Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1.cer
File:                     f488b7b9-ef6e-4097-9207-940bc62289f1.cer (raw, json)
Hash identifier:          ls5ekN8jnhRL0P69Mgsrxe8+rvoNKuM1dGqI9+7eUQM=
Subject key identifier:   3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285845A4953113E07B3BADAED4CD20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Apr 2024 16:39:15 +0000
Certificate not after:    Mon 11 May 2026 19:16:23 +0000
Subordinate resources:    AS: 53889
                          IP: 23.176.56.0/24
                          IP: 2602:f984::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:95:31:13:e0:7b:3b:ad:ae:d4:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Apr 23 16:39:15 2024 GMT
            Not After : May 11 19:16:23 2026 GMT
        Subject: CN=f488b7b9-ef6e-4097-9207-940bc62289f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:3d:60:a4:42:83:67:88:6c:48:7b:e0:e5:
                    65:01:bd:75:98:fe:1d:c1:08:f3:7a:ac:22:16:dd:
                    b8:ee:8e:f3:1e:5c:94:67:af:cd:fd:c9:0a:d6:eb:
                    5b:e1:57:0d:73:7a:0d:34:eb:d5:42:11:89:95:b0:
                    c6:ed:b3:3c:3c:a7:d4:d1:0a:bc:7e:ba:7b:04:d4:
                    33:e3:b3:04:97:2d:5f:6f:6d:e4:d1:46:fe:ff:30:
                    70:09:c0:c0:c5:b3:b6:27:a6:db:e3:e4:30:21:eb:
                    b9:16:31:12:98:f7:c6:d5:7f:5d:b9:75:71:9e:48:
                    7d:08:c6:2b:63:76:f6:1e:12:97:4a:a8:6e:c9:08:
                    7d:8b:01:40:3f:cd:eb:f0:7d:92:35:bf:1f:d4:a2:
                    ec:55:af:f4:74:d2:8d:e6:cb:3f:b2:ab:7e:8a:81:
                    49:d3:3f:86:35:c6:9f:59:d3:df:6d:20:86:a0:e8:
                    c8:fb:8f:f0:12:95:51:d5:29:c3:07:2a:c9:2c:ea:
                    9f:b1:13:0a:2f:38:1e:f4:a2:92:4a:89:01:ec:27:
                    b1:62:77:66:02:31:0e:3b:56:63:b3:40:5b:3a:c6:
                    4c:84:c6:86:51:55:3c:58:23:4f:f3:9e:29:e1:c1:
                    b2:bc:00:34:6e:ad:8e:ad:0a:99:76:2f:5c:5b:bc:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1C:54:0C:DB:5C:0E:65:DD:06:B6:DD:60:58:94:38:63:C4:05:0D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f488b7b9-ef6e-4097-9207-940bc62289f1/f488b7b9-ef6e-4097-9207-940bc62289f1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.56.0/24
                IPv6:
                  2602:f984::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53889

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2d:e2:7a:9a:5a:e7:f1:22:d3:9f:a7:6c:74:7f:3f:f6:70:
         79:42:39:d0:cd:df:04:de:91:97:49:57:5c:fc:a9:49:bb:d9:
         e1:aa:9c:38:76:30:9b:9d:b5:2d:56:b1:c7:a8:3e:e1:b7:f2:
         f9:2d:9c:78:ef:64:a4:b3:e1:f2:81:0c:c8:c3:1f:cb:69:8b:
         c3:9e:b8:c3:6d:9e:ef:64:b3:ce:3a:8f:20:0d:66:9a:59:83:
         66:43:f0:d7:6e:17:99:79:e6:7b:2f:fa:16:53:af:9e:a8:ab:
         ea:a2:d7:90:2d:cf:a4:d2:42:43:e6:2e:f7:e3:5c:0e:d9:ce:
         42:57:13:58:ed:71:29:ff:10:0b:63:3a:1e:24:cc:e0:c4:b7:
         82:09:dc:ef:a3:36:80:ad:6d:6a:4b:a9:5a:9b:fb:46:f6:b0:
         dc:a1:a0:e2:34:7f:d8:a8:49:91:f7:25:98:7f:57:f6:fb:01:
         90:f8:70:1a:df:07:c4:f5:69:e7:ad:79:28:f5:a1:fa:08:9e:
         60:a0:6a:b5:39:bb:83:66:ea:9c:df:5b:89:31:b2:60:b2:e6:
         e6:5d:85:3d:b4:f1:be:b0:2e:e0:d6:cf:c4:5c:cd:06:ed:79:
         18:2b:21:ec:2c:4c:e8:a5:b8:50:8f:e6:70:bd:df:e1:6c:cf:
         8c:c5:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----