Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f.cer
File:                     9a177b81-3741-4833-baba-1629081ec54f.cer (raw, json)
Hash identifier:          6EGGrdwyalf0MAR9/+w269uZE2ven6tVSocv+IiJlSs=
Subject key identifier:   B5:3E:B4:D4:0D:C1:0C:C7:5B:3C:6A:DB:E6:16:69:1B:9E:41:F0:65
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858468D3D377713BB7A3604730F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/9a177b81-3741-4833-baba-1629081ec54f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 16 Jul 2024 00:45:20 +0000
Certificate not after:    Mon 19 Oct 2026 00:45:20 +0000
Subordinate resources:    AS: 11187
                          IP: 208.74.80.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8d:3d:37:77:13:bb:7a:36:04:73:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jul 16 00:45:20 2024 GMT
            Not After : Oct 19 00:45:20 2026 GMT
        Subject: CN=9a177b81-3741-4833-baba-1629081ec54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:95:f8:64:ff:d4:ea:76:31:09:8f:5d:b8:
                    db:d6:d2:ad:82:d2:70:db:f0:0c:50:4d:ee:33:d9:
                    1c:a0:e9:06:b9:0d:3f:b2:1e:99:bb:df:73:b4:ff:
                    9e:30:3f:d0:06:2d:79:72:03:9b:f4:f8:de:4d:f7:
                    7b:8d:f6:f4:0a:17:92:c0:f4:fb:96:1b:f3:99:da:
                    e2:2c:dd:3b:ba:5f:29:03:60:e9:43:88:8c:2f:af:
                    ed:3e:2b:84:94:07:33:e1:e5:cb:0b:ca:b7:29:b7:
                    24:ed:4a:f0:29:0f:7d:20:5e:d8:08:42:c9:39:7e:
                    37:d5:9b:df:7f:e1:62:87:01:e0:98:5f:f9:fa:42:
                    d2:bd:3d:83:2d:a6:5e:90:03:ee:d6:24:c6:3f:d5:
                    33:58:3e:1f:55:08:3d:c6:d9:fe:12:ad:2b:1f:29:
                    93:29:ec:df:59:3f:82:37:59:c9:bf:61:14:e3:66:
                    7a:2e:0c:e6:54:ae:ff:ed:ed:68:65:f2:0b:a3:95:
                    61:7c:7d:df:1c:34:d2:38:b3:41:ed:5f:ba:23:15:
                    69:c6:c7:75:59:8c:c2:dd:52:01:3e:38:b4:31:13:
                    fc:93:30:84:0c:e7:5b:e2:2f:e9:0d:0a:20:7c:e9:
                    af:f8:a5:05:99:d7:84:2f:2c:88:2f:27:9d:4f:bb:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3E:B4:D4:0D:C1:0C:C7:5B:3C:6A:DB:E6:16:69:1B:9E:41:F0:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a177b81-3741-4833-baba-1629081ec54f/9a177b81-3741-4833-baba-1629081ec54f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.80.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11187

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:90:39:2f:e0:30:6a:c0:1d:99:aa:12:b9:c6:d0:60:83:15:
         f7:f2:6a:28:12:ae:0a:72:ee:90:b3:17:9d:91:e2:2c:36:64:
         39:a4:88:00:78:f2:f8:5d:67:c4:f6:93:3a:cd:28:c3:cb:63:
         2a:91:e0:b7:f1:1a:87:88:3b:c6:02:87:ca:dd:4c:aa:9b:22:
         21:ec:e1:b1:fb:a7:6f:ac:c2:ec:6d:aa:2c:e4:90:63:37:8c:
         a2:0d:32:08:9d:2b:69:28:dc:ea:cd:5f:23:98:13:61:ac:29:
         1b:20:34:5e:6d:7a:46:cc:a7:35:ae:13:09:3a:92:35:65:a7:
         11:c3:97:bc:2f:71:53:d1:16:85:b6:90:4c:23:1e:8c:12:39:
         f6:77:a5:7b:17:b5:58:94:3c:73:0a:4b:4e:12:e4:d3:83:5f:
         6e:b5:02:1e:94:fc:80:bf:dc:0f:56:36:74:82:48:37:d8:4d:
         3d:c3:27:de:dc:50:0f:3f:67:f3:1d:a1:88:de:0e:32:49:26:
         ed:3f:19:96:32:87:eb:37:a9:87:29:12:2b:1f:b8:af:b8:92:
         62:98:e1:cf:66:9e:9d:d9:a6:69:f3:47:0a:7a:22:2a:db:47:
         bf:6b:59:af:b9:a3:93:b3:cd:fa:e9:8c:2a:b6:31:5b:54:75:
         49:74:c7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----