Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer
File:                     fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer (raw, json)
Hash identifier:          wIqYaX34ndFLECvzIxjX8C7IrAZDYXYsYQLPZ2AOpUI=
Subject key identifier:   16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584754D92F36E93EC559BC5ED140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 25 Sep 2024 12:45:27 +0000
Certificate not after:    Tue 29 Dec 2026 13:45:27 +0000
Subordinate resources:    IP: 23.154.216.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:d9:2f:36:e9:3e:c5:59:bc:5e:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 25 12:45:27 2024 GMT
            Not After : Dec 29 13:45:27 2026 GMT
        Subject: CN=fab6ccf2-19f6-4e96-aad7-9cb606e13cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:68:28:3e:9b:fa:7d:03:22:10:b3:f7:a2:
                    45:b5:24:e5:10:df:66:04:dc:1e:a7:82:61:c5:29:
                    8a:e0:88:08:78:2f:36:8f:15:c5:e1:f3:90:36:0c:
                    e2:59:af:b0:2e:a6:c8:21:6f:5a:61:8f:f1:53:7f:
                    d4:74:69:62:8a:5a:a2:a3:82:86:ea:f8:8c:e1:b8:
                    09:a3:fd:78:64:9e:b0:e8:63:f7:ca:98:51:28:8f:
                    15:c0:fc:ef:e1:5b:03:0e:3f:81:e6:57:2a:4d:ed:
                    12:be:11:b6:3e:c6:3c:6d:ce:9c:f1:b0:25:d0:03:
                    4c:4f:17:ef:76:97:34:4a:83:16:be:58:a6:39:3a:
                    75:e5:57:44:83:9d:ae:72:25:cc:0f:1c:a7:18:fd:
                    76:eb:9a:b0:95:f8:c3:29:ad:2e:c7:bd:ec:a9:3b:
                    bd:45:af:e2:02:af:e9:de:2a:d0:96:32:e8:d8:00:
                    4e:8e:e0:c3:d2:f2:ec:72:da:73:0d:67:e7:d5:da:
                    48:17:4a:04:48:75:90:17:69:b7:dd:59:93:64:76:
                    55:ee:39:31:59:47:12:02:4a:d0:56:3f:b3:b7:01:
                    f7:97:da:97:f8:3b:f7:71:3d:fa:a1:0c:f2:12:47:
                    cc:8e:65:58:66:20:dd:5a:08:bc:24:68:1c:34:3a:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:17:d0:74:7d:a4:5f:94:3d:0a:48:34:10:d9:63:ea:95:9f:
         05:db:53:2a:89:7f:08:1b:d9:94:ab:ad:df:4c:07:9d:e3:66:
         cb:81:c7:0e:2b:7a:45:f6:0b:2f:66:5b:f9:4e:08:9d:23:17:
         0b:b4:b7:fa:f1:6a:52:fe:16:09:3d:8d:d8:c8:4c:07:af:48:
         50:01:4d:76:11:ab:d2:a3:a1:c4:48:35:f2:82:79:34:c6:e7:
         24:eb:bf:9f:0d:49:77:c6:45:3c:f2:28:88:24:83:91:b4:85:
         f9:dd:a1:b0:6c:53:36:dd:95:43:cc:58:0e:1a:da:17:f6:67:
         84:c3:20:0d:c8:60:be:75:c2:e0:0a:66:66:c2:9a:55:22:d1:
         bf:0c:0c:3a:74:53:b1:04:0a:9d:1b:05:6c:09:60:ce:02:ee:
         bc:e4:11:4b:67:69:54:71:ff:fd:58:07:ce:02:ee:98:1f:cb:
         a7:83:12:ab:d3:ad:48:f3:bd:dd:37:17:9a:e6:a0:07:84:6b:
         77:f3:bc:bf:b5:d1:71:93:91:2c:be:14:16:fb:bf:ef:d8:c2:
         f6:c0:9d:13:51:b7:92:f2:b8:aa:d7:27:5d:e6:da:e2:cf:32:
         3c:13:26:f8:8e:46:c6:05:97:9a:c9:dc:42:dc:d0:b4:fc:2a:
         13:4a:2e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----