Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019.cer
File:                     69fd5aaa-164e-43f9-a8ca-302782d25019.cer (raw, json)
Hash identifier:          nbnJsAjrtNoHEsBbKvBA+9jeEVwR+9hOrA/Q+X6gLsU=
Subject key identifier:   B2:50:50:2D:5D:EA:5E:9C:26:91:2C:45:AA:82:D7:56:93:F9:9B:2E
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584503B88D9939F6E2819F56E250
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Feb 2024 01:45:21 +0000
Certificate not after:    Sun 31 May 2026 00:45:21 +0000
Subordinate resources:    AS: 21837
                          IP: 107.167.96.0/19
                          IP: 2620:117:c000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:b8:8d:99:39:f6:e2:81:9f:56:e2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 26 01:45:21 2024 GMT
            Not After : May 31 00:45:21 2026 GMT
        Subject: CN=69fd5aaa-164e-43f9-a8ca-302782d25019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:93:89:7f:db:97:ac:a4:73:05:be:c2:79:
                    32:24:0a:38:f2:bd:09:06:54:0a:c2:b3:5e:55:f9:
                    78:05:d8:01:d7:8d:6d:bb:f7:3d:79:b3:e5:32:09:
                    49:f7:30:41:2e:48:8f:f6:98:a5:ca:13:14:dd:73:
                    6e:4b:37:39:2c:b6:ae:a7:0b:00:d0:30:4e:ec:bc:
                    49:50:15:4b:72:d5:c8:02:f3:46:a1:ab:79:3a:0e:
                    b0:ce:ac:07:7f:26:f3:58:93:3d:2f:0c:30:74:9e:
                    f6:a3:68:57:89:f0:13:87:26:b2:78:50:4c:a3:5d:
                    02:d4:a5:21:cf:71:29:fa:cb:10:10:32:f3:3f:87:
                    ff:db:f9:a1:9d:1d:88:1f:f6:a8:19:0a:1e:6b:e7:
                    47:b6:91:98:48:e1:16:4f:c3:fb:b4:b9:99:99:6c:
                    3e:f0:11:4f:23:9f:90:4e:da:12:34:87:77:c8:fc:
                    b2:23:36:e9:e0:9d:de:36:f5:4f:fe:4b:75:4f:99:
                    89:3b:ef:a0:11:ef:d4:a9:b6:de:37:bd:f0:31:cd:
                    eb:40:6d:cc:dc:fb:0f:59:c2:d6:0a:22:6c:d9:95:
                    b3:8d:2f:5f:ec:67:b3:d5:f9:14:08:95:4e:a7:a6:
                    32:70:72:0f:25:a2:90:60:0d:34:80:c6:86:3c:9e:
                    ab:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:50:50:2D:5D:EA:5E:9C:26:91:2C:45:AA:82:D7:56:93:F9:9B:2E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69fd5aaa-164e-43f9-a8ca-302782d25019/69fd5aaa-164e-43f9-a8ca-302782d25019.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.96.0/19
                IPv6:
                  2620:117:c000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21837

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:da:f0:70:a1:66:5d:e9:7a:e8:79:54:6d:c3:13:0e:be:
         03:ec:b5:16:b2:4a:70:b9:d0:70:b3:9d:59:7c:8a:52:e4:53:
         06:b3:12:bb:32:6d:64:98:17:0b:b3:26:0a:0a:b0:a3:ba:b2:
         be:c5:88:32:3f:59:63:f5:1f:e5:2a:ed:3b:d6:88:cb:9b:73:
         f4:1c:e6:41:2f:02:47:f3:91:c8:ab:04:3e:e7:dc:3c:6b:99:
         8c:a8:02:c3:d4:ba:a5:ac:b2:3a:83:04:49:18:1d:3c:ed:d3:
         f7:04:d0:4f:4a:63:b4:35:13:29:48:a3:d4:ab:29:6f:8e:92:
         08:21:06:c4:79:0a:47:37:6c:03:9a:76:b0:41:07:3f:07:3b:
         26:e1:eb:cb:e7:45:9b:ba:e4:35:6d:b4:6a:fd:f4:52:c0:57:
         8b:df:8a:63:5d:96:fa:30:de:c4:c0:5c:fc:8d:0a:72:a6:e3:
         dc:8a:10:c8:30:e8:65:df:c1:32:2d:a0:2f:96:35:29:b8:18:
         6d:be:28:7c:03:9b:59:85:65:18:f0:ab:44:76:04:36:71:c0:
         41:29:2e:0b:f0:83:b1:00:3d:be:fc:62:76:1e:d6:b5:20:4e:
         71:ac:de:9d:02:ac:e7:d7:ac:87:2f:5d:1e:5d:a1:21:3f:91:
         ac:35:67:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----