Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b6c893a-a2e7-4137-872a-67f783df5e23.cer
File:                     1b6c893a-a2e7-4137-872a-67f783df5e23.cer (raw, json)
Hash identifier:          P7+15RSkkpiyX/2UK3hvv8/BONjwUX6VRL1GTub31gY=
Subject key identifier:   85:01:8A:1F:29:34:51:E7:61:53:72:84:B4:E0:73:E2:E5:4B:D1:AA
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584371984A96B3C98405FE5E6F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b6c893a-a2e7-4137-872a-67f783df5e23/1b6c893a-a2e7-4137-872a-67f783df5e23.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b6c893a-a2e7-4137-872a-67f783df5e23/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 05 Oct 2023 00:45:23 +0000
Certificate not after:    Wed 07 Jan 2026 01:45:23 +0000
Subordinate resources:    AS: 54506
                          IP: 23.152.80.0/24
                          IP: 2602:804:8000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:71:98:4a:96:b3:c9:84:05:fe:5e:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Oct  5 00:45:23 2023 GMT
            Not After : Jan  7 01:45:23 2026 GMT
        Subject: CN=1b6c893a-a2e7-4137-872a-67f783df5e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c5:85:e4:83:0b:8b:5a:34:6d:30:09:20:a5:
                    2a:aa:17:02:3b:51:e1:5d:bb:36:61:4f:ad:c4:32:
                    79:f0:7c:b2:cc:92:f5:65:f3:90:b3:6a:89:ca:b8:
                    a1:94:d0:18:fc:df:c2:1e:eb:f5:bc:96:18:89:3d:
                    df:08:86:4f:7c:c6:e3:13:db:b7:e0:45:4a:6c:63:
                    b2:63:3b:de:6c:82:ad:e0:73:a7:63:0d:85:68:2e:
                    3f:07:20:9d:5c:ff:6e:35:bb:6f:7f:1b:c4:58:86:
                    a3:2a:fa:99:c7:9c:37:aa:9d:a8:3e:56:45:3e:03:
                    ab:f2:4a:08:2d:53:7d:38:3a:5b:ee:97:c5:75:ee:
                    e2:c8:3c:d2:93:6f:b5:93:d5:58:42:8a:04:42:b6:
                    ba:3a:50:01:1b:bc:d5:1e:d0:5d:ef:9d:db:ef:7f:
                    18:48:c0:30:be:89:41:9d:c5:fa:9b:ad:25:71:96:
                    07:7d:f8:d1:74:1a:c6:dc:2e:d7:26:6f:e0:3f:8f:
                    8b:eb:6c:1e:34:11:2d:cd:47:93:78:ef:4e:cb:d5:
                    08:59:de:ac:28:e5:04:c4:b5:e0:36:2c:dc:14:d8:
                    a1:a3:9b:34:c6:e6:f0:c1:e8:3a:71:96:0f:a1:c6:
                    f2:bd:fa:49:0f:12:9c:86:ea:fd:82:23:3c:3f:c1:
                    07:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:01:8A:1F:29:34:51:E7:61:53:72:84:B4:E0:73:E2:E5:4B:D1:AA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b6c893a-a2e7-4137-872a-67f783df5e23/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b6c893a-a2e7-4137-872a-67f783df5e23/1b6c893a-a2e7-4137-872a-67f783df5e23.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.80.0/24
                IPv6:
                  2602:804:8000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54506

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f3:8f:20:a2:0d:d4:ae:84:96:a6:3d:39:67:b0:5a:50:e5:
         de:78:cf:8c:5e:d5:09:0b:3f:52:e3:2b:3d:34:4a:1f:4e:0a:
         66:b6:c5:a3:bc:1b:d6:62:ab:33:c0:46:33:06:79:a9:59:fa:
         0f:f2:5b:2c:07:b0:d8:b4:80:7b:4d:94:8b:d6:b9:99:83:8a:
         bf:4d:4b:1f:0f:a2:c5:e7:2d:c8:a0:59:5b:cc:40:3a:a4:cf:
         5f:51:66:0c:57:a9:4d:9f:81:a9:d6:23:29:25:cd:be:af:2d:
         9d:c8:cd:46:2d:1a:89:99:a3:80:06:9e:10:25:ef:8f:8e:76:
         43:ce:9e:40:aa:9f:db:07:45:40:1a:ad:ad:01:5f:b6:1c:ae:
         40:ca:74:b6:70:37:d2:6d:a6:11:b3:b5:76:dc:5e:ce:b4:a4:
         e7:ae:1b:d2:71:55:d7:50:bb:07:2a:34:15:de:60:55:62:40:
         5a:75:57:98:50:7e:be:93:7d:d5:42:44:8c:ec:ce:50:bb:d2:
         6e:f3:12:02:73:08:2c:c5:5a:8c:7d:6d:72:a8:03:06:0b:e9:
         8e:06:85:d6:4f:db:d8:7a:5c:38:22:db:30:46:3b:66:ab:85:
         a3:08:e1:9c:e7:20:a4:e6:6e:5d:d4:5d:4e:bc:ad:65:c4:89:
         89:5d:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----