Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe8fe7db-84d3-4265-b371-b311f1aea1a1.cer
File:                     fe8fe7db-84d3-4265-b371-b311f1aea1a1.cer (raw, json)
Hash identifier:          im0dbM2zOD+W7iePxPilN3GOkpLUeBL0idKaNWhbEp0=
Subject key identifier:   BA:45:F3:42:B5:62:D7:97:8C:C8:A5:AA:E2:B5:D2:39:C6:EB:0A:75
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858445C37769B239F6705FA016358
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe8fe7db-84d3-4265-b371-b311f1aea1a1/fe8fe7db-84d3-4265-b371-b311f1aea1a1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe8fe7db-84d3-4265-b371-b311f1aea1a1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 28 Dec 2023 01:45:15 +0000
Certificate not after:    Wed 01 Apr 2026 00:45:15 +0000
Subordinate resources:    AS: 26567

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:5c:37:76:9b:23:9f:67:05:fa:01:63:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec 28 01:45:15 2023 GMT
            Not After : Apr  1 00:45:15 2026 GMT
        Subject: CN=fe8fe7db-84d3-4265-b371-b311f1aea1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:f0:da:ed:76:e0:44:ea:23:3b:72:7b:8b:
                    e3:7d:72:07:70:1f:aa:86:ee:b3:41:1a:d1:c4:e3:
                    4b:69:53:0e:42:65:e7:87:57:e4:26:6c:8b:db:19:
                    a4:70:d4:f1:fe:ae:a2:6a:89:15:c2:01:82:69:f1:
                    82:5f:50:36:72:e4:11:88:7c:56:b6:86:55:2b:2e:
                    8b:c3:42:43:7b:fc:79:0e:04:d8:56:b8:5b:67:57:
                    13:b1:f1:a5:c5:5a:2d:b2:c7:3f:af:da:c3:82:fe:
                    4f:b3:de:30:4f:fd:3c:44:37:a0:b6:1b:64:a1:b9:
                    4d:bd:70:fe:0c:c1:f2:11:53:64:94:c3:2b:c3:0a:
                    e7:17:ff:e9:45:e2:5f:67:91:a3:40:69:69:28:f7:
                    66:5d:0a:33:92:ce:cc:06:5a:8d:0e:be:ce:29:3d:
                    4d:5a:45:b7:01:27:78:82:fa:66:b5:be:4c:f2:22:
                    f4:5f:fa:82:6e:a6:9b:ab:4d:7d:c8:5a:85:76:72:
                    b5:c3:59:ae:7a:80:a2:23:f3:eb:c0:ba:95:49:11:
                    67:c8:f5:5a:46:7f:97:6d:d4:c2:6f:81:a8:98:ab:
                    ce:69:31:c0:96:eb:b3:07:37:9f:c1:38:aa:7b:3c:
                    9a:16:15:60:0e:1c:27:35:d8:ad:e8:28:ab:ed:eb:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:45:F3:42:B5:62:D7:97:8C:C8:A5:AA:E2:B5:D2:39:C6:EB:0A:75
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe8fe7db-84d3-4265-b371-b311f1aea1a1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe8fe7db-84d3-4265-b371-b311f1aea1a1/fe8fe7db-84d3-4265-b371-b311f1aea1a1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26567

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9c:49:52:41:94:cf:5e:20:03:52:fe:96:ef:b0:e1:46:bb:
         c6:fd:58:54:99:cb:3f:04:77:7d:9f:f9:d9:0b:44:f6:78:44:
         41:e3:74:62:e4:43:63:4a:11:31:8e:c4:c8:83:d2:d4:16:b0:
         5c:62:35:83:f1:d3:31:a6:20:0b:b4:d2:12:f2:85:8c:fd:75:
         40:30:e0:ee:1c:c8:be:84:09:c6:d8:f9:d4:de:94:87:94:6d:
         fb:ce:33:99:ce:04:10:79:07:81:da:d9:82:7e:d6:b8:b7:f9:
         22:96:f4:24:00:e0:6a:35:22:3f:eb:bb:7c:37:1f:82:bb:d7:
         32:22:82:6d:98:2c:54:3e:f3:55:ee:88:40:d5:f3:24:63:98:
         7d:3b:88:d4:2e:1d:01:34:03:d6:10:2f:44:4b:92:c0:44:47:
         db:65:05:7d:c0:ae:1f:12:e9:dc:f9:12:59:65:21:1e:0a:45:
         79:d4:65:96:be:72:17:bb:5c:46:56:42:d5:8a:ce:56:d9:59:
         ff:88:63:8f:41:61:26:d7:83:7b:d5:03:4b:2f:37:8e:e2:a6:
         d9:2e:c1:8c:8f:81:ed:ea:ed:ae:80:85:f0:c2:21:af:4a:8e:
         d1:3f:8e:d4:9e:8d:4a:ec:89:cc:92:e3:9f:34:eb:11:d4:6f:
         0a:9b:08:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----