Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer
File:                     3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer (raw, json)
Hash identifier:          cLoRTvnxSjpwMigy84gmrjZRCoWi/WMeWTqchluddYM=
Subject key identifier:   78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858447822501BA275D3113DFAEC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 07 Jan 2024 01:45:16 +0000
Certificate not after:    Sat 11 Apr 2026 00:45:16 +0000
Subordinate resources:    AS: 395635
                          IP: 192.101.119.0/24
                          IP: 2620:ba:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:78:22:50:1b:a2:75:d3:11:3d:fa:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jan  7 01:45:16 2024 GMT
            Not After : Apr 11 00:45:16 2026 GMT
        Subject: CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:29:d1:28:bd:05:d7:78:4a:a3:60:e6:80:
                    0d:d8:a4:54:c6:77:c1:b3:19:b4:b8:23:2e:92:0a:
                    0a:fe:53:1d:05:15:68:88:5e:ab:43:9c:d3:d1:29:
                    75:2f:67:2e:f0:4f:46:7a:cf:1a:20:d8:72:ce:43:
                    0b:13:db:4d:d8:d0:38:77:9c:fb:5f:6f:22:99:bb:
                    bb:e0:4a:5e:95:8e:2f:66:9f:4c:c8:eb:e7:46:6e:
                    ea:eb:cc:c4:52:78:14:85:20:01:cf:3d:b1:26:27:
                    27:f2:1d:82:46:9f:0d:43:13:fc:d5:12:79:47:a8:
                    36:7d:a1:f3:bd:af:ba:8b:70:35:a4:b5:58:60:3a:
                    74:45:2e:ec:53:e2:92:bf:f2:91:d3:ca:bf:ee:30:
                    dc:a8:ed:03:4b:34:60:c6:8c:e0:df:0b:f5:18:da:
                    23:26:bd:1f:62:d9:77:8c:94:2e:8f:2e:d8:f0:f7:
                    ea:40:14:5e:04:74:14:df:03:8f:71:88:1c:54:a7:
                    91:66:2c:5b:6b:eb:84:ec:37:96:73:05:60:9e:7a:
                    e6:8e:59:67:66:f2:3e:01:3d:fc:9e:de:40:c2:84:
                    3b:d7:3c:1f:f8:c9:5b:86:d3:a9:6f:ca:cd:b7:47:
                    7b:90:b1:6e:bf:12:7c:c4:47:cf:1b:5f:de:42:99:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.119.0/24
                IPv6:
                  2620:ba:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395635

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:19:76:c5:6b:66:f8:5c:c6:7b:bb:04:a3:28:b6:97:b2:8d:
         0a:f5:8e:6c:dd:c2:62:08:91:f8:0b:f0:b6:9d:ea:30:0c:7f:
         73:40:4c:c2:9d:41:39:28:67:b5:c3:d2:48:cd:e4:81:68:85:
         6c:5b:16:5f:00:01:ed:a3:6b:f8:78:bb:d2:34:2a:5b:3a:b2:
         6f:58:8b:3a:0c:94:90:54:b1:e0:97:aa:a1:cd:7d:c5:66:08:
         41:c9:39:a9:35:84:4a:2d:cb:10:e7:76:6c:38:61:44:f8:73:
         7d:12:2a:54:65:db:7c:d1:94:e0:b4:b9:8b:db:a3:24:4b:76:
         af:be:73:e7:e5:03:e6:87:de:ea:57:20:99:23:45:29:f7:b0:
         2a:c3:f4:dd:a6:a7:72:6f:63:e0:ca:cd:00:7e:94:51:b2:22:
         0f:4c:39:d1:f6:0a:c3:96:cd:2c:d8:9d:b8:02:19:a0:d4:e5:
         32:c5:a5:25:d7:1e:b4:d2:70:7e:22:69:47:01:b5:f9:51:4e:
         95:e7:a2:bb:92:15:6c:36:64:df:80:78:ad:83:d3:28:e8:3e:
         7d:e3:ee:38:9d:41:17:d9:b2:7d:8d:48:ee:d1:be:57:33:9e:
         ce:62:e7:3a:3e:ad:02:b3:d0:df:3b:91:7e:f6:c8:1e:9b:13:
         1a:cf:40:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----