Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.cer
File:                     78840f5a-619f-4ff3-95b9-5b73beb3d2d9.cer (raw, json)
Hash identifier:          QlICOsuAJu6ZxKb9GvcqhaQeDPUAuuX6sAxREkhUCnA=
Subject key identifier:   7C:7D:CC:1D:64:7F:31:F4:73:BC:44:F5:73:56:2B:02:4E:30:4B:E0
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285848519DEC234552C4C7A290F900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 25 Dec 2024 01:45:33 +0000
Certificate not after:    Tue 30 Mar 2027 00:45:33 +0000
Subordinate resources:    IP: 2620:10f:d000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jan 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:9d:ec:23:45:52:c4:c7:a2:90:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec 25 01:45:33 2024 GMT
            Not After : Mar 30 00:45:33 2027 GMT
        Subject: CN=78840f5a-619f-4ff3-95b9-5b73beb3d2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:92:27:91:c6:6c:d4:7e:25:88:67:5b:e7:02:
                    f4:2c:f1:1c:a3:d1:cc:5c:2f:1e:cf:7c:9c:9f:c3:
                    b1:68:3e:dd:6e:6a:a8:d2:7a:6e:72:16:5d:42:28:
                    0c:aa:ae:74:11:da:1d:fd:23:04:5b:7d:8c:04:a4:
                    ff:11:44:9e:04:f9:63:9c:3a:ea:39:b5:35:3f:0a:
                    39:f0:74:d7:43:0c:05:85:30:76:8f:09:06:d3:56:
                    4f:22:ee:bb:a6:61:4b:74:10:bb:42:1b:23:56:75:
                    87:80:dc:97:ec:30:4c:aa:fb:6b:dc:97:1f:a0:fe:
                    71:98:5c:9a:c8:1d:e3:6a:ec:00:86:90:53:36:4d:
                    bb:d3:1f:f2:15:2c:c5:a9:e0:45:0d:3a:ce:90:90:
                    77:17:ea:af:db:20:d1:3f:a1:28:ae:e9:ba:19:fd:
                    71:3e:d8:5c:56:58:ea:6a:92:42:12:78:f1:e6:e9:
                    b1:c2:df:a2:1b:5b:96:44:42:32:03:f2:14:dc:f7:
                    5b:ee:56:4b:60:08:51:f3:5c:22:2e:b3:ac:ae:55:
                    d5:22:af:7f:a6:46:69:99:db:3c:65:26:bc:c7:6b:
                    1e:e1:64:67:6a:e3:b0:48:8e:53:74:33:cf:60:87:
                    a5:13:c5:1c:31:a0:fe:c9:ac:7c:75:e0:53:17:52:
                    f3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7D:CC:1D:64:7F:31:F4:73:BC:44:F5:73:56:2B:02:4E:30:4B:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8f:4c:9c:10:ab:22:4e:e9:de:93:de:72:8c:43:a9:4a:ae:
         fa:d7:25:bb:67:8b:a4:88:e9:9f:44:e9:78:44:42:b3:bb:b9:
         84:f8:d2:3e:ee:84:f9:24:43:0c:6d:ae:95:87:48:2b:f8:45:
         a1:47:d0:4d:9d:c5:04:d7:ee:c8:73:8f:9e:de:ce:60:84:bc:
         34:73:75:2a:92:1f:f3:61:79:a6:8c:97:69:6a:53:f5:6e:39:
         0d:42:98:36:68:0f:a5:f7:c0:83:4e:b3:7b:19:90:e7:f0:ce:
         6d:d2:e8:5e:61:fc:ef:e4:7e:9c:2f:ad:be:53:27:b0:93:77:
         18:9c:05:4f:fe:d6:c1:81:84:1b:a0:fa:a2:92:38:44:2b:fb:
         e5:6b:c0:3a:4b:12:6b:62:3b:d9:21:fd:64:64:64:13:21:d9:
         56:dc:dc:96:8f:24:d2:68:39:2f:0a:e2:78:a5:ff:23:21:8b:
         82:de:2f:1d:19:85:0e:4a:c8:fa:c8:88:35:81:4a:c8:c8:a0:
         ad:e7:e6:c3:45:f3:7b:54:7a:fb:3f:d6:90:fe:83:46:77:03:
         70:00:34:36:89:6b:77:b5:1d:bf:78:6a:e1:da:f1:47:d0:07:
         57:93:78:55:0b:31:7d:8c:71:b1:8f:61:32:25:58:b3:75:a8:
         c4:48:be:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----