Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer
File:                     6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.cer (raw, json)
Hash identifier:          QL+y9egYIo0VZsgXNep/WHobdt+QQl5kMyRNOzGP6mI=
Subject key identifier:   08:C5:16:FE:55:6B:05:62:D3:38:35:D7:67:B5:3F:C0:57:FB:97:EE
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285844DF6DA77EA0D22B2A8DD9D600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 13 Feb 2024 01:45:20 +0000
Certificate not after:    Mon 18 May 2026 00:45:20 +0000
Subordinate resources:    AS: 40041
                          IP: 205.167.215.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:df:6d:a7:7e:a0:d2:2b:2a:8d:d9:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 13 01:45:20 2024 GMT
            Not After : May 18 00:45:20 2026 GMT
        Subject: CN=6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:16:6a:be:78:1d:65:15:d9:eb:75:81:06:
                    fc:e7:4f:b0:ab:7d:5e:dd:d5:61:7d:8e:6f:10:c9:
                    2f:96:cd:c4:fb:d1:b7:c8:e9:76:d3:f1:1a:d6:26:
                    fd:67:ec:60:e9:c6:84:ee:00:da:7c:01:de:2b:6a:
                    e3:04:95:0a:6e:fa:e1:81:8d:9a:e2:38:54:cf:04:
                    23:db:22:55:4c:c3:1a:7d:93:54:3e:13:14:f1:d1:
                    bf:a7:87:17:45:36:46:9e:d8:b4:af:81:61:ee:d7:
                    4e:42:2b:6a:cd:fa:d2:76:91:9c:1a:ab:84:c8:89:
                    ec:97:09:b6:2f:54:8a:2b:9a:9a:ed:ce:9b:47:e8:
                    7e:7d:ef:2f:84:74:7f:91:64:07:11:ed:6c:c1:46:
                    ad:96:c0:e4:6d:d7:2d:af:9f:8b:0c:22:f9:44:ff:
                    f6:e3:70:34:3c:8f:61:5f:e9:c3:8e:2b:eb:1b:11:
                    61:fb:35:ac:1b:00:c2:bf:75:5e:f8:1b:54:94:78:
                    b5:47:ef:ba:1e:b7:ce:e2:8e:9d:24:31:73:32:63:
                    bb:44:c7:7f:61:0e:3b:95:a3:9e:5a:2c:31:ca:71:
                    e5:7c:5c:66:72:b7:d9:c4:59:05:ab:fc:b7:a6:4b:
                    3a:dd:2e:59:c8:55:c6:53:0e:0e:15:c8:a9:88:ef:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C5:16:FE:55:6B:05:62:D3:38:35:D7:67:B5:3F:C0:57:FB:97:EE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1/6a0dc52e-10c4-4c70-aba3-3a7c6e9e5cd1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.167.215.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40041

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:83:bc:70:9d:ad:54:c6:1a:2e:f2:00:47:bb:ad:a1:eb:da:
         bc:c3:9e:0f:6f:7e:7f:1d:1e:e5:df:c5:7f:3b:a1:81:82:0f:
         b0:1a:09:c1:76:1f:da:b7:b3:27:83:b1:5e:d1:ad:75:67:33:
         9b:82:78:0f:48:b1:b0:6b:3a:4c:fb:b5:9d:f0:ce:fb:75:91:
         cb:ef:1d:bf:25:bd:bb:ad:2b:f0:44:bf:cf:6c:12:e0:33:54:
         79:83:13:42:7b:35:23:37:b4:0d:4a:59:24:8e:f4:16:5d:a8:
         e4:04:f7:be:5f:2d:89:f3:d9:5a:ab:b9:17:81:9a:ac:03:ce:
         49:3a:71:ea:cb:e4:60:67:1e:f4:9f:5e:bb:66:5a:74:f5:bd:
         28:aa:59:f7:10:40:8e:a8:5d:2a:da:63:44:3e:fa:44:c7:2d:
         ef:3c:67:90:67:c4:cb:8b:8c:83:5f:be:97:06:07:29:81:b2:
         ef:f0:a7:61:9e:c5:14:70:38:32:d3:b5:54:65:35:fe:04:8e:
         06:f4:4c:c6:45:f7:42:76:95:3e:61:f6:c1:26:e5:ca:9c:3e:
         ba:d2:e9:27:47:f1:14:7d:bf:50:c2:d2:04:eb:71:be:6c:6c:
         50:30:45:a0:c5:c1:d4:09:d3:5b:ce:c1:38:d7:96:e4:95:b4:
         32:47:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----