Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
File:                     74a9db22-8d49-4938-9c6f-e3fd428c158e.cer (raw, json)
Hash identifier:          OABa2Rclx5VNrvTGY6J12Sf1vXLr6UqEBN35/jMqejs=
Subject key identifier:   98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858478B498E9C7C3D482030128B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 15 Oct 2024 00:45:31 +0000
Certificate not after:    Mon 18 Jan 2027 01:45:31 +0000
Subordinate resources:    AS: 63399
                          AS: 394574
                          IP: 170.10.192.0/19
                          IP: 199.27.150.0/23
                          IP: 209.127.80.0/20
                          IP: 2620:e1:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8b:49:8e:9c:7c:3d:48:20:30:12:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Oct 15 00:45:31 2024 GMT
            Not After : Jan 18 01:45:31 2027 GMT
        Subject: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:9e:72:47:67:b9:6d:40:75:cd:3e:3f:9c:
                    a3:02:21:a5:81:ed:35:49:ab:86:53:dd:da:ac:5e:
                    4c:0f:7b:13:3a:a2:f6:39:da:4f:63:77:10:69:b7:
                    8a:91:7b:66:be:20:76:19:06:36:90:38:2f:4c:f4:
                    d3:3d:18:e3:65:f1:2d:b2:f7:73:d0:c7:8b:e4:b5:
                    df:51:31:6e:3d:cc:c1:5a:78:b1:b9:d9:e5:23:b3:
                    19:15:21:f4:72:58:db:f1:de:38:ff:35:c1:0d:21:
                    b9:ee:80:c8:05:d6:2e:ed:b9:d8:f5:7d:dc:9e:1b:
                    08:e2:7c:17:56:3b:79:b3:00:dd:d2:ae:66:ff:06:
                    f2:6b:73:8d:67:14:29:02:5a:cc:dc:1e:6e:4e:fc:
                    c5:24:1a:e7:eb:e9:56:2c:50:24:00:2f:8a:b0:30:
                    0f:fe:18:f1:85:fb:38:4d:e7:a6:4f:ad:6f:3a:02:
                    40:b6:5d:27:bb:cc:bd:11:c2:71:a3:b9:44:a4:39:
                    45:42:76:8f:c9:38:a2:0b:e9:78:bd:6c:3e:1b:fa:
                    c2:bd:80:2c:8f:96:1b:69:cf:c1:84:12:74:f6:b7:
                    85:f9:84:36:95:b8:5f:74:71:0b:6e:f4:19:94:77:
                    f2:bf:fc:83:8a:93:fc:a9:7f:96:76:70:33:4b:5f:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.192.0/19
                  199.27.150.0/23
                  209.127.80.0/20
                IPv6:
                  2620:e1:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63399
                  394574

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:80:33:dc:5e:1e:e6:f2:50:22:46:8a:af:c3:79:77:7a:f1:
         91:2b:a2:2f:2f:2f:15:8c:da:62:b6:35:55:56:58:4d:ac:14:
         30:e0:76:03:be:51:4e:29:4f:22:40:3b:17:ff:a4:0b:72:e1:
         cf:c7:3d:5c:84:c5:e7:bb:ba:59:ed:d0:95:f3:f7:b8:43:72:
         df:21:1b:c7:ef:77:de:ad:64:57:2a:b7:50:21:d0:c3:3a:59:
         91:72:19:16:17:f3:27:43:1e:29:73:7a:e0:09:f0:0b:d0:a2:
         24:1a:12:09:d9:37:11:59:ef:4f:56:bb:80:1a:85:50:0d:ad:
         41:49:66:bd:2f:5d:ec:f7:82:b1:08:b6:e7:e8:eb:9a:be:57:
         c3:09:7b:86:f6:bb:ec:30:d2:db:5c:98:4e:49:3f:ab:07:e3:
         1d:ed:b2:92:6e:e9:98:af:d0:92:ea:eb:21:31:55:c1:f3:29:
         68:df:5c:08:5e:c4:15:b3:62:06:2a:f1:5f:e0:06:82:5c:ff:
         b5:6d:80:21:b0:38:c5:ff:0a:a7:e6:3a:7b:12:e1:1b:eb:21:
         21:1e:8c:65:dd:2d:b2:0d:c3:c6:4e:4d:01:39:41:d9:68:e1:
         17:1b:4d:74:6e:cc:90:40:f9:35:fd:e4:2f:46:52:a2:7a:fd:
         61:56:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----