Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer
File:                     e979f6fc-bc29-44d7-bb62-f74ccc584c17.cer (raw, json)
Hash identifier:          g/gNRcE9cPP4JMN737T5wKLkZ+u/43WAhaZhAJObZDA=
Subject key identifier:   87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285843852300C324B60B3B2D4F6380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Oct 2023 00:45:14 +0000
Certificate not after:    Wed 14 Jan 2026 01:45:14 +0000
Subordinate resources:    AS: 22147
                          IP: 162.219.96.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:85:23:00:c3:24:b6:0b:3b:2d:4f:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Oct 12 00:45:14 2023 GMT
            Not After : Jan 14 01:45:14 2026 GMT
        Subject: CN=e979f6fc-bc29-44d7-bb62-f74ccc584c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:2a:8d:ed:28:e8:6a:cd:21:95:4c:60:52:
                    00:67:69:80:0e:c8:f7:07:ac:8b:2e:60:30:93:f3:
                    4e:61:a5:50:4b:ca:ee:26:01:ee:0f:88:84:09:69:
                    d2:90:8d:c3:78:64:30:f2:c5:be:b6:cb:b5:c6:c1:
                    9b:2b:e0:82:e5:b0:71:32:fd:bd:fd:75:a4:82:0f:
                    f5:4d:6f:b5:c0:05:ac:42:3a:8f:a3:78:49:5b:60:
                    6e:f2:00:c3:e5:44:af:81:8a:df:d7:b4:4a:a2:27:
                    fe:24:20:75:47:51:77:a6:fe:ad:39:d6:15:8b:aa:
                    d1:c3:ec:67:9f:09:63:da:7a:fd:ee:d2:37:af:c4:
                    14:2a:33:9e:33:91:66:ef:bd:e7:5f:c1:38:e4:f3:
                    2e:56:fe:53:fb:fb:3e:89:d1:dc:f4:00:29:01:bb:
                    96:f4:47:07:e7:35:d6:72:65:c8:6f:96:30:86:57:
                    13:cd:05:82:0d:da:c9:b1:ce:de:96:80:01:49:8f:
                    00:93:c7:81:bd:fc:d3:47:f7:b8:cb:14:dd:33:23:
                    ed:a9:9e:b0:d9:49:81:f3:cd:ec:cf:ed:bf:65:d5:
                    0b:d8:91:d0:96:c9:29:14:9f:87:e5:d3:3e:c3:50:
                    2d:4d:08:36:83:a7:4f:79:b4:c5:7b:b4:f0:9f:3a:
                    d4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:43:29:DF:52:16:E7:B9:FA:C2:B1:BF:40:4B:1A:6C:FC:E8:23:AB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e979f6fc-bc29-44d7-bb62-f74ccc584c17/e979f6fc-bc29-44d7-bb62-f74ccc584c17.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.96.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22147

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:41:db:ff:9c:f4:ee:41:88:20:e1:6e:22:21:5b:7b:fa:5a:
         b5:67:04:6f:56:82:56:e2:83:fd:ab:4e:36:9f:ee:5a:d0:bb:
         be:b8:22:8c:16:a1:82:48:db:56:d5:b8:cd:06:3d:db:4b:08:
         40:de:19:f3:b7:b0:ad:da:e7:d6:43:02:26:28:65:1a:d2:e8:
         df:b0:bc:2c:4b:a6:b6:7c:50:86:47:28:fa:af:e6:98:c0:49:
         33:91:53:08:5c:8d:81:f7:5b:e9:9f:05:58:4f:fc:9f:4b:f5:
         73:36:7c:13:f6:fc:31:41:db:c3:72:b1:a8:78:c1:14:7f:44:
         23:ae:99:25:83:f0:28:97:d4:c0:83:1c:15:9b:04:4f:2c:b1:
         ff:6b:ed:14:c7:ec:6b:6f:03:2f:54:f7:77:0a:b2:d7:95:7b:
         9a:2d:e3:3c:32:7d:07:1e:ad:65:38:e3:e8:3c:39:1f:3c:e5:
         41:55:8a:b6:2a:82:c3:0b:8f:8c:9f:43:20:59:9b:56:13:f8:
         84:13:90:40:db:49:b9:8c:19:95:ce:eb:01:f7:ac:e2:1a:55:
         57:0b:bf:3e:3f:7c:e7:a2:23:84:e1:da:4a:38:8b:ff:4c:88:
         46:d9:87:25:08:a0:c1:2f:3d:02:5d:a5:57:55:c7:e9:46:46:
         b2:57:9e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----