:c0:5b:0d:8b:0b:06:20:e7:34:bb:bf:dd:73:12:ab:ec:70:
         5e:3e:c7:76:c6:fe:ae:d6:86:85:25:82:06:39:89:31:3c:aa:
         cd:52:86:5a:3f:63:04:b1:ad:c7:d1:61:f5:02:5b:28:80:bb:
         21:df:a6:7f:8f:a2:82:35:42:bb:fa:2c:93:9b:36:49:36:00:
         38:e3:eb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----