Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.cer
File:                     7c7d2d2d-ac35-4ded-839a-18fb60af38c6.cer (raw, json)
Hash identifier:          Ev0A2HNGuLENPVTBVITCe3QLobNR7yr4SrECd2GP2m4=
Subject key identifier:   EC:20:D8:C9:F9:D9:2A:AD:30:5A:7E:63:27:89:13:DD:A6:AF:2D:B5
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285846C2483BDB2A4B1424745CE980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 04 Aug 2024 00:45:22 +0000
Certificate not after:    Sat 07 Nov 2026 01:45:22 +0000
Subordinate resources:    AS: 395262
                          IP: 135.84.104.0/22
                          IP: 2620:0:7f00::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c2:48:3b:db:2a:4b:14:24:74:5c:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Aug  4 00:45:22 2024 GMT
            Not After : Nov  7 01:45:22 2026 GMT
        Subject: CN=7c7d2d2d-ac35-4ded-839a-18fb60af38c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:b5:98:1b:9b:d8:6f:e7:26:f9:3e:aa:ca:
                    b1:4f:b8:df:42:83:98:82:b6:1b:2b:3f:9b:c9:9f:
                    b0:d6:b3:ae:c3:ee:6b:bc:bb:64:99:01:12:e8:29:
                    21:79:8b:cb:94:94:6b:c1:53:b9:4f:2a:24:5c:38:
                    e7:09:a1:ac:d3:12:86:ce:82:0a:f9:6c:4b:b8:04:
                    e8:b3:e9:68:50:df:7a:06:6d:35:d5:23:22:2f:6f:
                    20:7e:4f:3f:09:63:71:65:b2:4b:0a:8b:e4:87:17:
                    10:d5:71:44:68:6a:06:49:99:74:f3:bc:c4:fe:18:
                    26:ba:7d:bd:f6:f9:fa:b0:aa:77:e8:f4:e3:e7:f7:
                    b9:df:b7:c6:46:8f:1e:78:88:ed:45:b0:45:14:1a:
                    f8:57:a4:10:f0:ff:a2:cd:3e:69:15:b9:35:77:77:
                    a5:5c:d4:eb:d9:13:4d:3d:5d:20:72:1d:f6:37:9c:
                    30:37:6b:df:22:b1:2e:f5:de:48:84:d2:da:ad:7b:
                    93:e2:67:03:ce:17:d0:ca:1b:31:0a:13:86:0b:0f:
                    f3:c9:e1:0b:51:9d:fd:0c:36:17:d9:d5:e8:b2:2a:
                    e9:18:56:59:76:1a:9b:66:36:07:e8:ca:ed:54:59:
                    90:a2:6e:2a:d1:b5:b9:8c:1b:fc:a2:f8:7c:2e:f6:
                    57:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:20:D8:C9:F9:D9:2A:AD:30:5A:7E:63:27:89:13:DD:A6:AF:2D:B5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c7d2d2d-ac35-4ded-839a-18fb60af38c6/7c7d2d2d-ac35-4ded-839a-18fb60af38c6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.104.0/22
                IPv6:
                  2620:0:7f00::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395262

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a6:51:36:5e:bc:74:64:1a:06:6a:5b:57:5a:ac:c2:d8:c7:
         ae:0e:1c:bb:86:30:0a:78:be:a6:85:33:6a:ba:dd:67:89:56:
         35:b6:ed:6f:b9:d6:1a:65:b7:82:6b:82:74:a7:27:47:a9:da:
         0a:6b:99:2f:25:d9:88:67:00:41:0f:db:03:cc:37:e2:f5:58:
         e1:1f:0f:53:f9:91:e6:c6:3d:4b:d8:27:59:a5:2c:80:e7:bb:
         68:72:65:c6:e4:3c:20:ea:c0:b2:e3:05:25:2a:22:67:1b:41:
         5d:4f:88:6d:78:04:1c:7b:a8:0c:e3:2b:76:0e:9c:22:51:a0:
         69:d9:9d:b6:9a:15:2b:60:9b:1c:2e:03:04:d1:68:5f:80:6f:
         ff:60:d7:76:bd:0a:a6:97:f4:cf:84:b4:d3:2f:08:a2:80:c3:
         5c:cc:d2:18:2d:4b:22:c5:b2:3a:d3:fa:d8:35:97:1d:be:de:
         c2:ae:58:8d:c1:a8:3d:0e:fb:46:83:dc:8b:14:0b:06:ca:1f:
         14:80:11:27:24:24:ac:67:4f:31:b5:2f:50:0a:e2:09:8b:ff:
         b8:99:36:ad:c6:1f:04:82:d1:9c:3a:e3:4c:83:61:18:bc:9d:
         38:f8:f4:02:e2:f3:fd:3a:19:27:e1:05:c5:60:06:9b:c3:e5:
         a0:30:40:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----