Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer
File:                     a920645f-6928-416c-87e9-a0135e5720e4.cer (raw, json)
Hash identifier:          ad25dQtmL+c0Bpyly88/ppV7Hwr6keMP1P9I9wQK3V0=
Subject key identifier:   0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858477D541A08E7349F8A1439DB40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Oct 2024 00:45:26 +0000
Certificate not after:    Wed 13 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 13657
                          IP: 67.215.192.0/20
                          IP: 104.242.0.0 -- 104.242.223.255
                          IP: 216.235.0.0/20
                          IP: 2001:4900::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:54:1a:08:e7:34:9f:8a:14:39:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Oct 10 00:45:26 2024 GMT
            Not After : Jan 13 01:45:26 2027 GMT
        Subject: CN=a920645f-6928-416c-87e9-a0135e5720e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:07:6f:ae:ef:ee:08:b1:c5:9d:f1:96:83:
                    36:e1:53:e1:0d:e5:da:c8:2c:28:0e:86:7c:a1:96:
                    ce:92:02:3a:2e:4c:18:d3:7a:aa:cc:30:91:d7:79:
                    7a:30:95:e8:c6:5d:2d:60:53:14:c6:3e:56:20:92:
                    98:fe:50:3b:c5:20:56:b7:56:f9:ed:7c:1c:00:be:
                    c7:42:a8:fb:7c:68:0f:c0:b3:cf:b7:57:69:ed:2b:
                    6c:e9:57:7e:83:64:d7:fb:28:57:42:08:bd:d6:8e:
                    6e:39:e2:a3:eb:a8:dd:72:45:7f:ef:1a:d3:a8:9b:
                    91:f6:d1:5f:60:09:48:ec:0d:7e:23:e0:89:0f:fe:
                    0c:f5:52:65:3f:bc:ab:7a:b2:a5:0b:2d:aa:fb:29:
                    0c:da:8b:9a:90:61:90:38:c3:45:0d:70:73:ae:f0:
                    4d:f9:c0:f0:23:65:7b:34:ae:bf:31:20:4c:d2:1d:
                    1e:b0:1a:fa:66:0e:81:00:a5:e0:2e:d6:f0:0d:fa:
                    d3:49:6c:89:3d:21:a9:5d:72:2d:04:1d:ac:9a:5c:
                    a5:e6:3f:2f:76:92:e7:e3:de:64:39:a0:f8:c2:b0:
                    00:6f:d1:1f:95:9c:68:d2:f0:ff:c2:1c:3d:2b:db:
                    d2:45:43:50:2d:6a:b8:e1:a0:10:85:a9:cd:ef:10:
                    75:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.192.0/20
                  104.242.0.0-104.242.223.255
                  216.235.0.0/20
                IPv6:
                  2001:4900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13657

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:0a:ee:fa:86:25:b5:0c:fa:cb:92:12:05:93:ad:47:c6:f0:
         83:e8:64:b7:09:2d:0b:33:bc:93:5d:f7:37:16:6b:e3:7c:e2:
         62:8a:3c:d3:1f:13:c5:1e:12:1d:69:a7:38:96:d1:fe:5a:b5:
         71:46:e1:9a:ed:8a:87:53:13:e3:49:7f:11:de:f6:f1:e4:46:
         6c:0c:20:91:ca:fc:56:18:b9:32:ea:44:0d:f6:9e:de:f3:17:
         28:d2:b8:13:a7:fa:02:dd:41:b7:5a:16:4b:ba:f1:0f:30:fc:
         45:2d:19:29:dc:88:3a:d8:b0:20:43:b8:82:2c:7d:09:be:01:
         a5:91:f8:2f:5e:ea:6e:da:c9:60:e5:38:bf:8e:72:f1:7c:8b:
         46:27:8d:25:84:34:dc:a7:76:9d:a2:88:16:f6:05:75:a4:90:
         a7:cd:e4:b9:1a:7a:d9:ab:20:31:ac:0d:eb:1d:f0:54:22:b0:
         b3:d7:e7:07:e1:15:11:00:c9:a0:ce:3e:79:67:e0:71:d4:75:
         e5:0c:07:82:5a:ee:3b:6f:28:b6:32:78:49:d4:be:e1:89:b8:
         c5:a8:39:e7:5b:30:04:a0:14:81:d4:37:ad:24:33:5f:27:95:
         5b:f9:39:18:3e:3b:34:cc:2a:ab:c3:1a:82:d0:7e:b9:6e:dc:
         17:74:40:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----