Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer
File:                     d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer (raw, json)
Hash identifier:          IooB1CGNG8fIYEVeBI6fKnYHrcDtKej/cZdgqgVoCDo=
Subject key identifier:   02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858432E97DF4681E670B6005A373C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Sep 2023 00:45:23 +0000
Certificate not after:    Sun 14 Dec 2025 01:45:23 +0000
Subordinate resources:    AS: 11708
                          IP: 72.22.208.0/20
                          IP: 75.98.112.0/20
                          IP: 2605:b080::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:2e:97:df:46:81:e6:70:b6:00:5a:37:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Sep 11 00:45:23 2023 GMT
            Not After : Dec 14 01:45:23 2025 GMT
        Subject: CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:29:69:9c:ed:3b:38:ed:c4:0b:72:de:52:
                    ef:e1:a8:f1:14:5b:67:55:5b:20:48:39:07:f3:2f:
                    11:26:dd:f3:9b:c7:26:b4:78:ab:be:35:68:c6:d5:
                    1b:a4:6c:d0:c9:ef:2b:a5:04:e8:50:49:6e:a8:98:
                    b4:3c:3c:66:a8:dd:e0:e4:73:47:1f:c5:ed:51:ea:
                    12:c3:22:f7:1f:5d:6e:81:26:25:8b:15:c3:96:e8:
                    a8:02:8f:04:26:45:7e:25:32:6c:c6:cb:31:e1:09:
                    a4:dc:5b:16:df:c4:a6:f8:29:a6:b8:bc:36:a2:d9:
                    0c:7f:43:69:0a:a6:5f:c3:69:dd:61:e8:35:61:78:
                    fe:3a:61:f2:8b:39:fa:e8:4d:5f:38:7e:33:da:01:
                    25:05:23:27:73:9d:73:e0:97:38:82:62:ca:2e:5d:
                    af:c7:ee:7d:89:87:89:14:a8:33:ae:dc:6a:88:1d:
                    9a:40:08:d7:a6:6f:80:d2:26:a9:f9:7b:db:ec:6e:
                    51:39:b5:c7:16:dc:b0:06:7f:07:03:2e:d8:a4:6e:
                    73:9a:72:6a:36:13:1b:46:e5:5c:41:60:83:04:12:
                    68:dd:e0:6c:dc:19:31:52:30:43:e9:a0:b4:c6:ca:
                    35:2d:c1:02:df:fd:6f:ea:d6:97:89:ff:9f:cf:d5:
                    6d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.22.208.0/20
                  75.98.112.0/20
                IPv6:
                  2605:b080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11708

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:40:fd:97:c9:8a:1d:1a:c4:5e:66:96:44:ae:2f:76:9a:f7:
         e8:94:72:1f:c2:f1:25:f1:fe:bd:b1:94:24:f6:fe:32:2a:52:
         e5:d1:75:31:88:36:8c:b2:1e:9a:d9:25:1d:14:7c:4d:33:bb:
         dd:a5:65:0b:85:38:86:62:ee:d9:4c:2f:73:78:04:34:62:86:
         60:49:16:f9:f7:57:97:7a:71:29:10:6d:2a:52:b1:50:45:dd:
         5e:3d:5f:12:94:bc:2b:14:29:45:6a:b4:6a:3d:a2:e1:aa:c5:
         b6:cb:db:fd:a1:42:5b:10:d1:1f:cb:e8:e2:5f:be:a5:5e:d7:
         6f:70:56:a6:27:c3:a1:57:f9:10:09:8a:ad:bd:1e:b7:51:d0:
         d3:35:09:e3:e2:96:9d:43:2b:88:a1:c3:98:09:fc:b0:15:43:
         b3:28:b9:dd:e1:61:38:23:ea:a5:f8:88:1b:ad:cc:52:80:02:
         26:24:c6:2c:40:f9:8d:79:9e:b8:3b:03:43:20:4c:65:cb:81:
         d7:d6:ac:5f:06:b0:a9:60:88:ac:db:14:0a:bd:fe:3b:ac:c0:
         96:9f:89:84:67:be:0c:98:e8:6d:e3:82:9d:09:c2:4b:34:bf:
         61:8a:24:86:56:a5:5d:96:d3:2c:f3:fc:04:e5:66:4b:88:2c:
         45:21:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----