Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982.cer
File:                     53f93371-9395-4cf9-890d-3d0895304982.cer (raw, json)
Hash identifier:          VrczJGIpCc1KM4dKQ3baeG+tqfLWsHKI0UCcavoN2rQ=
Subject key identifier:   3F:B6:6B:65:6D:1D:7A:B5:BE:51:27:E2:C2:5C:46:BC:4C:46:8E:B8
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584827BDA88CD50FD3913A4F7000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 10 Dec 2024 01:45:33 +0000
Certificate not after:    Mon 15 Mar 2027 00:45:33 +0000
Subordinate resources:    AS: 398093
                          IP: 142.202.46.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jan 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:bd:a8:8c:d5:0f:d3:91:3a:4f:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec 10 01:45:33 2024 GMT
            Not After : Mar 15 00:45:33 2027 GMT
        Subject: CN=53f93371-9395-4cf9-890d-3d0895304982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fc:ac:77:01:68:3b:08:22:7b:ce:23:44:94:
                    2c:60:5f:5d:0e:7b:02:32:0c:61:a4:5b:32:31:7b:
                    97:06:07:7f:92:33:15:1c:f9:35:6a:50:c2:57:5d:
                    fe:6b:bc:44:74:7c:ca:92:df:eb:e9:16:aa:5a:01:
                    c4:b8:1b:38:5e:70:0b:6f:fc:85:a7:58:d5:99:d1:
                    75:87:ee:b7:26:9b:c3:4b:7f:25:90:2f:0f:dc:45:
                    3f:b6:30:e9:e7:61:6d:c2:de:b4:6a:c3:10:c1:b3:
                    38:6c:37:31:40:f0:41:3d:ca:7e:94:09:fb:d7:04:
                    e1:3e:e6:d0:10:4f:c9:cb:7d:06:de:1a:c7:1a:a4:
                    d4:0f:1c:dd:cb:83:24:2d:d4:ea:b9:d4:13:cd:57:
                    69:fb:6c:8c:8c:2c:fd:4f:97:50:a0:dc:76:a3:a0:
                    ff:9c:7e:9e:d6:17:89:47:39:0b:d9:26:1e:e6:ce:
                    c1:c7:31:bf:63:f7:eb:73:1b:ba:23:24:c9:e9:e6:
                    0e:45:f6:86:fa:2d:e1:82:f0:23:fb:9b:20:a7:72:
                    2e:d1:46:2c:17:d1:c9:ff:77:24:4a:d9:27:2e:12:
                    87:b9:79:a5:69:6a:f9:0b:99:c6:ad:55:27:01:60:
                    37:73:18:10:ab:96:e4:7c:9b:fb:d2:d7:7e:8d:bb:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B6:6B:65:6D:1D:7A:B5:BE:51:27:E2:C2:5C:46:BC:4C:46:8E:B8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53f93371-9395-4cf9-890d-3d0895304982/53f93371-9395-4cf9-890d-3d0895304982.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.46.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398093

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f4:aa:e0:19:a7:7e:32:55:38:67:ac:35:91:4d:3a:65:86:
         fc:3b:bf:ca:29:fc:d7:8e:53:b5:13:25:bc:62:df:1b:04:bc:
         7c:e9:0c:a2:c9:0c:0f:10:42:bf:42:a1:fd:b5:d7:e4:2a:30:
         60:1d:7b:b0:b5:f5:29:72:a3:9c:7a:42:2d:50:c9:e1:8a:45:
         70:e1:8d:3e:0a:de:3c:0a:1b:a1:75:8c:24:f3:6c:54:57:33:
         2d:7e:53:aa:43:e5:94:fe:e3:5e:8a:77:8d:ec:30:0b:f4:41:
         5d:db:37:12:bf:0b:e1:e3:0b:57:68:f3:70:84:ef:5c:48:aa:
         c0:14:9c:48:f5:95:14:41:0a:ba:82:c4:35:e8:86:1c:2e:b4:
         4b:59:80:c0:b3:36:04:88:54:a9:7a:3e:d9:d4:ee:28:06:85:
         f3:97:84:bd:47:60:2a:fa:43:21:5b:bc:cb:df:96:c2:ad:da:
         0b:18:62:52:ed:17:09:96:70:bd:7b:07:30:39:cf:79:02:b4:
         c4:e0:cd:3e:75:b9:87:8a:5f:35:6d:c6:d9:77:93:12:af:9b:
         33:99:6f:e1:59:d0:d8:04:30:01:95:96:a3:9a:e6:d1:b4:d0:
         bd:bf:36:6c:0e:a0:c1:93:1d:ba:01:bf:cd:95:6b:7f:6d:40:
         16:c8:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----