Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781.cer
File:                     3feec52d-ec77-4869-a96c-bed4aa519781.cer (raw, json)
Hash identifier:          PRer5uI/wHQGKnaVOQEyNmWFS2UTVomWLQ5kKXZjA9k=
Subject key identifier:   DA:6F:E9:A2:F5:75:58:68:74:D1:A7:22:FB:3C:06:33:80:E6:0A:70
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584413A1AED3669794E370AA50C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/3feec52d-ec77-4869-a96c-bed4aa519781.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 02 Dec 2023 01:45:16 +0000
Certificate not after:    Fri 06 Mar 2026 01:45:16 +0000
Subordinate resources:    AS: 36710
                          IP: 23.132.32.0/23
                          IP: 2620:138:6000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:13:a1:ae:d3:66:97:94:e3:70:aa:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec  2 01:45:16 2023 GMT
            Not After : Mar  6 01:45:16 2026 GMT
        Subject: CN=3feec52d-ec77-4869-a96c-bed4aa519781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:38:23:46:9e:0f:e1:ed:63:2d:52:6f:e3:2a:
                    03:5f:dd:db:d9:45:d6:45:42:28:7e:d6:eb:e5:9f:
                    8f:b3:e5:98:54:9c:6b:4b:fc:64:04:cd:88:bf:32:
                    9c:2b:e4:1c:a8:50:e0:5b:1f:99:56:8c:52:94:40:
                    69:e3:6a:2a:1c:a9:72:64:50:bc:08:98:67:65:b8:
                    b9:94:45:ff:19:0f:9f:42:06:50:4b:38:2e:f5:42:
                    db:ac:6a:47:ae:3b:ab:2e:71:b5:b4:91:65:33:29:
                    04:08:95:91:ea:78:f9:c2:ad:ec:8d:fc:a9:80:4b:
                    ff:2e:cc:03:b6:c2:1e:39:b6:61:38:8c:9a:6c:ba:
                    c7:8e:ff:1a:ff:bd:22:f8:7d:41:f5:aa:26:16:70:
                    80:cf:31:10:57:e5:4c:78:27:4f:94:89:89:d5:22:
                    73:47:c9:fc:fb:fe:63:b4:0c:ff:cc:94:df:ca:0b:
                    c4:d1:46:a1:14:c4:4e:3e:0e:15:bf:bd:5b:6f:f8:
                    5d:cf:f0:15:c0:82:0a:13:89:dc:26:77:49:b0:e8:
                    4d:c1:d6:a1:3c:07:48:5f:77:d0:08:d1:b6:0f:4a:
                    64:3b:f1:71:2a:98:d6:1d:18:f6:13:f2:a2:60:64:
                    23:fc:67:a9:41:fc:a6:9e:89:db:3c:5a:66:86:9c:
                    0d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6F:E9:A2:F5:75:58:68:74:D1:A7:22:FB:3C:06:33:80:E6:0A:70
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/3feec52d-ec77-4869-a96c-bed4aa519781.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.32.0/23
                IPv6:
                  2620:138:6000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36710

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9e:d3:88:18:e6:83:3d:76:42:c2:69:56:5c:91:e6:e9:e1:
         b3:fd:dc:cf:2b:9f:d6:39:db:ea:13:94:16:c5:60:a7:54:eb:
         31:5e:09:ac:46:48:66:9d:8c:fe:b6:b7:98:b1:11:82:d7:9a:
         57:da:ed:6d:31:b3:33:3a:0d:12:c0:6f:68:dc:82:55:15:68:
         bd:35:25:28:89:99:5e:e6:7e:16:04:43:66:7d:23:3c:2e:58:
         d3:0b:6b:dd:ff:42:82:14:6f:5d:ce:30:fa:fa:0d:3e:11:0b:
         eb:a2:06:50:f1:ac:4f:69:4d:87:5c:05:fd:5d:77:1a:76:10:
         8c:15:aa:85:d1:e5:b7:b8:7d:8e:d2:0a:7f:29:d6:97:23:51:
         af:37:3f:b4:31:0a:b6:99:cf:5e:96:38:0e:18:43:1a:47:71:
         c7:bf:3c:e6:e7:eb:3a:e9:ce:c1:7c:80:96:4d:cc:ba:17:a8:
         b5:b0:bf:42:6f:84:4c:1d:fd:a3:48:06:49:18:f6:53:ba:f4:
         3d:5a:f9:82:fd:b8:80:ed:0d:33:09:80:f0:2f:30:72:81:12:
         63:65:b6:3a:6b:45:8f:d0:8a:24:8d:cc:1a:48:32:e9:b6:88:
         04:ff:03:96:47:a0:e6:d5:e7:4b:cd:c8:cf:dc:a2:99:f9:44:
         75:6f:7f:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----