Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017.cer
File:                     d3627be9-2fb3-42f3-bcb2-6a247a2d1017.cer (raw, json)
Hash identifier:          mz1hzdM+Df/B0APMCTyaq3BFfu2W2bieidVZGDDneNs=
Subject key identifier:   A1:22:53:81:63:B5:4E:E7:2C:64:FF:9B:F6:EA:92:AD:B0:A1:A5:64
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858459D2667EFD1B29ED8BF299940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/d3627be9-2fb3-42f3-bcb2-6a247a2d1017.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 21 Apr 2024 00:45:22 +0000
Certificate not after:    Sat 25 Jul 2026 00:45:22 +0000
Subordinate resources:    AS: 396278

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:26:67:ef:d1:b2:9e:d8:bf:29:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Apr 21 00:45:22 2024 GMT
            Not After : Jul 25 00:45:22 2026 GMT
        Subject: CN=d3627be9-2fb3-42f3-bcb2-6a247a2d1017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:2b:3d:06:b4:70:df:45:5a:c8:6c:85:02:
                    d3:0d:1e:46:a0:e8:f1:b0:96:d5:28:66:58:90:11:
                    9a:a1:a4:a1:28:b9:cc:8f:d6:e4:a5:b8:53:9b:4f:
                    af:59:c2:30:12:3b:33:c8:2a:83:fb:12:cf:f9:52:
                    3e:e5:94:db:87:f8:34:69:19:0b:fc:26:0f:a1:c6:
                    56:1f:c0:50:02:23:75:d6:eb:90:e9:7c:02:ef:f8:
                    e2:78:75:a1:7d:2c:6c:b1:ed:8e:c4:51:87:d2:a4:
                    81:57:bd:bb:4a:6d:72:8b:80:a2:e2:a1:fb:42:57:
                    40:18:68:9e:54:e6:78:ad:ce:cc:d8:27:5a:90:a3:
                    31:3b:b1:7c:8a:4c:a6:52:2a:21:b5:dd:b5:e3:73:
                    e4:e3:de:88:ed:74:25:24:c1:d6:9e:cd:a2:4a:f0:
                    66:5d:65:d2:f6:c8:cc:0b:f7:9a:9b:43:6f:3c:8d:
                    a2:d8:57:84:07:97:42:3b:54:48:b0:d0:27:b7:de:
                    c6:0e:45:dd:05:eb:0e:84:7f:da:78:36:ff:f7:85:
                    eb:1e:3c:4a:41:96:7e:86:ca:3f:7e:40:f0:35:0d:
                    8f:e1:4a:39:4c:80:6b:f0:44:fe:81:e4:0d:ca:39:
                    f9:04:bc:ad:fe:fb:8b:af:53:18:ea:21:db:3b:9e:
                    c5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:22:53:81:63:B5:4E:E7:2C:64:FF:9B:F6:EA:92:AD:B0:A1:A5:64
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d3627be9-2fb3-42f3-bcb2-6a247a2d1017/d3627be9-2fb3-42f3-bcb2-6a247a2d1017.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396278

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:e7:3e:29:55:55:96:69:07:2a:e0:71:e2:2f:ca:7b:d9:
         5a:e3:a4:e5:da:ba:12:cd:d8:ce:b9:5c:02:b0:3b:4f:16:10:
         fd:9e:a9:97:1c:6c:46:c4:00:fb:52:fa:c8:c6:6c:8c:93:cf:
         21:ad:aa:d8:ea:25:ce:41:91:73:c7:90:5a:0f:b0:5e:ff:c1:
         e9:dd:93:6d:29:80:bd:3a:77:82:49:5c:98:4a:1f:d2:71:df:
         30:e2:db:60:08:5e:ea:1a:2f:d7:7b:bc:99:3a:81:c1:17:1c:
         19:6d:8d:65:2f:90:b0:1c:f8:a4:22:71:f6:ed:f9:ce:a0:55:
         9e:85:af:26:84:d0:6f:1e:75:e0:06:a7:22:11:5e:0f:d9:c9:
         1d:7b:5c:c1:9b:f0:6f:5c:88:44:b4:d1:ee:b7:75:29:12:be:
         95:5e:d3:ee:3d:27:c1:61:fe:be:f5:db:5e:d2:d5:3b:d3:c6:
         f0:53:89:99:9f:24:df:a3:18:e2:1e:45:3c:4b:2a:b3:d5:fa:
         f9:eb:8f:3e:57:f8:44:48:15:4a:37:19:e2:d0:90:e2:fa:d2:
         46:92:79:ed:46:65:f4:b2:db:c2:13:01:df:4a:0d:a0:88:b2:
         24:9c:bd:31:65:51:77:78:1c:ec:3d:82:92:40:4c:83:e5:d1:
         86:73:c5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----