Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.cer
File:                     242dfd71-e9f9-4bbe-9709-0f3709fafbbb.cer (raw, json)
Hash identifier:          3AJH9C4ZneS1pMII+RKYkbFHsC7wegFexFQNJ24lzLw=
Subject key identifier:   D0:5B:A6:8F:0A:83:8E:79:0F:F2:CB:AD:F1:51:BE:C1:52:E1:A2:2F
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285844FB5880C2E826F8F6F807E980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Feb 2024 01:45:21 +0000
Certificate not after:    Thu 28 May 2026 00:45:21 +0000
Subordinate resources:    AS: 33086
                          IP: 23.158.224.0/24
                          IP: 2620:5d:e000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:58:80:c2:e8:26:f8:f6:f8:07:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 23 01:45:21 2024 GMT
            Not After : May 28 00:45:21 2026 GMT
        Subject: CN=242dfd71-e9f9-4bbe-9709-0f3709fafbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:53:cd:d8:56:e9:b1:18:85:a2:a8:8a:b1:c2:
                    a2:46:06:4f:c3:bf:ad:54:bf:f1:8c:b6:55:59:7c:
                    80:e2:12:65:60:50:23:07:eb:fb:7a:54:ae:e4:cb:
                    50:f9:32:06:ad:0f:90:5b:9a:96:46:3c:f5:0e:b5:
                    3a:d8:7e:54:d2:7c:55:57:d2:36:d1:94:27:2c:d6:
                    4d:1b:49:6d:b2:a0:b9:0f:35:87:cd:48:b5:58:03:
                    c3:90:f9:fb:f2:5d:c6:92:f5:09:b8:60:e6:a0:10:
                    d4:03:1b:44:24:9b:7d:22:a3:ae:a4:46:df:32:f7:
                    f3:17:4a:6e:b0:e2:4e:30:a0:83:3c:af:56:e0:73:
                    bf:46:59:ce:5a:4d:0b:d8:7c:43:3f:c4:90:30:72:
                    89:2f:10:9c:b0:4d:d9:93:38:cf:6a:32:1f:2e:68:
                    8d:50:03:af:74:46:ab:90:22:c2:41:78:cd:a4:de:
                    f8:ac:bc:4e:fd:09:d8:28:41:ac:83:61:d3:d3:c1:
                    00:d2:11:77:1c:9d:41:ee:a7:57:64:7e:4c:d8:5c:
                    c0:5f:7d:94:b3:49:25:56:8c:cf:38:2b:31:b5:a5:
                    a5:ec:0d:60:c6:09:10:01:f1:6c:c6:b5:1e:25:3c:
                    16:de:64:14:46:d3:08:76:ed:6e:56:96:86:1a:31:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5B:A6:8F:0A:83:8E:79:0F:F2:CB:AD:F1:51:BE:C1:52:E1:A2:2F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/242dfd71-e9f9-4bbe-9709-0f3709fafbbb/242dfd71-e9f9-4bbe-9709-0f3709fafbbb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.224.0/24
                IPv6:
                  2620:5d:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33086

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:c3:36:0b:ef:ca:c1:e6:54:0f:6f:07:1f:9d:20:d7:46:
         9d:1d:8e:44:bb:f6:ae:d5:4f:27:e1:4b:39:35:8e:c4:63:32:
         dd:0a:14:79:57:fb:7f:ed:61:80:52:87:74:19:d3:c9:33:e1:
         20:ae:8f:68:33:3b:4a:02:bb:42:ca:e4:7b:b3:1e:6c:54:8e:
         88:7b:d0:64:19:d0:f9:6e:b1:0a:40:c6:e6:f4:ce:ef:21:88:
         56:b6:1e:02:f8:68:b9:76:35:ea:60:6d:3d:b6:4a:05:24:ea:
         13:33:af:76:bc:e1:e2:77:03:16:7b:46:0b:d7:72:c6:72:0f:
         cb:a2:d7:6e:45:ba:c7:13:1f:d3:51:67:c2:6d:cf:78:d4:3e:
         cf:4f:26:1f:b7:0d:f1:d9:e1:a3:d7:5c:60:51:46:8d:69:fb:
         97:80:8c:e0:e5:56:b6:2f:4f:cd:64:33:39:b8:e2:8a:3d:05:
         88:c4:c1:c4:6f:0e:b0:65:25:50:3d:6a:ea:26:09:fd:18:a0:
         db:80:14:15:73:f5:1a:dd:00:de:a9:2f:1e:6a:3d:2f:0a:cb:
         ce:41:a3:23:1b:c4:5d:43:af:e0:88:80:c9:eb:0a:3d:d7:f2:
         cc:0b:46:f1:6d:2c:80:1d:92:95:b8:b4:fe:50:68:6b:50:9a:
         5c:2c:3c:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----