Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194.cer
File:                     024863fe-f941-4bf2-81d9-ad03d50aa194.cer (raw, json)
Hash identifier:          4g3lOODAiMGeBozsEdGaAQOW9PWQ0EO6EZVy/Zev/3M=
Subject key identifier:   26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847B6D5F3C2A0E79E9A0134D0C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 30 Oct 2024 15:08:09 +0000
Certificate not after:    Tue 02 Feb 2027 16:08:09 +0000
Subordinate resources:    AS: 401415
                          IP: 204.147.176.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:d5:f3:c2:a0:e7:9e:9a:01:34:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 30 15:08:09 2024 GMT
            Not After : Feb  2 16:08:09 2027 GMT
        Subject: CN=024863fe-f941-4bf2-81d9-ad03d50aa194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ed:f6:8e:8d:d0:1e:ff:72:5f:61:cc:08:93:
                    6c:cf:31:47:2a:a7:69:24:ec:4a:07:bb:62:9c:0a:
                    20:80:73:e1:30:71:04:6d:12:77:96:fb:aa:2a:9f:
                    06:96:8f:db:ba:cc:76:e7:6d:c3:c1:20:31:28:8c:
                    74:f5:2a:cd:71:9a:c8:e7:8a:e8:a7:e4:40:40:e9:
                    4c:58:45:0e:26:7c:c5:16:cc:7d:6d:11:09:93:5c:
                    d4:78:29:4b:0f:3f:c2:d8:45:ed:4a:2d:27:a0:e1:
                    a8:7d:bb:a0:78:a5:8a:93:76:57:fd:f7:58:a2:b2:
                    27:de:5d:a6:19:00:25:9f:70:81:60:55:90:62:7c:
                    05:b9:74:f9:61:a3:57:fc:be:a4:5b:db:42:f5:9d:
                    70:8e:07:42:86:a4:99:dd:47:cb:7c:13:b3:bf:7f:
                    ab:b3:0a:4d:0e:a1:d0:c4:6e:20:39:e8:c7:23:34:
                    e9:0d:2b:03:c4:1c:b3:5d:99:a0:28:8b:91:20:b1:
                    07:18:92:27:c7:16:e7:4f:39:6d:23:06:4f:a6:b3:
                    01:ef:f2:b3:9a:44:dd:4a:02:47:94:36:7a:53:6b:
                    cb:de:e3:94:a9:ba:b8:4d:0b:d4:67:5e:fc:2b:24:
                    c4:55:22:82:3e:5a:8b:1a:94:36:18:bf:fa:6c:60:
                    5c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CF:B7:2C:F1:29:25:18:74:73:0F:1F:50:DE:B5:FD:54:A3:20:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/024863fe-f941-4bf2-81d9-ad03d50aa194/024863fe-f941-4bf2-81d9-ad03d50aa194.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.147.176.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401415

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c3:6a:da:6d:23:89:b7:76:e6:04:c3:cd:fa:68:b3:17:76:
         83:25:01:f7:74:24:8b:5e:56:13:19:dc:c9:48:5a:39:23:19:
         2f:e3:0b:88:c9:d5:29:12:96:42:1e:3d:e7:b3:52:1e:2e:af:
         9b:c6:bb:a7:91:10:7a:43:1d:82:6c:50:4d:44:e3:ab:2d:41:
         3c:69:c7:ab:9b:90:6f:8d:d9:9e:30:9d:4d:05:e2:74:4e:19:
         f6:72:00:0c:7c:85:78:e8:29:ea:fe:35:85:e4:14:61:6f:e8:
         dc:c1:25:ee:0b:9e:ce:3a:92:ee:5d:0c:bd:99:7c:b8:3a:5a:
         2f:97:b2:d1:06:1d:96:62:df:be:a1:e5:52:e2:db:81:70:43:
         dd:61:b0:6b:83:ba:79:1a:2b:fc:57:3e:93:5a:c4:56:77:b1:
         e4:86:e8:88:7c:d4:e2:17:46:8c:54:93:f3:ca:e4:ae:94:d8:
         f2:06:56:e0:3e:40:1a:45:3e:f8:72:6e:27:96:e3:b9:cf:1f:
         52:53:77:1f:61:bf:52:03:48:71:ae:50:10:ac:d1:18:5b:68:
         06:a3:26:2b:6d:0d:a9:f3:6d:31:26:f4:67:4f:7e:53:87:da:
         72:17:a4:83:67:5f:10:dc:54:6a:4b:bb:65:83:e1:03:d2:7c:
         cc:74:db:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----