Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
File:                     20326331-2c67-41aa-8ed3-7667815d240c.cer (raw, json)
Hash identifier:          FlfabX8KzA/ncXakyGRhX2BMNNib+b5OXEwl/nH1Hdo=
Subject key identifier:   CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285843A3D8868B0109AF5A11C17E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Oct 2023 00:45:14 +0000
Certificate not after:    Sun 25 Jan 2026 01:45:14 +0000
Subordinate resources:    AS: 30145
                          AS: 46856
                          IP: 69.56.0.0/18
                          IP: 74.214.200.0/21
                          IP: 96.46.128.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a3:d8:86:8b:01:09:af:5a:11:c1:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Oct 23 00:45:14 2023 GMT
            Not After : Jan 25 01:45:14 2026 GMT
        Subject: CN=20326331-2c67-41aa-8ed3-7667815d240c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:51:21:df:c9:b3:3f:a1:33:d6:bb:97:d9:ad:
                    4a:fb:8e:50:2c:8a:3a:4b:2e:e2:5e:dd:9e:5e:b7:
                    7c:62:c7:b1:86:31:ee:2a:b5:c4:1c:ad:00:67:6f:
                    48:c1:f1:b7:25:83:0e:30:e4:c2:9a:f7:7c:37:44:
                    5c:6a:8a:04:90:52:7c:05:06:68:3d:cc:82:6c:3b:
                    11:10:a6:4c:d4:4d:6e:8b:a4:a9:ee:1a:f2:e6:f6:
                    52:24:3d:71:6a:a7:f4:b1:40:88:cb:85:35:2e:0c:
                    f3:22:7e:1e:b9:ac:9b:ab:e6:c7:a8:29:9b:6d:29:
                    8f:f9:4b:34:2e:17:08:86:00:55:18:94:3e:9e:8e:
                    9c:be:a4:1e:d5:29:46:7e:09:57:8d:d0:d5:d4:ce:
                    ac:87:87:ab:4b:5d:67:de:1f:27:58:64:d8:eb:51:
                    51:6f:6b:9f:9d:0d:5f:fd:6e:93:2e:c8:ec:20:9d:
                    bd:df:71:b6:8f:d0:cb:42:7e:94:c2:da:e4:e9:75:
                    f9:15:f2:3c:04:ab:af:96:83:21:aa:bd:ad:23:3b:
                    79:cf:a2:4a:ac:c9:89:4a:ca:aa:ab:6a:c5:e0:4a:
                    de:85:e0:4d:6c:2d:f5:c7:f5:f7:7d:87:df:70:b6:
                    c9:3c:bd:b4:62:ab:47:0a:5f:80:9f:03:02:14:12:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.56.0.0/18
                  74.214.200.0/21
                  96.46.128.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30145
                  46856

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:28:18:8e:0e:66:ae:2f:8b:e8:96:21:70:86:03:f3:00:15:
         b7:60:4f:a6:d8:13:3b:e9:46:a3:ed:74:9e:a7:89:8c:fd:a7:
         7e:f0:30:9f:a8:2f:fb:11:4b:8b:cd:6a:a6:39:7b:a5:3c:7c:
         04:af:b8:52:85:56:f1:e7:ab:e4:42:d5:af:46:c8:d7:96:a0:
         a3:31:7a:62:8b:b3:4b:62:69:8b:66:5d:0f:e3:9f:82:5e:b8:
         e8:69:cc:8a:9d:71:40:9c:8c:54:65:9b:84:4c:8b:fd:5b:e6:
         3b:96:e7:fc:6c:f2:3b:e2:a4:b2:cc:bd:7b:45:c0:b2:96:61:
         26:fe:32:9f:99:1e:69:60:18:ab:55:4d:22:b2:f8:4c:27:25:
         41:65:43:55:2c:ef:df:1f:fe:ed:dc:af:db:82:31:90:97:dc:
         fd:7a:b8:3c:19:dc:21:c4:5b:f6:6d:89:66:25:d4:90:c3:11:
         86:a6:fb:cc:5d:75:00:ac:95:ab:88:2c:24:41:40:61:c6:a2:
         d6:c0:66:a6:d5:c0:51:6c:bf:0e:8d:e0:61:25:85:6f:4a:b2:
         5a:fe:1c:76:3d:d3:7b:19:3f:bd:81:be:88:d7:d2:10:96:bc:
         81:c8:c0:12:ca:c9:bd:ac:eb:56:d1:5a:aa:ef:c5:64:44:ee:
         e3:38:95:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----