Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer
File:                     f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer (raw, json)
Hash identifier:          uSgK7XykAB1kCPiaLGhmOJkGsPIspyxikdMIiopSGXQ=
Subject key identifier:   18:29:B3:63:61:A7:54:DB:72:0C:B3:00:F5:31:20:17:95:8D:5D:CB
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842593D0CB2B486AD935582A980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Jun 2023 14:35:13 +0000
Certificate not after:    Sun 28 Sep 2025 14:35:13 +0000
Subordinate resources:    AS: 25950
                          IP: 192.169.24.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:59:3d:0c:b2:b4:86:ad:93:55:82:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 26 14:35:13 2023 GMT
            Not After : Sep 28 14:35:13 2025 GMT
        Subject: CN=f8b0cb92-fb04-41d4-b39f-43c745f21faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:c7:0c:7c:b8:0e:bb:c2:c9:8f:91:ab:ca:
                    ed:05:bc:58:69:3f:59:f7:8d:e1:6f:74:1c:57:03:
                    6a:85:3a:da:03:08:59:6d:1b:20:ab:43:2f:d1:43:
                    8f:44:4e:cc:40:47:45:36:0d:47:0d:7e:41:49:7a:
                    f8:63:63:60:9c:c6:92:a1:7f:8c:ab:8e:4e:f2:54:
                    b2:bd:5b:fa:45:18:4a:62:08:c5:3f:3a:75:ac:9d:
                    55:bf:3b:20:dd:87:ce:3b:05:cc:33:44:25:d4:49:
                    b7:d0:dc:5b:e8:47:ec:4d:9a:3b:67:05:c6:e0:85:
                    b8:6c:ff:54:1f:38:75:1d:a0:8d:f7:42:35:45:18:
                    8d:5e:cc:e0:a6:5d:24:f9:d6:99:4b:12:85:64:f6:
                    25:26:92:8d:d8:73:84:6b:11:bb:c9:80:d4:a1:ed:
                    df:40:ef:bb:9e:91:53:0f:40:f4:16:5e:ee:16:06:
                    63:b0:4b:8c:13:bb:64:75:57:7e:45:58:93:73:22:
                    44:4f:ae:ca:2d:91:f2:67:60:ac:ed:a8:26:6c:5f:
                    e0:f5:e6:93:b6:c3:c4:c1:fa:25:a8:f2:25:06:e5:
                    1f:39:3f:f5:c7:a5:95:7d:5f:d6:38:fe:03:5b:79:
                    dd:33:0a:ba:4b:df:d5:49:bd:f1:89:a8:18:9b:94:
                    48:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:29:B3:63:61:A7:54:DB:72:0C:B3:00:F5:31:20:17:95:8D:5D:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.169.24.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25950

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:12:df:9a:88:4a:8b:c4:12:e2:45:7d:fc:14:af:0f:86:33:
         32:e3:03:ac:fd:fc:7b:81:12:18:b6:ba:96:b9:07:f6:aa:79:
         af:66:0a:7a:f1:94:38:5e:53:36:29:86:6c:19:5b:bb:97:18:
         9b:99:21:b4:87:f4:db:70:21:09:27:60:30:3a:7a:e2:55:7a:
         a7:0f:93:30:df:e9:02:7f:9e:0f:e3:ca:50:92:16:d1:a1:2f:
         f2:0f:9c:b7:58:b8:86:dd:f6:b0:25:17:1f:6c:22:51:f2:f7:
         83:18:30:a2:b7:c4:4c:01:6a:8a:1a:ee:b7:6d:04:7b:66:0c:
         45:18:9b:e2:87:a1:86:8f:d6:02:ca:ac:6a:cb:05:66:01:05:
         59:6a:de:06:dc:e9:93:78:99:e6:6f:cc:d2:83:d4:27:ff:44:
         f5:c6:3c:1b:4d:31:52:b6:eb:fa:49:ef:cc:33:1f:68:df:ec:
         6c:55:1c:1e:47:70:bf:1e:54:f0:63:ea:7f:00:b7:6b:81:bb:
         a5:70:67:c5:14:a8:1a:30:e0:80:53:61:90:b9:51:b6:9f:23:
         42:00:ca:6a:77:9b:22:47:62:6d:96:7f:bf:a2:17:88:5c:ab:
         31:b0:2d:fb:a5:e3:a9:19:4f:49:00:89:89:f4:f6:24:34:b7:
         e9:88:f2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----