Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.cer
File:                     78840f5a-619f-4ff3-95b9-5b73beb3d2d9.cer (raw, json)
Hash identifier:          Z6u3BcbQQaKpVhJq+xWeYtAZAfgrWUTdbsPIi9h0vVw=
Subject key identifier:   7C:7D:CC:1D:64:7F:31:F4:73:BC:44:F5:73:56:2B:02:4E:30:4B:E0
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584441F4F5AA9DFA7FDC97103B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Dec 2023 16:00:15 +0000
Certificate not after:    Thu 25 Dec 2025 01:45:22 +0000
Subordinate resources:    IP: 2620:10f:d000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:41:f4:f5:aa:9d:fa:7f:dc:97:10:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Dec 18 16:00:15 2023 GMT
            Not After : Dec 25 01:45:22 2025 GMT
        Subject: CN=78840f5a-619f-4ff3-95b9-5b73beb3d2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:92:27:91:c6:6c:d4:7e:25:88:67:5b:e7:02:
                    f4:2c:f1:1c:a3:d1:cc:5c:2f:1e:cf:7c:9c:9f:c3:
                    b1:68:3e:dd:6e:6a:a8:d2:7a:6e:72:16:5d:42:28:
                    0c:aa:ae:74:11:da:1d:fd:23:04:5b:7d:8c:04:a4:
                    ff:11:44:9e:04:f9:63:9c:3a:ea:39:b5:35:3f:0a:
                    39:f0:74:d7:43:0c:05:85:30:76:8f:09:06:d3:56:
                    4f:22:ee:bb:a6:61:4b:74:10:bb:42:1b:23:56:75:
                    87:80:dc:97:ec:30:4c:aa:fb:6b:dc:97:1f:a0:fe:
                    71:98:5c:9a:c8:1d:e3:6a:ec:00:86:90:53:36:4d:
                    bb:d3:1f:f2:15:2c:c5:a9:e0:45:0d:3a:ce:90:90:
                    77:17:ea:af:db:20:d1:3f:a1:28:ae:e9:ba:19:fd:
                    71:3e:d8:5c:56:58:ea:6a:92:42:12:78:f1:e6:e9:
                    b1:c2:df:a2:1b:5b:96:44:42:32:03:f2:14:dc:f7:
                    5b:ee:56:4b:60:08:51:f3:5c:22:2e:b3:ac:ae:55:
                    d5:22:af:7f:a6:46:69:99:db:3c:65:26:bc:c7:6b:
                    1e:e1:64:67:6a:e3:b0:48:8e:53:74:33:cf:60:87:
                    a5:13:c5:1c:31:a0:fe:c9:ac:7c:75:e0:53:17:52:
                    f3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7D:CC:1D:64:7F:31:F4:73:BC:44:F5:73:56:2B:02:4E:30:4B:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/78840f5a-619f-4ff3-95b9-5b73beb3d2d9/78840f5a-619f-4ff3-95b9-5b73beb3d2d9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:10f:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:cf:04:e8:4f:a1:bf:c8:0a:ce:8c:86:a1:a9:06:2d:47:36:
         8c:0e:57:9f:63:c3:87:2d:9a:93:2c:40:f6:f6:26:06:af:c1:
         8c:88:b7:95:0a:49:43:3f:ca:eb:7d:0a:fc:8d:c4:c4:7e:63:
         5d:de:7c:34:d6:f2:ee:4e:1b:98:ba:cf:58:d9:8d:73:9b:e5:
         b7:a1:cf:cf:fa:64:04:ef:21:69:98:e7:2d:f6:26:10:bd:17:
         fe:d9:c8:78:1b:b3:6a:f8:34:38:44:90:97:fd:65:cb:40:59:
         97:7e:d5:65:91:39:ea:e6:28:78:7d:16:3e:9a:d9:e4:3e:af:
         1e:39:9e:af:f5:8f:4e:8a:2b:9f:71:0c:7a:ab:30:f3:36:20:
         bc:b7:9a:5f:b8:08:ec:6f:e0:42:15:1c:93:48:01:11:e4:d7:
         69:b7:56:f9:39:38:e6:d9:25:44:49:6f:cb:ce:53:cb:bb:e0:
         ff:27:c8:22:9f:a4:2f:2c:2e:97:6a:95:a4:71:ac:a1:36:1a:
         a3:ed:1d:23:05:42:14:7a:74:31:8b:a6:96:d9:21:11:03:68:
         4d:3e:83:66:66:0a:a0:e3:7c:59:0b:f0:41:25:b9:5f:9b:7e:
         0e:96:fc:75:98:e5:aa:8e:f3:94:27:4f:8f:0b:e1:4b:b4:25:
         77:44:d1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----