Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06407ef-72f0-48b2-93c2-aaa70774bafc.cer
File:                     a06407ef-72f0-48b2-93c2-aaa70774bafc.cer (raw, json)
Hash identifier:          2SM+RUM1JojTGI+To5ts70BJd5sVHmQZQwQY17rQksY=
Subject key identifier:   74:BC:6C:7D:E1:C1:A5:B0:AC:F4:5D:AC:A5:CE:F6:26:FF:4E:3B:8A
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285842CE87429C94B68CCC21399EA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06407ef-72f0-48b2-93c2-aaa70774bafc/a06407ef-72f0-48b2-93c2-aaa70774bafc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06407ef-72f0-48b2-93c2-aaa70774bafc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Aug 2023 14:54:19 +0000
Certificate not after:    Thu 23 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 396064
                          IP: 142.202.93.0/24
                          IP: 2620:81:e000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ce:87:42:9c:94:b6:8c:cc:21:39:9e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Aug  7 14:54:19 2023 GMT
            Not After : Oct 23 00:45:16 2025 GMT
        Subject: CN=a06407ef-72f0-48b2-93c2-aaa70774bafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:b9:e9:b5:7f:bc:db:50:92:95:f1:27:b9:
                    68:72:74:7a:7b:3a:ba:ea:37:24:a4:1a:2d:50:02:
                    e5:64:d5:fb:4f:ab:b2:ab:0a:40:4a:fc:c9:08:49:
                    19:01:b6:2e:2f:80:2f:b4:5a:4c:c6:69:d3:48:cc:
                    7f:96:51:27:30:0e:f6:6e:3f:1f:f3:f6:0a:ba:5c:
                    2a:0a:88:c4:52:92:3b:c9:b9:d5:66:06:c8:01:03:
                    7d:a4:2e:0f:c8:de:9d:7d:3f:09:9c:31:40:d6:7c:
                    a4:eb:99:ac:55:a4:ae:11:19:73:38:f1:56:57:b8:
                    eb:44:54:4f:d8:00:53:77:17:d7:53:42:da:b8:ba:
                    46:d2:ba:20:6a:bf:18:85:0a:0d:b1:1e:2f:bd:f8:
                    b1:e8:e6:e1:7a:35:fc:d5:99:02:32:ba:07:31:0f:
                    62:34:ea:a3:0e:08:24:db:0e:97:93:3e:73:a8:08:
                    47:f1:ec:50:79:81:05:3d:10:91:67:59:ef:18:df:
                    14:bc:3c:0e:88:2b:eb:36:aa:9c:6e:47:73:c0:73:
                    e8:e1:41:54:cb:7a:4f:1d:30:23:14:74:cd:73:63:
                    41:4a:ec:85:ae:ec:0a:6f:ff:17:31:95:d1:ff:11:
                    8d:f5:5a:6d:ff:7f:c9:d0:b5:97:cd:87:99:f6:89:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BC:6C:7D:E1:C1:A5:B0:AC:F4:5D:AC:A5:CE:F6:26:FF:4E:3B:8A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06407ef-72f0-48b2-93c2-aaa70774bafc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a06407ef-72f0-48b2-93c2-aaa70774bafc/a06407ef-72f0-48b2-93c2-aaa70774bafc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.93.0/24
                IPv6:
                  2620:81:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396064

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:14:7b:26:92:d9:3f:b7:82:0b:f7:a6:d0:7d:8d:fb:f4:d8:
         2e:b8:13:e2:60:f9:72:0b:86:ca:60:cf:1a:7d:d6:70:37:a5:
         cb:69:6c:bf:c4:73:4b:bf:5b:39:80:c2:3b:79:1e:31:98:72:
         b4:eb:46:74:68:94:e1:de:8c:a6:f8:2e:fa:f6:a5:c1:24:6d:
         0e:4a:99:f0:7c:0d:00:6e:dc:ae:1f:ce:7d:61:0f:fa:71:ca:
         0f:d2:dc:69:19:54:ff:7e:e6:d4:8b:d0:f4:17:d2:97:02:1d:
         da:ac:46:50:b5:0f:9c:1b:63:d7:98:69:a6:d1:6b:c6:84:4e:
         b8:50:af:9c:45:ba:57:c6:2d:9b:c5:72:82:1c:be:ac:e8:79:
         8f:6e:49:35:dd:92:b8:5b:0b:03:5e:1e:61:86:18:9a:6c:b2:
         67:08:7e:09:21:d2:bc:77:59:91:f3:70:35:b0:81:16:57:bd:
         c4:b8:51:66:c0:49:07:15:23:06:b1:fc:98:86:09:86:e4:5f:
         8c:24:2b:68:55:f4:b3:26:02:f4:91:2f:62:0b:92:12:28:27:
         d1:b1:f4:4f:6a:23:97:37:2c:08:f0:0d:a9:bb:f2:7b:12:59:
         61:c6:b6:d0:28:02:c9:64:27:20:ef:c5:d8:70:41:a8:6a:79:
         de:72:23:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----