Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f513f482-c974-4d63-b9fb-e90a7b41b43b.cer
File:                     f513f482-c974-4d63-b9fb-e90a7b41b43b.cer (raw, json)
Hash identifier:          QKesv8GMJksk8IsoBqToUUfT4WT3AwmwBXhHg+DtRww=
Subject key identifier:   ED:E8:2E:D2:47:02:8A:45:67:8A:74:91:49:4B:2D:E2:1C:62:FE:15
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858467C7D1ED1D44BA507A1410880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f513f482-c974-4d63-b9fb-e90a7b41b43b/f513f482-c974-4d63-b9fb-e90a7b41b43b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f513f482-c974-4d63-b9fb-e90a7b41b43b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 00:45:21 +0000
Certificate not after:    Tue 13 Oct 2026 00:45:21 +0000
Subordinate resources:    AS: 393963
                          IP: 155.254.12.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7c:7d:1e:d1:d4:4b:a5:07:a1:41:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jul 10 00:45:21 2024 GMT
            Not After : Oct 13 00:45:21 2026 GMT
        Subject: CN=f513f482-c974-4d63-b9fb-e90a7b41b43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:53:44:28:78:68:b1:39:fc:31:76:83:9a:
                    52:d0:8e:ce:a7:e4:47:42:1f:7b:56:7d:ae:e2:19:
                    91:72:9a:8f:4a:1e:98:0e:ef:b5:06:30:50:e1:29:
                    9c:18:c4:26:45:f3:97:4e:f4:65:0d:90:f2:d7:f5:
                    46:39:fe:69:04:f4:be:a3:ad:49:a5:15:c8:17:28:
                    63:a6:98:2d:50:d2:2b:c7:a4:fe:f4:ca:dd:b4:16:
                    0c:92:6c:0f:f2:a6:be:28:14:e8:ef:62:b5:be:df:
                    54:65:64:64:e7:61:e6:6b:20:6c:97:7c:c6:5d:bc:
                    3e:0f:7d:f1:d3:b5:18:4a:ef:21:3b:48:cc:3a:dd:
                    f3:e5:e8:f6:40:fc:b4:f1:39:48:f8:55:d6:a8:b8:
                    24:87:61:cf:cc:cb:1e:62:32:48:ac:d5:65:a8:91:
                    08:ef:eb:f0:08:6b:a1:6e:83:96:8e:b8:80:20:c2:
                    e8:ad:c2:57:90:2e:4e:21:fd:72:3e:81:af:99:9a:
                    82:33:af:be:47:ff:cd:d2:16:0d:de:2f:54:78:a4:
                    0b:5e:fc:58:7d:17:54:bb:9d:2f:66:97:91:f2:b0:
                    a1:32:65:92:16:47:cb:2a:eb:96:a5:61:eb:b1:0b:
                    b7:24:da:35:e3:61:ba:0a:de:a1:97:27:26:8f:0f:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:2E:D2:47:02:8A:45:67:8A:74:91:49:4B:2D:E2:1C:62:FE:15
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f513f482-c974-4d63-b9fb-e90a7b41b43b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f513f482-c974-4d63-b9fb-e90a7b41b43b/f513f482-c974-4d63-b9fb-e90a7b41b43b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.12.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393963

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:23:e6:e5:cf:d6:7c:8e:4b:94:54:fe:b8:9d:61:cf:e5:
         bd:2d:89:c4:50:45:d7:36:65:0d:56:22:28:70:c2:72:34:53:
         4b:5a:15:d4:f1:5b:1c:e7:dc:47:fb:f3:8b:7b:de:49:e0:c0:
         20:a4:3c:cd:38:0d:8f:3a:20:ae:bb:f2:33:36:4f:02:d6:83:
         71:74:80:8c:07:e0:61:20:79:d2:b0:15:ec:be:93:bf:a5:b5:
         d8:03:1d:ed:46:e9:4a:a7:70:36:85:ef:06:02:09:65:e2:66:
         99:63:81:e8:c5:4e:49:f0:98:14:b0:91:0e:bf:54:79:bd:a4:
         f3:7d:9f:ae:9f:cb:71:6d:12:3d:de:bc:94:8e:a7:1f:cb:c7:
         44:6d:78:dc:40:a6:85:06:33:05:9a:e6:ca:f1:85:a9:6e:02:
         df:c4:11:b0:82:45:4f:82:65:4d:0f:74:38:01:37:cc:37:bb:
         9f:f1:90:4a:2a:2e:74:f1:38:a3:f3:2e:4d:e3:83:40:51:cb:
         9c:ef:c1:ca:ed:3f:f8:05:c1:32:b2:69:a9:55:65:7e:6b:12:
         54:87:a0:14:1c:95:18:9b:27:a7:a2:fe:27:e0:d0:8d:01:2b:
         50:7e:b8:41:93:75:ae:5e:7a:b0:2b:de:f6:65:ed:a8:9f:03:
         4f:09:d9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----