Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
File:                     22f50b3c-0004-4753-bb50-b088e784de4e.cer (raw, json)
Hash identifier:          oqgNgH3YaEtLNSAOypht9XiIs0ysfC6B46b/GJ/X9Ac=
Subject key identifier:   D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858424F41158C6418B867198B8380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Jun 2023 00:45:15 +0000
Certificate not after:    Thu 25 Sep 2025 00:45:15 +0000
Subordinate resources:    IP: 158.51.9.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4f:41:15:8c:64:18:b8:67:19:8b:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jun 23 00:45:15 2023 GMT
            Not After : Sep 25 00:45:15 2025 GMT
        Subject: CN=22f50b3c-0004-4753-bb50-b088e784de4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:51:44:a0:11:b5:bf:90:7d:35:73:bb:35:b3:
                    1f:9e:cf:b3:e4:2b:31:31:cd:b4:e6:80:c7:da:7b:
                    77:c6:3d:71:c6:84:00:a6:b4:b7:78:97:1d:a8:87:
                    3a:fb:51:a2:0f:05:60:b6:b7:1e:92:9c:a1:a8:a5:
                    f8:0f:26:ba:59:2e:06:53:f0:a9:ef:8d:65:65:11:
                    19:91:2f:3d:80:e1:bc:c6:f7:2f:22:32:31:ff:20:
                    5f:1a:af:02:3f:c7:61:63:2d:a6:10:73:03:2b:c1:
                    c8:d6:0c:21:ff:b4:54:34:31:c2:f8:b6:6b:e1:b6:
                    19:57:76:f4:cd:83:df:28:87:72:66:ed:84:2a:60:
                    1a:06:77:4f:2d:ea:31:74:82:9a:4d:af:a7:e6:b4:
                    0d:73:d5:a6:a4:93:78:33:ed:d7:b0:28:62:79:82:
                    bd:44:9b:5a:2f:05:7e:7b:0d:6c:6b:a0:99:0f:26:
                    51:b1:ea:42:69:12:68:88:48:b1:aa:f8:30:c6:d9:
                    a1:f5:27:44:eb:76:61:e9:89:9e:f6:70:43:1e:91:
                    37:b7:38:fc:9b:ec:f3:35:87:39:db:c8:0d:4d:02:
                    b1:68:87:61:ff:a0:08:be:2d:7a:88:bf:af:74:b6:
                    7f:ea:7a:de:bf:2d:74:02:e6:92:0a:a8:ef:5d:43:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:a0:91:87:2d:c0:98:2d:db:96:cc:72:b2:61:18:bd:f6:62:
         4d:9c:0d:00:08:3e:45:66:27:fe:84:07:fb:71:06:2a:d8:19:
         bf:a1:4f:95:cd:47:7e:69:86:eb:26:57:b9:6e:81:df:41:3a:
         6b:26:4a:c7:ac:7a:70:74:bf:4d:90:7c:aa:db:9a:37:53:67:
         fc:0a:1f:af:25:57:73:b5:96:25:77:3c:04:11:12:9e:9c:d4:
         16:1f:d8:6e:c3:27:02:f7:40:ed:e9:ea:92:8a:15:ea:93:c4:
         d9:9f:fa:ee:14:2c:e0:7c:c6:42:4a:87:73:d7:b0:e7:7c:dd:
         10:6f:28:35:71:eb:96:74:43:9b:d3:06:63:c1:40:b2:fd:b7:
         88:d1:3d:89:16:e9:a4:1a:53:cf:ee:87:5b:bb:b9:6a:85:27:
         be:88:1b:a8:34:82:8c:a6:9c:bc:93:23:37:ee:67:16:a0:ed:
         b4:b8:c4:59:4c:ab:90:a9:08:fa:3a:f6:f2:b0:4a:00:2b:25:
         7e:ac:a0:aa:2a:8e:38:74:3a:65:f5:8c:3b:7c:2d:fe:d9:fd:
         45:4b:5a:e8:16:f6:9a:0a:9c:fd:ad:9b:77:49:79:0a:2a:d6:
         38:5c:ff:77:f9:b7:8b:00:73:56:27:71:48:2f:a1:e1:df:72:
         ef:b1:45:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----