Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/833721ce-28b6-494a-ae40-ca0895b9097f.cer
File:                     833721ce-28b6-494a-ae40-ca0895b9097f.cer (raw, json)
Hash identifier:          rOQYls5xV7LtC5T7G3rqn6nc1ZSqni52pB71TaMZfto=
Subject key identifier:   EE:2B:60:CF:D6:72:D1:EA:AF:35:78:53:95:9F:05:29:EE:98:EF:6A
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285842D277456406CEC4B5E038C6C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/833721ce-28b6-494a-ae40-ca0895b9097f/833721ce-28b6-494a-ae40-ca0895b9097f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/833721ce-28b6-494a-ae40-ca0895b9097f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 09 Aug 2023 00:45:20 +0000
Certificate not after:    Tue 11 Nov 2025 01:45:20 +0000
Subordinate resources:    AS: 2886
                          AS: 4559 -- 4560

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d2:77:45:64:06:ce:c4:b5:e0:38:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Aug  9 00:45:20 2023 GMT
            Not After : Nov 11 01:45:20 2025 GMT
        Subject: CN=833721ce-28b6-494a-ae40-ca0895b9097f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:a6:db:f9:1c:0a:ff:af:a1:1e:79:2f:9d:
                    87:c0:33:48:c1:c8:0a:71:33:4e:7d:68:e5:6b:3e:
                    af:2f:e0:0a:6e:cf:f7:2b:56:97:65:f2:df:25:b5:
                    15:3b:73:6c:e7:3c:20:29:82:c0:96:7f:fb:fe:e8:
                    bd:a3:7d:ce:ae:27:38:37:70:b9:c7:0d:be:0d:1f:
                    6c:b9:3e:a1:20:4f:bd:31:22:96:47:0f:d0:15:1e:
                    2c:8d:e7:95:a9:cf:b7:43:8e:7a:77:65:d4:01:1c:
                    80:eb:19:78:c9:df:29:b9:46:58:f6:01:9c:12:ae:
                    27:4b:e8:2e:71:87:a7:41:a7:e0:2c:92:4b:ef:80:
                    f3:39:9c:dd:10:e7:d1:58:0d:ab:b6:0c:1a:cd:40:
                    35:cb:74:e6:7f:0f:35:d2:c7:cf:08:49:dd:90:0b:
                    98:12:92:c1:64:5a:f4:64:20:0d:fc:b1:60:ba:d7:
                    aa:d5:17:8b:61:0f:81:91:73:8e:e0:15:95:7d:0a:
                    de:25:1d:de:90:ea:ee:7a:00:d9:83:3e:36:d2:d3:
                    c9:fa:71:18:10:d3:88:6a:55:59:80:d3:3e:37:c7:
                    fa:69:e4:cd:7b:cd:28:e7:1c:5e:3c:9d:8b:13:a2:
                    c9:52:7e:e1:2e:86:68:23:18:b3:a4:57:34:b3:aa:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:2B:60:CF:D6:72:D1:EA:AF:35:78:53:95:9F:05:29:EE:98:EF:6A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/833721ce-28b6-494a-ae40-ca0895b9097f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/833721ce-28b6-494a-ae40-ca0895b9097f/833721ce-28b6-494a-ae40-ca0895b9097f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2886
                  4559-4560

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:8a:4a:89:78:02:fa:fa:fa:aa:39:d9:b1:b9:cc:32:40:8f:
         62:27:67:88:79:64:7a:85:64:85:88:a4:f3:df:ff:78:1e:89:
         37:3d:6e:fd:91:fc:07:64:a0:89:90:80:fa:f1:b6:6d:48:fd:
         48:8a:63:69:3b:d3:2b:46:0a:9d:48:ee:d7:ec:98:84:ff:b0:
         f9:69:fa:42:25:77:36:1e:33:51:b5:50:ca:0c:75:69:d9:81:
         c7:13:de:b3:bd:af:66:ec:af:a2:dc:b0:e1:2c:de:c3:4a:e7:
         17:3d:54:f5:56:d0:45:01:6d:45:aa:76:ed:4e:da:57:80:52:
         31:8e:e9:bc:33:15:94:ee:78:c4:90:46:2c:87:00:2c:ff:03:
         71:2d:10:bb:64:de:9c:29:d0:bf:a6:99:fe:c5:0a:b2:cc:45:
         b8:0c:af:d9:58:e1:b9:1f:6b:01:21:7c:e1:2f:7b:52:24:eb:
         0d:4f:a3:b2:11:87:2a:8f:6d:bd:67:f7:cb:7a:db:01:d2:d1:
         de:64:f1:9b:75:e2:7e:75:ae:69:96:0c:fc:ca:c8:d4:18:f0:
         fe:ec:16:fc:b8:88:00:13:9a:5c:b8:33:00:3f:d7:0f:63:5e:
         d6:f6:c2:db:9e:fe:9c:9a:f9:26:49:f3:b1:d0:a2:fb:0d:45:
         b8:55:ad:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----