Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da.cer
File:                     c892586d-1638-476b-994e-499f179da6da.cer (raw, json)
Hash identifier:          STVHqDB1hC/6ZTGnKSnpmAVW2aaJmaoxjTpIylWP0LU=
Subject key identifier:   8F:B6:8E:83:59:9A:2D:D4:55:3E:77:6A:47:0B:49:46:5A:59:24:1B
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285841E483544B3508498445305140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 05 Aug 2025 19:06:39 +0000
Subordinate resources:    AS: 36375
                          IP: 67.194.0.0/16
                          IP: 192.206.53.0/24
                          IP: 2605:42c0::/32
                          IP: 2607:f018::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:54:4b:35:08:49:84:45:30:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug  5 19:06:39 2025 GMT
        Subject: CN=c892586d-1638-476b-994e-499f179da6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:10:1e:9b:a0:54:45:44:99:8b:3e:10:ee:86:
                    b5:5a:f7:e8:82:dd:08:99:99:8e:f0:b8:28:99:fc:
                    58:f0:50:cb:c3:5f:0b:39:27:db:6b:84:2b:d1:7b:
                    b3:0c:f7:2d:fc:1f:9e:02:70:ac:00:79:3d:d1:10:
                    ad:1e:c2:00:23:79:de:58:4f:1f:eb:30:86:ff:50:
                    34:40:e7:d7:0f:ce:ae:f9:1d:73:1c:c4:a2:cb:d3:
                    c0:ee:6a:06:a7:50:34:a7:96:47:21:73:18:05:51:
                    46:da:8c:6f:6b:56:97:08:7f:4f:1b:ab:b6:5a:b7:
                    2f:c0:96:20:1b:67:45:e5:5e:e3:f2:f4:f6:8e:9a:
                    88:e9:12:5a:e6:9e:a9:1c:ab:bd:13:4d:8e:f3:68:
                    14:f6:c4:c6:6e:45:63:4b:11:73:9d:b4:3a:c3:42:
                    a7:f3:d5:13:4e:57:37:bf:e3:d8:48:63:47:56:4d:
                    f8:7f:39:19:9c:f0:03:4f:72:43:56:bc:c9:23:ca:
                    6a:60:2b:f0:cf:33:c4:a3:91:83:61:48:e4:34:bd:
                    90:d1:71:62:0b:52:6c:d9:5a:8d:02:2e:f2:97:27:
                    a8:cc:6b:2d:70:71:5d:64:50:ba:7b:71:f6:cd:28:
                    d2:98:28:7f:16:c7:aa:44:35:86:35:02:03:ff:6a:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B6:8E:83:59:9A:2D:D4:55:3E:77:6A:47:0B:49:46:5A:59:24:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c892586d-1638-476b-994e-499f179da6da/c892586d-1638-476b-994e-499f179da6da.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.194.0.0/16
                  192.206.53.0/24
                IPv6:
                  2605:42c0::/32
                  2607:f018::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36375

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:03:98:40:d6:68:91:b5:ce:cb:6b:93:a9:a2:af:31:e3:39:
         9b:a9:5b:eb:1d:50:91:c9:d8:cc:7a:d3:1f:d9:da:10:cd:e2:
         b3:f6:72:62:fc:12:1d:71:ad:bb:4f:40:00:27:20:39:f0:d4:
         ac:6a:17:c5:1c:c2:70:54:9f:3e:5c:c1:aa:6a:52:03:a4:3a:
         c0:66:38:2f:a3:43:37:58:ef:89:aa:7b:21:70:6d:48:66:f5:
         eb:c9:50:ad:05:67:c8:b0:f9:75:7f:64:fe:2f:1b:99:2b:9b:
         3c:91:59:84:f3:b8:b3:e9:0c:6d:b6:6b:60:39:2b:e5:3e:f0:
         18:20:1b:e1:87:23:cf:c1:47:05:58:8d:e1:a1:08:30:24:48:
         5e:bf:5f:ed:36:89:a6:ab:19:79:a0:77:4f:13:24:1d:f6:d4:
         95:b5:09:21:04:37:45:fc:b1:c4:a6:03:74:7a:48:0d:ff:ab:
         85:e1:0e:d5:f9:8d:1a:b0:bf:c8:f3:02:6a:a2:0f:1c:52:bf:
         9e:b1:5b:e1:dd:7a:a4:2f:75:97:77:59:20:d9:4d:31:2f:19:
         39:42:c6:cb:ad:6b:91:b8:47:a5:86:e6:a9:b6:b1:88:b8:c1:
         82:29:49:6b:80:8a:7e:21:1f:46:8b:01:8c:98:fd:76:51:d9:
         75:4f:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----