Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e189bc1f-a727-4fa8-86fa-d70c78a19c2d.cer
File:                     e189bc1f-a727-4fa8-86fa-d70c78a19c2d.cer (raw, json)
Hash identifier:          ZK+jc4dzoP+YZ4eLNAurFygCJPx/4IOv1KcAURv6HkU=
Subject key identifier:   D2:4D:48:EC:71:D8:C1:D0:33:0B:85:1F:4A:F1:D2:C2:1F:33:07:25
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285841E483521F9479397380E2AC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e189bc1f-a727-4fa8-86fa-d70c78a19c2d/e189bc1f-a727-4fa8-86fa-d70c78a19c2d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e189bc1f-a727-4fa8-86fa-d70c78a19c2d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 21 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 54161
                          IP: 2605:a5c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:52:1f:94:79:39:73:80:e2:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 21 19:06:39 2025 GMT
        Subject: CN=e189bc1f-a727-4fa8-86fa-d70c78a19c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0a:7f:cd:ca:7d:b6:e7:ca:e9:e4:88:45:cf:
                    f7:94:bc:7c:3f:6c:24:32:16:45:30:34:1f:79:c4:
                    56:70:00:47:3b:d7:ab:74:63:6e:8b:ca:3a:00:ff:
                    92:5d:f1:89:a3:73:5f:5a:5a:8c:cf:c9:71:2c:67:
                    01:56:02:0f:cc:fa:2d:5b:14:a9:71:56:b5:a3:5b:
                    5b:a6:0d:d2:0a:c0:e9:ec:bc:a5:b1:e4:5c:2c:0e:
                    0e:18:81:e4:94:9a:8c:90:20:30:5c:9b:bc:ba:74:
                    01:de:ff:62:41:f5:63:48:e4:e1:32:44:15:aa:42:
                    7c:b4:c6:55:20:66:a4:5e:d5:8d:65:d9:34:76:2c:
                    a8:fb:1f:60:ee:37:05:ee:10:92:bb:95:50:3b:b7:
                    2e:f9:e8:87:db:d8:c7:fe:91:e9:ec:b5:ba:f2:c0:
                    d9:47:ed:ef:db:43:5d:75:4a:ce:26:0d:08:08:4a:
                    06:61:e5:b8:b7:b6:7a:41:a0:5c:48:47:77:0e:05:
                    34:5f:69:1a:27:ab:a4:f2:02:74:58:35:f1:bf:da:
                    cd:01:ad:10:24:50:d3:e0:19:60:a9:a4:82:69:c7:
                    68:b1:d1:38:1b:ee:7e:fa:c2:ab:46:5c:f1:13:52:
                    4a:3f:04:a6:30:3c:6d:93:56:75:93:98:77:a4:96:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4D:48:EC:71:D8:C1:D0:33:0B:85:1F:4A:F1:D2:C2:1F:33:07:25
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e189bc1f-a727-4fa8-86fa-d70c78a19c2d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e189bc1f-a727-4fa8-86fa-d70c78a19c2d/e189bc1f-a727-4fa8-86fa-d70c78a19c2d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a5c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54161

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:98:47:70:f5:a3:ce:db:f9:cf:e5:a9:91:c0:55:20:eb:9a:
         35:92:79:b3:ea:c3:c4:d2:d1:10:55:4d:40:4d:34:81:d5:b3:
         64:88:11:e2:de:8d:4e:f0:f0:0e:48:36:7a:74:f5:3c:1f:5b:
         16:3a:8b:09:f5:d4:25:90:be:e9:c0:81:80:6c:bf:13:c8:ba:
         84:39:db:00:7a:7a:4a:16:45:26:fe:14:30:e7:ee:06:dc:8c:
         4b:ff:20:58:54:c2:b7:3d:12:bb:4b:e5:6f:ff:cf:ce:72:54:
         b4:54:05:2f:eb:e2:a8:b0:71:f9:71:e5:bd:f8:89:fb:70:5f:
         c6:6f:55:93:2d:46:50:1f:7e:cf:8c:dd:aa:09:df:e8:1f:24:
         ea:c2:1b:be:5d:75:19:23:3e:e7:0e:52:b3:e5:d3:15:6d:76:
         8d:fb:ef:94:a1:5b:04:d3:d3:64:85:92:fd:82:4d:c8:86:d7:
         f4:71:be:0f:a2:e7:47:e5:5b:9a:a2:63:b5:e8:11:96:cd:ef:
         1d:22:cc:2c:3b:a6:c3:20:14:e1:7b:e3:68:35:8f:1d:45:00:
         98:10:6f:6c:d9:84:a7:54:f1:cc:7f:db:21:26:3e:34:58:9d:
         98:7f:bf:bb:bd:fe:63:27:81:69:8c:68:f2:c9:55:6a:a4:44:
         d9:31:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----