Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43.cer
File:                     9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43.cer (raw, json)
Hash identifier:          Qfh1VYAR+NyVmbgDyXbJjhSIkwzTfcl1vt69Bfa9a04=
Subject key identifier:   C5:EB:45:97:22:9D:7D:70:AB:E3:E3:EE:E7:74:6F:3E:A6:4D:AF:D3
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285841E483541D21C4BEC1F0246180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 04 Aug 2025 19:06:39 +0000
Subordinate resources:    IP: 67.219.180.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:54:1d:21:c4:be:c1:f0:24:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug  4 19:06:39 2025 GMT
        Subject: CN=9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9f:fd:fe:81:5c:12:9f:99:ac:74:ef:82:5c:
                    4a:4a:15:6e:1f:44:a7:3d:42:46:9a:23:9b:48:ff:
                    89:fe:23:d4:6a:98:f8:60:04:13:93:e0:20:6c:89:
                    34:6d:df:08:e1:9b:ca:79:0c:5c:6e:3a:f2:73:a6:
                    d0:92:98:c6:74:6d:fc:fe:34:da:92:af:57:23:a3:
                    f5:6e:bf:2c:04:75:dc:d4:40:64:3c:ce:03:57:6d:
                    d4:20:bb:04:2f:cf:8d:62:ba:b6:df:c4:bf:89:26:
                    3f:01:ac:1f:64:a8:90:4a:5f:ca:6f:06:ce:68:bb:
                    a9:36:ea:21:77:93:f9:f9:c8:c7:9a:18:08:82:bb:
                    9e:c2:d9:eb:c7:5f:1c:15:11:5a:95:62:cd:4b:9b:
                    12:f9:a5:a0:bc:eb:02:65:8b:e6:b6:55:c1:05:cb:
                    99:b5:71:45:fa:ac:b9:2b:9b:97:4b:ad:e4:f3:b2:
                    64:95:a1:b2:f6:4c:55:8d:76:0c:82:41:bb:bc:85:
                    6a:ec:28:ce:e7:6f:8f:3e:dc:82:ff:a2:2a:af:ef:
                    bf:c8:82:3d:30:68:63:ba:74:98:76:85:a8:c8:23:
                    bd:0d:71:60:da:a9:3c:4a:40:f1:3b:cf:06:38:80:
                    6d:8d:b7:c0:d6:ea:6e:f5:8c:7e:b4:99:f6:33:fa:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EB:45:97:22:9D:7D:70:AB:E3:E3:EE:E7:74:6F:3E:A6:4D:AF:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:95:14:8f:46:29:69:c9:b6:43:10:ca:01:c6:56:2c:dc:0c:
         48:78:c1:9a:86:3b:e6:fe:fe:c8:e5:54:e0:51:b5:9c:44:86:
         b4:f1:29:15:0f:de:5a:e0:5c:5c:09:e0:b9:0a:18:06:76:3e:
         d2:56:72:41:49:e6:aa:cc:ea:e9:3c:cf:1f:be:5b:ae:92:74:
         85:7a:9f:d3:96:a6:99:22:34:ca:b8:fa:30:26:9e:ae:c8:8f:
         09:30:a2:90:14:08:9e:b9:12:c0:53:f1:dc:89:1d:9d:1c:2f:
         a5:04:16:9c:2b:36:b2:2a:32:5f:85:db:00:d4:2b:67:98:4a:
         ad:76:4c:ca:b6:06:16:8f:4f:af:f7:8b:9a:30:f1:65:1c:01:
         89:4a:4d:ee:de:62:88:88:e4:2c:6d:0a:55:66:dc:f4:33:ed:
         8f:58:37:11:f6:81:fa:9b:56:d6:d9:a0:83:12:5b:20:46:38:
         af:e3:3b:ad:55:63:29:e7:a7:d9:69:46:e2:7f:41:d8:3f:a3:
         c6:c5:fc:9a:9f:e0:af:ea:94:b1:97:4c:8d:50:10:2e:1b:a2:
         18:22:13:4e:78:df:96:a0:06:86:84:a8:21:7e:15:3e:fd:44:
         bf:0f:0a:18:4b:0b:20:3f:08:0a:ae:68:04:f0:b2:7a:76:3a:
         e7:b4:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----