Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer
File:                     5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer (raw, json)
Hash identifier:          hu8Zhpfr20y8KkGyV6uBWAbCckPCBj+PXicifBxS7i0=
Subject key identifier:   4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858446497821A65FA843BC677CE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 31 Dec 2023 01:45:14 +0000
Certificate not after:    Sat 04 Apr 2026 00:45:14 +0000
Subordinate resources:    AS: 62490
                          IP: 136.175.16.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:64:97:82:1a:65:fa:84:3b:c6:77:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec 31 01:45:14 2023 GMT
            Not After : Apr  4 00:45:14 2026 GMT
        Subject: CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c0:b5:6e:80:16:64:d2:67:7c:d3:2c:4b:c6:
                    73:66:bd:4c:e5:13:82:f0:e9:0b:d1:21:ff:ea:25:
                    63:83:c2:fd:dd:84:25:84:c6:9c:11:44:7a:85:4c:
                    92:49:6c:f0:ec:a1:c4:fa:56:b4:b2:36:47:e7:f0:
                    62:e1:35:f1:5c:bb:44:2c:b1:fb:ab:e7:31:4a:03:
                    41:11:8b:45:1c:e8:fc:7b:ee:a3:98:29:6e:ab:b2:
                    3b:cc:bd:d7:75:e7:bd:cc:0e:1c:2b:12:89:73:fd:
                    2d:7b:a3:0e:80:1a:c8:03:ba:58:95:87:68:60:8b:
                    fa:3a:50:6f:ff:95:13:45:16:90:cd:08:0a:91:80:
                    cb:55:34:3a:4c:78:e6:a5:46:58:68:2f:7e:b6:7e:
                    ea:d2:3e:e2:e9:c4:52:d0:26:6b:d1:c3:5e:d6:5c:
                    65:f5:5e:2b:4f:d3:e4:89:b1:cb:bf:2b:bd:bb:c7:
                    9d:fd:bf:2e:3d:45:ee:85:9e:06:be:79:08:84:bf:
                    ec:55:2f:1e:d3:bd:71:f0:e2:e9:41:dd:d7:41:03:
                    b6:4f:35:51:ee:da:1e:59:20:a7:dc:1c:43:3b:e1:
                    bc:03:18:bf:fb:c7:19:df:19:d3:43:f7:03:c6:25:
                    71:16:dd:07:b6:56:99:9b:33:a4:b5:1c:64:b6:66:
                    7e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.16.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62490

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:52:51:90:5d:a2:36:64:a0:c6:6e:7f:9b:e8:bd:3c:39:9e:
         2a:7e:bc:fb:10:5c:81:0f:e0:61:c2:43:bb:bc:ad:81:b9:9f:
         69:b1:9b:27:c7:6f:93:03:97:61:75:e7:67:ae:2a:01:5f:9d:
         dc:6e:49:ab:98:52:3d:3a:a7:98:08:7e:69:cd:bc:e7:9d:90:
         62:3a:a2:e7:d3:39:51:a4:52:97:82:fe:71:0f:04:0a:8f:dc:
         a9:e1:bd:ae:55:17:27:70:4a:55:58:de:40:38:be:6c:49:ff:
         ea:32:96:c2:e8:38:eb:17:a2:5e:5f:33:0e:45:16:93:4b:84:
         0e:34:91:e5:18:45:4b:8f:43:2c:11:2c:90:ba:00:8b:7d:af:
         37:3e:c1:ec:30:6b:ee:61:33:3c:12:2d:49:a1:65:f2:18:b9:
         8a:5c:8a:4f:e2:82:37:4e:79:c1:0d:92:d0:52:f9:d4:9b:95:
         32:db:37:fc:79:d0:15:78:10:89:22:15:74:b7:d8:50:d0:90:
         c5:a4:f7:b7:2b:c8:37:e5:a9:45:7f:ce:1f:f2:0b:32:16:a3:
         62:0e:5f:37:d1:83:31:f9:56:4a:2c:26:a5:2c:b6:8b:74:10:
         63:f4:d7:14:5e:ca:b0:ed:7f:0a:b0:81:83:f0:01:b4:be:64:
         53:00:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----