Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer
File:                     df28494f-1d3f-4a45-8a74-bde41c2502a2.cer (raw, json)
Hash identifier:          pklcRyjm7Q+igaFY/p2Nsx9E/mqJVp0iWXZ9NDWBzI0=
Subject key identifier:   A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285844940D310003C3D67E93846F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Jan 2024 01:45:21 +0000
Certificate not after:    Tue 21 Apr 2026 00:45:21 +0000
Subordinate resources:    AS: 64236
                          IP: 66.181.32.0/19
                          IP: 2604:abc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:94:0d:31:00:03:c3:d6:7e:93:84:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jan 17 01:45:21 2024 GMT
            Not After : Apr 21 00:45:21 2026 GMT
        Subject: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6b:18:02:96:5f:a0:13:a2:81:bf:10:03:24:
                    bf:f5:26:4f:9f:5e:8d:eb:5e:d6:ab:b0:8f:21:ed:
                    ae:29:74:4a:dd:a2:da:9c:3a:54:fb:b3:f1:22:9d:
                    fe:c0:89:5f:a2:e9:ee:84:d5:d8:49:4e:1f:10:bc:
                    12:3e:81:82:b9:4e:31:21:26:8a:b2:79:2c:39:69:
                    01:56:01:8e:19:96:df:95:1f:e6:f3:36:1e:73:4f:
                    b1:64:eb:7c:8d:38:61:c5:2b:28:4c:2c:ae:71:86:
                    56:a1:22:e6:c3:f1:72:32:cf:f2:97:21:ee:1b:0b:
                    59:af:c7:4c:83:6d:33:99:7d:29:b0:83:10:26:a6:
                    c2:f5:56:a4:2c:e3:49:ad:3c:67:51:2d:6b:41:1d:
                    76:2d:4c:cf:7e:d9:83:71:b5:ed:74:01:70:21:a4:
                    ae:9d:0e:d8:66:47:9b:8a:7c:be:f2:9f:6b:f3:48:
                    04:16:59:de:72:d0:d5:5d:27:e1:b8:21:d9:6f:bc:
                    65:6e:b1:95:5b:04:5e:e4:2d:37:16:c9:df:cd:40:
                    4d:01:1e:df:7c:ac:23:b4:d5:35:66:62:93:c9:14:
                    3c:7c:9a:1d:8d:3a:7f:6f:2d:74:44:ed:78:10:91:
                    a4:06:77:ba:4c:01:12:34:48:a6:e9:4e:1c:78:df:
                    a0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.181.32.0/19
                IPv6:
                  2604:abc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64236

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:db:57:56:20:71:c3:71:86:ea:88:10:5f:24:83:9b:1a:09:
         e7:89:24:83:33:9f:a7:6c:41:0a:02:c1:67:ff:fe:b1:82:83:
         d9:3b:0d:8d:44:a1:a0:a5:19:b7:59:e0:06:9d:c5:77:e0:b7:
         5e:b6:10:f7:05:cc:2b:78:7b:cf:2c:67:fa:af:79:57:86:41:
         66:18:e2:94:11:e8:44:27:c2:57:a7:b1:09:a9:00:c2:b9:e6:
         9b:4e:6e:fb:f8:8a:03:02:11:b4:38:fd:72:79:e9:d9:d8:93:
         5e:16:12:7c:97:79:0d:aa:8b:b0:41:e8:f2:62:86:5d:af:41:
         78:75:79:b0:40:70:4d:3b:69:c1:d1:a1:3a:cd:ac:62:83:56:
         a1:ec:fa:fc:15:9d:a3:0e:31:48:d4:04:c5:22:3d:41:3b:43:
         c1:00:21:29:44:eb:a9:0d:1c:2b:49:6f:16:cd:0c:3e:81:cd:
         0b:48:d7:37:f6:ea:e3:6a:24:e9:fa:ba:88:fa:85:20:7f:cc:
         05:2e:07:68:4c:78:d4:6a:67:99:82:7b:0f:a4:e7:8b:51:ff:
         6c:1b:0e:ce:9b:57:ce:11:17:e1:14:e8:cb:5d:f4:f0:ee:d7:
         5a:43:bb:2d:1e:a7:e4:10:b4:f6:b2:9d:43:04:55:82:29:18:
         09:ef:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----