Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
File:                     eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer (raw, json)
Hash identifier:          DKefOGeO4tvF5KNndGrdMxetBSwyzHbcFsNCGRAu/qU=
Subject key identifier:   A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority key identifier: C4:6F:69:64:7F:26:E4:FD:96:ED:01:EC:D2:03:4C:0F:72:BC:22:EC
Certificate issuer:       /CN=9a69b8ce-24da-41b3-a08e-48d64c967360
Certificate serial:       010D0C9F432858479AA4486ED80F79B90137C340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sun 20 Oct 2024 12:45:26 +0000
Certificate not after:    Sat 23 Jan 2027 13:45:26 +0000
Subordinate resources:    IP: 104.254.208.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9a:a4:48:6e:d8:0f:79:b9:01:37:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a69b8ce-24da-41b3-a08e-48d64c967360
        Validity
            Not Before: Oct 20 12:45:26 2024 GMT
            Not After : Jan 23 13:45:26 2027 GMT
        Subject: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:d2:30:ac:5a:f5:57:e0:d9:52:cb:11:97:
                    88:f5:57:40:72:0e:72:86:5b:53:a5:83:2f:61:b0:
                    30:49:af:8e:96:97:38:31:26:b2:2e:7b:e6:aa:b1:
                    1e:3c:25:8a:90:b7:a1:6d:24:1f:65:37:2d:59:5c:
                    f8:ac:9c:1f:08:d4:11:e6:d3:53:cf:b2:80:24:3d:
                    47:35:0f:6f:a3:d5:de:ce:51:94:38:0c:02:1d:26:
                    15:29:fa:08:f2:2f:09:1a:14:51:6c:5b:e5:f9:41:
                    9b:5d:5b:68:8a:39:d4:a7:1b:aa:27:7b:0f:10:dc:
                    24:5a:12:28:43:dd:a1:69:20:fb:bc:ca:e9:f2:9a:
                    09:f4:32:50:74:75:ae:97:37:9b:7b:64:48:b6:a2:
                    c2:78:82:c4:3f:7a:22:84:22:0f:cf:c6:a4:1c:ef:
                    35:94:17:5a:64:3e:3c:9a:d2:43:4f:aa:46:c7:4e:
                    2c:61:d4:01:f0:47:28:4b:c4:0f:c4:f8:6c:dc:f3:
                    fd:10:11:9d:fb:3e:fb:66:61:d1:4d:6b:0b:e9:0b:
                    f0:8c:67:45:96:5b:2f:b4:92:4d:cc:91:eb:ab:bc:
                    88:f0:98:f7:3c:e7:9b:90:f1:4b:31:ef:ab:86:fc:
                    7b:02:1d:94:ac:7a:48:c3:27:3f:15:2c:9d:a9:3c:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.crl

            X509v3 Authority Key Identifier:
                keyid:C4:6F:69:64:7F:26:E4:FD:96:ED:01:EC:D2:03:4C:0F:72:BC:22:EC

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1a:1b:19:06:44:84:f7:f4:b8:3a:6d:e5:8a:01:63:f4:3e:
         10:de:ef:5a:c4:ef:3d:04:76:6d:ad:d1:0e:77:ab:57:34:32:
         61:9d:0c:7e:a1:e2:92:c1:43:4e:92:7c:75:e9:2f:23:8a:69:
         46:3d:4a:7d:03:45:28:35:4e:d3:27:ff:e2:ba:90:49:ee:8f:
         0f:fe:1b:0e:52:9f:88:6e:3a:aa:3c:5b:05:bd:4f:3e:95:d9:
         e0:eb:76:b5:05:e5:7f:8b:89:12:be:30:21:1b:47:2b:54:e6:
         54:50:4a:41:34:4a:8a:01:02:a5:0f:d6:a1:b9:9f:83:97:87:
         bd:27:9d:0c:88:ab:eb:76:7d:36:8b:d3:59:27:9e:16:21:38:
         43:fa:13:c8:ca:ca:c1:02:06:53:40:60:2b:4f:5a:fd:10:9d:
         cc:00:44:dd:3b:fb:8c:ce:e4:00:8d:43:26:dc:66:99:1f:a0:
         4a:bd:9b:73:00:98:72:3f:4a:26:95:18:47:17:4e:6d:76:b2:
         31:08:e4:7b:33:84:b5:89:54:82:83:b8:e9:fb:d4:1c:a1:2b:
         42:5e:c9:27:ed:f7:ef:f6:6c:aa:ad:b4:02:82:41:3d:81:20:
         66:b4:9d:4f:a3:0e:71:6a:3c:85:4d:63:1b:9e:83:7b:06:ab:
         50:89:73:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----