Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a0681e00-1b53-485f-876c-41a972c98adf.cer
File:                     a0681e00-1b53-485f-876c-41a972c98adf.cer (raw, json)
Hash identifier:          o9CvXUx5ZN5tpnNDYFu5kyCXazK/vVqWZcZS3XwIKFY=
Subject key identifier:   E1:4B:16:75:3A:5F:74:51:A8:9D:9E:D2:D0:F2:6E:C8:91:D3:E3:F4
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285843F95C2ED7B5DA6BCAADC98B5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a0681e00-1b53-485f-876c-41a972c98adf/a0681e00-1b53-485f-876c-41a972c98adf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a0681e00-1b53-485f-876c-41a972c98adf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 22 Nov 2023 15:54:13 +0000
Certificate not after:    Sun 21 Sep 2025 00:45:17 +0000
Subordinate resources:    AS: 53942
                          IP: 64.38.108.0/23
                          IP: 199.189.128.0/22
                          IP: 207.229.106.0/23
                          IP: 2607:7fc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f9:5c:2e:d7:b5:da:6b:ca:ad:c9:8b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Nov 22 15:54:13 2023 GMT
            Not After : Sep 21 00:45:17 2025 GMT
        Subject: CN=a0681e00-1b53-485f-876c-41a972c98adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:09:0a:0d:13:3b:84:04:6a:93:c4:d5:0c:b2:
                    72:07:1e:4e:de:8c:ad:fe:0f:2b:28:d5:e0:bd:32:
                    73:ba:7b:38:b5:f7:71:dc:1e:2e:31:01:15:1f:7b:
                    fa:ff:f9:ad:b2:cd:f5:9e:a9:65:b3:26:1f:34:14:
                    b4:6a:89:e9:1b:30:ec:03:46:08:49:50:f9:31:84:
                    45:5c:5d:d1:f8:b0:90:0c:ca:07:4b:2a:07:34:f5:
                    38:97:66:56:a8:d2:c9:12:08:0f:5e:ef:0d:81:3a:
                    99:b7:1b:ef:ca:d1:2f:7e:8c:4d:c1:12:17:ba:5a:
                    45:66:50:3d:91:0b:ba:45:2e:bd:c2:8e:ca:62:50:
                    94:d6:dd:a3:41:ad:14:93:a7:d6:4b:62:b4:40:5a:
                    60:e5:9f:f4:a6:71:f5:43:7c:a5:b8:5b:c3:7b:a3:
                    6e:20:77:26:0c:3b:c6:3b:1d:ff:77:ec:59:8e:26:
                    af:61:91:cf:e6:da:7a:9c:49:76:8b:f9:5a:be:c7:
                    81:e9:96:ab:f7:4a:61:ac:20:d8:01:8b:14:c6:12:
                    a3:35:89:60:12:f8:df:9e:f8:fd:38:62:83:96:85:
                    46:2f:b5:75:c4:40:2f:8c:24:ab:f6:6d:ac:3f:35:
                    7b:d8:73:2d:eb:ec:2c:32:5d:7c:48:78:7d:3c:02:
                    a8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:4B:16:75:3A:5F:74:51:A8:9D:9E:D2:D0:F2:6E:C8:91:D3:E3:F4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a0681e00-1b53-485f-876c-41a972c98adf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a0681e00-1b53-485f-876c-41a972c98adf/a0681e00-1b53-485f-876c-41a972c98adf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.108.0/23
                  199.189.128.0/22
                  207.229.106.0/23
                IPv6:
                  2607:7fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53942

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:08:6b:6e:94:76:7f:f2:6c:63:17:64:7b:80:a4:4f:f0:33:
         ab:92:c9:c0:a1:aa:e5:6d:c4:36:a5:37:80:22:69:f2:fb:6b:
         71:cc:50:8b:57:5b:4d:34:a5:63:13:82:65:f1:15:f7:06:66:
         9a:6a:fd:c7:a0:13:87:b5:98:f4:cc:b0:11:1c:ca:d1:62:9d:
         20:bd:a9:95:66:23:51:de:b3:1f:f2:f6:75:58:f2:22:7a:01:
         31:ec:c7:e9:a0:61:bb:18:b8:1b:c5:c7:67:9a:9f:5b:5a:e8:
         03:74:f7:67:a9:7c:5a:a9:b6:74:08:b0:13:6c:f5:bc:79:12:
         d1:20:da:6a:2a:ee:71:dc:51:56:20:ef:77:0e:f7:9c:1d:3b:
         48:b2:3f:ff:1b:a9:3d:71:91:80:71:ff:4d:c6:32:85:f1:11:
         6e:29:09:31:ee:2c:12:a6:a9:5a:11:90:02:c3:97:c6:b7:99:
         57:70:b1:20:d8:03:f9:45:85:1e:77:d3:93:1d:95:bb:f5:31:
         e1:cb:5b:a3:13:dc:53:3e:4b:0a:02:d5:29:47:e7:f2:4a:4e:
         1c:b9:ba:72:fb:ed:67:fb:b5:69:bc:4f:f3:52:9b:e1:d4:be:
         9e:06:29:2e:09:68:a5:11:05:c2:bb:a9:24:2e:72:4e:a8:51:
         bd:68:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----