Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
File:                     a7e64b66-84df-4665-a4fb-eb3b8add365e.cer (raw, json)
Hash identifier:          CNtEGUvfhFUWJ1WF2NulPXXfXa3knkOXRjOh7O+QitI=
Subject key identifier:   44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584398ADCC25CE27919AC1C17000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Oct 2023 00:45:15 +0000
Certificate not after:    Wed 21 Jan 2026 01:45:15 +0000
Subordinate resources:    IP: 131.232.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:98:ad:cc:25:ce:27:91:9a:c1:c1:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Oct 19 00:45:15 2023 GMT
            Not After : Jan 21 01:45:15 2026 GMT
        Subject: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:3a:ec:cf:53:78:97:01:92:3a:67:b0:55:
                    11:31:c6:9d:f1:87:d2:ec:e1:a2:c3:1f:e0:43:61:
                    ba:aa:5e:e9:b1:e6:e4:7e:78:52:36:1e:0c:6d:55:
                    03:89:20:61:f0:44:0c:e7:f4:14:77:87:c7:e3:ee:
                    84:63:8b:f3:b9:e5:41:8d:d3:86:39:03:97:21:b4:
                    78:22:05:09:d8:e2:2e:f2:f9:03:1f:0e:79:34:ab:
                    95:2a:ff:ec:fd:96:07:96:d3:68:0c:b6:90:66:db:
                    21:10:68:30:a9:bf:09:27:06:cd:3b:87:7c:5e:40:
                    e8:81:ad:0d:aa:1c:9a:39:c4:69:30:25:b3:c2:10:
                    27:b4:7c:df:61:75:5b:f1:fe:f6:c1:43:0b:ba:4d:
                    22:5f:bc:47:66:bb:a2:35:b0:19:a2:38:6f:1e:e8:
                    ca:51:16:2e:57:be:d7:b4:a1:7a:59:55:86:b1:59:
                    88:aa:15:c1:bd:8b:6f:36:ab:30:53:d4:bd:a3:82:
                    1e:99:39:66:66:d0:3f:42:62:9b:5f:3e:83:e1:d4:
                    1d:9b:2e:50:3e:5f:e8:68:89:e9:9c:52:52:b3:8f:
                    72:4d:c6:51:20:3f:3d:18:7a:1e:70:5c:3c:68:62:
                    66:c2:b1:a6:96:6d:d8:8f:d4:46:c9:53:43:3c:29:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8b:31:63:c5:2d:12:70:51:71:47:b7:a1:e0:19:88:f0:c1:
         03:25:2c:41:7c:69:90:69:21:01:a8:54:01:27:41:28:8b:95:
         19:f4:51:a6:0d:1a:b0:57:9c:64:f8:8f:c4:d4:74:95:7b:4a:
         c8:c6:2c:b5:1a:57:99:c3:eb:ed:19:7d:e9:b6:03:71:02:9e:
         20:2f:ee:2a:61:d7:b8:76:df:0a:3f:75:72:1f:c6:4b:2c:be:
         12:67:30:e9:31:e9:62:89:96:ab:8e:d6:23:db:03:d7:f6:92:
         3c:60:23:a4:ca:3f:6d:23:14:48:2b:58:55:16:d9:e8:76:ba:
         ff:cc:94:de:96:95:fd:f8:6d:72:10:98:64:7f:29:3f:67:c7:
         6e:35:66:97:c9:7e:30:10:25:6c:7f:3b:84:89:e6:67:bb:b4:
         62:66:66:37:fb:f4:1e:61:80:eb:cd:a8:6e:90:28:78:3c:8b:
         7e:21:15:42:0d:a6:b3:63:15:93:99:e0:54:21:55:f6:00:8f:
         11:7f:ce:fb:d4:49:7b:4e:04:c1:b7:9d:97:31:33:52:e4:b2:
         c8:ca:e3:87:f8:1e:1f:8c:9c:48:fa:a2:c1:4d:7d:89:6c:50:
         13:41:4c:19:6d:20:64:84:8e:90:51:c1:67:ad:ef:d0:eb:8a:
         f5:72:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----