Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
File:                     f5d93400-0a6f-4938-9925-856c6ace39df.cer (raw, json)
Hash identifier:          kxURymQzfivyCNe7XbNhYesd/L644kvsqCkYr0OKrCI=
Subject key identifier:   AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285844FC89C75B2748E2C7B8A029C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Feb 2024 12:00:27 +0000
Certificate not after:    Wed 22 Oct 2025 18:06:42 +0000
Subordinate resources:    AS: 14439
                          AS: 54334
                          IP: 198.133.237.0/24
                          IP: 216.114.75.0/24
                          IP: 2602:fa02::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fc:89:c7:5b:27:48:e2:c7:b8:a0:29:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Feb 23 12:00:27 2024 GMT
            Not After : Oct 22 18:06:42 2025 GMT
        Subject: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d1:1e:7c:8b:7a:55:5c:5d:2f:6e:35:a7:6f:
                    8f:fd:23:43:bb:de:8a:8e:4e:ae:51:ef:d9:5f:99:
                    74:13:e8:89:8c:ee:d3:c1:6c:48:4c:fc:af:45:d9:
                    80:fe:1f:6b:d9:0b:c9:22:8a:53:d8:86:7a:19:fb:
                    e5:9b:15:31:b9:56:1c:a7:2c:20:aa:69:43:bd:64:
                    f2:fa:5a:bd:8b:05:07:aa:b6:ae:37:4f:9e:08:27:
                    07:78:6e:71:52:91:58:b7:ae:06:2b:75:7c:a3:05:
                    2d:a7:e4:f4:cd:e6:68:37:2e:66:1b:aa:1c:e1:0c:
                    61:c6:ff:e2:c0:df:f1:ab:12:12:21:42:1e:16:90:
                    0e:f5:02:bb:b6:52:22:f9:d2:cb:f9:f6:7c:df:dd:
                    44:3e:b3:d3:91:be:c0:4e:9b:1b:5c:f8:78:88:e5:
                    38:9b:70:a6:dc:53:ea:89:ce:7d:12:ea:3b:71:38:
                    34:cc:fc:e5:ce:8b:02:78:d0:8f:08:b0:8f:a0:b4:
                    e5:d6:89:2a:85:4f:08:1d:ac:01:c6:ea:62:42:d9:
                    72:23:6c:bb:9f:7b:4e:2d:32:56:64:75:de:9f:a5:
                    d3:85:3c:a1:c2:cf:fe:08:4f:e6:89:01:7c:59:da:
                    39:ff:d9:b1:8d:3e:e1:16:61:b5:51:b2:d4:b3:c3:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.237.0/24
                  216.114.75.0/24
                IPv6:
                  2602:fa02::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14439
                  54334

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:24:8e:c3:e2:92:f9:fa:cd:d8:89:b7:b4:26:28:cf:5c:5a:
         11:a7:e7:44:82:0a:93:45:70:9e:69:86:41:7b:15:57:09:09:
         60:7e:49:f1:31:fe:cc:64:af:3d:15:11:8c:4e:17:47:6b:83:
         3d:5e:dd:13:55:ed:42:4b:da:ee:b6:7b:68:9a:4f:f9:0b:6f:
         26:e3:55:9f:33:80:ad:af:35:a6:16:c2:c8:8c:d8:85:68:fe:
         a7:1f:2e:24:7f:85:2c:8f:13:32:ba:61:9e:01:4b:c6:bc:29:
         66:d7:b8:67:73:ac:0f:f2:cf:fc:ec:23:f5:1e:8e:89:af:94:
         aa:d1:78:3a:28:82:d5:14:b0:31:59:57:17:89:75:50:c2:fd:
         a3:82:e0:38:75:c5:e7:12:c4:93:8e:6f:40:7f:31:f0:64:ae:
         dc:09:72:ae:6c:34:77:8f:dc:51:fe:47:23:aa:64:79:21:e6:
         a2:82:77:c9:ba:b1:69:f7:ae:aa:01:90:36:46:9c:2f:54:cf:
         a6:84:9b:93:fa:3f:77:7b:a1:9b:03:bd:ac:04:70:37:22:bd:
         1d:fc:db:72:2e:2d:2b:75:ad:fd:18:59:48:9c:76:2a:e6:54:
         b3:21:b1:17:bc:60:60:c8:b7:24:11:23:a1:ac:00:6b:16:4d:
         6d:d3:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----