Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer
File:                     22a89d78-807f-48bb-8913-4e15f4878bfb.cer (raw, json)
Hash identifier:          UQZyAOhgaW0G/YDZzL+LiY7LmVyLfcGz6uChJMygSws=
Subject key identifier:   41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584246E10B69C0D0A0A364951100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 20 Jun 2023 00:45:17 +0000
Certificate not after:    Mon 22 Sep 2025 00:45:17 +0000
Subordinate resources:    AS: 13786
                          IP: 207.135.208.0/21
                          IP: 2605:4a40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:46:e1:0b:69:c0:d0:a0:a3:64:95:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jun 20 00:45:17 2023 GMT
            Not After : Sep 22 00:45:17 2025 GMT
        Subject: CN=22a89d78-807f-48bb-8913-4e15f4878bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:be:c7:4a:ff:aa:68:61:a5:0f:c7:a9:19:
                    b5:45:ee:52:fb:14:f9:d0:40:ae:16:10:0e:fd:0d:
                    b5:aa:45:08:67:79:0b:55:c8:49:0c:28:72:d8:34:
                    54:08:20:13:3d:4e:1c:dd:e5:20:9e:82:b4:ff:bb:
                    51:aa:33:e2:f3:ef:4c:a0:28:a7:a3:c7:1f:b0:0e:
                    a4:2b:e4:10:0f:a6:2b:cf:a1:9b:b5:02:80:07:88:
                    36:1f:56:02:4d:32:f6:06:19:35:b2:f9:8f:87:19:
                    c3:6a:c5:2a:55:eb:4f:33:ac:c1:cd:81:95:b9:7f:
                    09:cb:01:9a:38:32:5c:8c:80:27:d0:1f:ef:ee:3a:
                    f7:9f:b1:57:91:b9:b2:82:90:1e:f9:7b:80:f0:7d:
                    8e:94:e9:f6:8b:b1:90:1d:72:19:91:ce:3d:1a:7d:
                    39:3b:2e:88:41:5e:74:af:a1:04:2d:0c:da:ee:94:
                    43:36:96:71:87:b3:9d:97:85:7a:ff:d3:29:88:e4:
                    34:59:37:f4:94:05:c3:c3:1c:15:31:c0:b9:67:69:
                    1b:55:cf:38:31:e1:9b:56:4f:9a:61:8d:0e:da:56:
                    e7:d7:a2:82:86:18:92:1b:3b:69:20:d9:ca:e8:e1:
                    a1:1a:05:40:f0:8f:c4:c9:8d:4d:13:f3:70:0a:3b:
                    66:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.135.208.0/21
                IPv6:
                  2605:4a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13786

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:8f:c3:73:d5:41:26:68:bc:34:a3:06:16:fb:5a:eb:e7:0f:
         a6:ea:f4:57:47:03:7c:2a:5a:bd:4a:32:72:b2:17:08:fa:a4:
         ce:c7:7b:fe:d8:2f:74:88:49:5e:a0:c4:93:b7:f8:fd:33:79:
         34:aa:3e:28:31:0d:3d:cd:e2:22:c2:e4:c9:aa:57:64:eb:a8:
         4b:3f:38:d4:5d:a1:72:0f:81:6f:21:e3:ba:c9:a5:e7:75:d0:
         15:b1:9c:4a:88:54:4b:ff:68:5d:b4:4c:57:9f:61:7e:ac:2d:
         8f:e6:09:27:8b:27:dd:c9:83:cb:e3:67:c4:73:03:a6:84:8e:
         b3:ce:cc:91:66:ae:4d:11:d4:65:70:17:85:a3:12:bc:47:3f:
         18:35:60:4f:dd:ce:a9:60:b0:39:f2:76:24:8b:0c:d0:cb:70:
         ad:f2:a9:c3:0e:2c:8e:80:b7:d7:b3:10:74:c7:62:da:b2:15:
         7e:8c:ea:2b:c8:95:ec:8d:61:07:e4:04:bf:2e:e3:27:81:19:
         95:1f:d3:30:15:c4:da:23:9e:d7:6e:d9:e4:1a:cc:d7:02:e5:
         2f:65:2c:8d:d1:97:62:ed:e5:29:a2:62:4c:a5:d2:6f:88:84:
         cb:d4:ee:00:da:76:b4:ea:a8:fd:e7:46:bb:db:09:bc:a9:a3:
         27:8a:a1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----