Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631.cer
File:                     9bfe0eb0-0689-4c02-9a46-078ee028d631.cer (raw, json)
Hash identifier:          Bth+SCVkP/PUGquZ6qWbqBJGfybhElwzzkwrdGPj1/0=
Subject key identifier:   17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584399FBF2484AF151DC6A261780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Oct 2023 11:58:31 +0000
Certificate not after:    Wed 21 Jan 2026 12:58:31 +0000
Subordinate resources:    IP: 2607:fe78::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:99:fb:f2:48:4a:f1:51:dc:6a:26:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Oct 19 11:58:31 2023 GMT
            Not After : Jan 21 12:58:31 2026 GMT
        Subject: CN=9bfe0eb0-0689-4c02-9a46-078ee028d631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:a8:e9:d7:5e:26:a1:2e:cf:50:5f:c5:e0:
                    03:f6:52:f8:59:80:c2:89:43:18:dc:ad:1b:d7:d0:
                    a2:31:9e:3f:82:66:51:21:2c:2c:72:c6:43:2e:87:
                    ef:ca:1a:6b:78:bd:34:fc:42:cd:12:6b:3f:79:16:
                    e1:f4:fe:74:bc:ef:6e:53:ed:2c:0f:f2:58:1a:6c:
                    d7:dd:c9:a5:50:07:2f:6d:df:11:c9:1e:77:88:24:
                    82:41:3a:61:0f:e4:97:6b:5a:c5:fe:07:52:e7:36:
                    38:a8:d3:81:f2:7c:be:54:83:71:7f:b3:e5:31:35:
                    91:ab:0f:bc:15:2c:59:34:53:ff:7f:37:71:c1:48:
                    92:d1:bc:c2:1f:7e:72:9f:c4:57:e5:c7:4c:5e:90:
                    4e:89:ea:47:15:28:fe:18:98:dd:42:57:82:47:ac:
                    67:40:97:97:56:5e:47:5d:ae:80:05:aa:c9:01:15:
                    e0:9b:27:a1:43:d5:2e:3e:9a:b7:6d:1b:40:44:d9:
                    dd:d2:c2:2b:b5:69:1b:8b:1e:3e:be:98:2d:e7:29:
                    99:86:a6:25:b3:ff:33:31:b1:cc:35:cb:dd:f5:29:
                    14:52:ab:07:40:de:3e:9e:e5:95:de:9d:23:1b:d0:
                    0c:16:7e:ad:72:8b:83:5e:bf:f1:7c:66:63:fe:34:
                    22:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:62:FB:04:68:09:92:DF:F1:AF:03:8F:81:D9:23:98:B1:2B:25:AD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bfe0eb0-0689-4c02-9a46-078ee028d631/9bfe0eb0-0689-4c02-9a46-078ee028d631.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fe78::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:cf:bd:2d:1e:b1:f9:55:b6:df:a7:96:ef:0b:1b:79:96:
         0f:05:75:8b:56:1d:f9:59:8c:94:7d:aa:58:9d:fa:7b:d8:af:
         49:c0:55:81:00:75:96:a1:06:e6:d6:73:e4:98:8c:d9:b3:45:
         d3:d2:ed:ba:7f:bc:db:57:97:8d:5a:05:64:e3:5c:91:cc:4e:
         45:7f:40:9f:a0:a8:70:ec:fa:f9:32:ad:f3:78:e1:d4:ef:49:
         da:95:1d:b4:bf:ae:bf:f9:f4:7f:54:96:66:cd:a8:53:54:4f:
         37:7f:74:de:6d:e1:6b:00:b2:c3:31:c9:05:84:6b:20:12:2f:
         a8:5e:a9:04:ae:34:fe:27:e7:3a:fb:68:2a:63:8b:d9:31:74:
         bc:52:3e:83:22:90:d0:c2:eb:2b:63:cd:a5:97:b6:a5:92:9b:
         9b:e0:1b:93:2e:19:da:e4:ae:9c:e6:56:50:31:d6:3f:a8:3f:
         20:42:53:8e:dd:92:0d:29:c8:28:6b:4b:12:60:1c:82:d4:e3:
         e1:ae:b4:f1:d9:2d:6c:d9:14:84:b4:64:98:e7:96:9f:cc:f0:
         4e:fb:95:e0:ab:86:00:6b:bb:bc:c4:ff:3a:e0:80:77:b4:fd:
         67:73:28:80:33:c9:97:a8:fb:a6:d7:65:fc:8a:67:80:e0:91:
         96:61:5e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----