Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer
File:                     69036fae-75b3-45ce-a305-23f9913eccea.cer (raw, json)
Hash identifier:          RFMjFWNeLKIeVoi2sWwFhwt0EakXxo82QnhTx0jFi+o=
Subject key identifier:   CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285841E48350A867DA0393A5327AF8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 11 Jul 2025 19:06:39 +0000
Subordinate resources:    IP: 199.16.172.0/22
                          IP: 2602:fdd7::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:50:a8:67:da:03:93:a5:32:7a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 11 19:06:39 2025 GMT
        Subject: CN=69036fae-75b3-45ce-a305-23f9913eccea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:2e:e5:1f:2f:9c:38:c6:98:3f:62:4f:67:
                    9b:38:57:5e:c6:0d:2d:d4:95:cf:ce:71:b5:96:aa:
                    6c:d4:b7:09:cf:38:29:99:93:9b:13:0b:4b:3a:27:
                    0f:d6:52:2b:01:87:b2:74:70:4a:27:29:eb:04:a4:
                    9e:5a:a6:bc:af:1c:d7:e6:7a:0a:12:f6:cd:a9:11:
                    7f:12:7c:32:06:2c:ba:b7:b1:fa:75:3d:ca:73:92:
                    ad:71:03:fd:8b:7a:83:1b:9a:4e:f2:91:4b:88:19:
                    16:40:14:9e:de:a9:54:3b:d7:c4:89:dd:0e:eb:0e:
                    25:f8:7d:b7:5d:86:cd:aa:90:e9:53:af:56:6b:8c:
                    5f:59:30:0d:0d:7b:ad:87:21:18:bc:31:cd:9d:cd:
                    c6:81:c3:7b:78:ca:78:5c:e1:3a:3b:d8:25:ab:a6:
                    2e:a0:21:e2:43:2d:a8:7f:be:cf:99:8f:6d:26:00:
                    0f:6d:46:29:cb:76:92:4f:15:60:9c:53:c5:93:76:
                    44:12:1d:21:47:a8:39:71:05:f3:e3:4c:e1:da:11:
                    6d:3f:b4:f8:fd:4e:e5:88:2c:f7:dd:d9:c3:04:04:
                    f2:d9:66:14:28:09:c7:cc:f7:ac:25:ce:3a:f5:9c:
                    5c:e3:28:64:36:79:e6:89:45:de:ff:a2:54:3b:a4:
                    0c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.172.0/22
                IPv6:
                  2602:fdd7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:78:86:ec:26:c9:10:74:bf:57:a7:4d:96:ad:5e:12:7f:38:
         e4:6f:3e:45:41:af:e3:02:78:6e:ba:8e:a0:6e:29:cf:1f:4c:
         72:ba:18:ab:9d:c2:5d:63:8b:67:9f:c9:23:92:f9:e6:42:57:
         9b:7c:4f:98:c4:30:0c:9e:49:81:64:41:f9:1a:59:0c:55:0e:
         c6:6e:e9:2a:02:32:59:74:5d:70:0d:07:a8:01:8d:ce:c9:07:
         d7:db:28:c1:40:e1:98:ed:51:1a:7c:3b:8e:1e:0b:cc:c2:ef:
         ad:0b:e3:ef:3c:09:8c:d9:da:0e:42:b5:31:10:fb:32:32:53:
         0d:c7:d9:9c:47:df:b3:cb:f6:a5:20:13:3a:7b:44:6c:1e:be:
         7a:1e:3b:5b:19:9a:24:2c:f9:48:08:3c:f7:f4:75:c2:f5:1f:
         ac:24:3a:fb:90:36:6d:5e:da:07:72:82:1b:38:23:01:39:b7:
         14:89:58:4e:3c:76:48:79:53:00:b8:47:e0:a4:87:b3:2c:fb:
         8b:20:99:b4:ba:39:60:d7:be:f5:5c:7f:3b:0b:77:04:a9:c4:
         bb:93:8a:7b:bb:f2:90:9f:18:91:bd:6f:ec:de:04:b3:29:37:
         ad:9b:80:a6:5d:e8:d1:78:66:9a:7e:a5:04:dd:8a:52:80:21:
         ee:1b:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----