Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer
File:                     08e3f98b-676d-49af-91dd-964a1e63df3b.cer (raw, json)
Hash identifier:          gs5ObSgCzFTNFBy/lUtDB+yoxPY1T83uIlh/7o1DIP0=
Subject key identifier:   FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858476B4F5994938B34F0C899D9A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 03 Oct 2024 13:51:19 +0000
Certificate not after:    Sun 29 Nov 2026 13:25:38 +0000
Subordinate resources:    IP: 64.112.65.0/24
                          IP: 2602:faa7::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:4f:59:94:93:8b:34:f0:c8:99:d9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  3 13:51:19 2024 GMT
            Not After : Nov 29 13:25:38 2026 GMT
        Subject: CN=08e3f98b-676d-49af-91dd-964a1e63df3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7a:a0:27:96:57:2c:04:9e:ba:51:fa:23:f7:
                    14:c1:49:61:14:81:d9:0f:cb:77:23:89:5f:72:80:
                    3d:e6:1a:3f:2e:80:75:c3:e8:ee:35:0a:f6:b3:7a:
                    07:01:76:b7:40:ef:dc:d3:41:38:64:9c:87:93:5e:
                    02:d4:e4:bf:06:11:95:2b:62:40:ef:f3:e5:ba:d8:
                    d5:f8:fc:43:c4:0b:27:86:96:30:dd:ac:3d:89:0a:
                    02:91:da:ba:a8:3a:db:94:00:9c:1f:eb:bb:3f:66:
                    b4:85:81:a5:1b:e7:1e:30:94:f8:9e:2b:f3:2a:05:
                    1a:d6:f7:80:54:97:97:20:1d:ea:f9:6c:2a:29:8e:
                    62:7f:29:9a:09:62:c9:4b:8b:35:7a:42:c7:5b:7e:
                    ff:92:19:bb:73:5d:92:0d:16:f4:1d:35:17:6b:04:
                    dc:06:d6:3f:1a:10:e7:d4:cd:91:68:da:87:20:84:
                    41:d0:3b:07:56:1c:d8:7e:65:f0:9c:58:5e:79:d4:
                    0f:0d:87:83:2f:30:df:5d:24:36:1e:45:05:c9:29:
                    06:e9:d1:bd:d8:52:ce:bc:22:64:0b:d1:d4:a7:de:
                    22:6a:a6:15:76:c6:c3:2c:4a:ad:f4:ba:7d:42:82:
                    7d:7a:da:01:58:a9:10:a8:83:36:4d:57:56:c6:2d:
                    d0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.65.0/24
                IPv6:
                  2602:faa7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:19:b1:8b:26:2a:a0:0f:a6:fa:14:31:20:cf:56:24:93:32:
         f3:c4:d0:56:f3:36:75:e5:44:f7:43:57:0d:95:a7:72:2b:ff:
         ac:1b:86:75:ef:ac:fa:e9:b2:b8:50:74:ed:8f:7b:73:e5:85:
         e2:c1:bd:12:a4:16:bb:12:cd:e5:a7:0c:28:e0:91:37:59:74:
         3a:de:50:37:40:fb:53:76:f0:19:99:eb:5a:e3:3e:b7:f1:18:
         ea:b2:78:5d:e6:74:bf:c3:6b:52:2a:f4:f6:49:03:66:2d:82:
         71:47:19:5d:ae:56:e6:a5:ce:b2:df:ba:8b:6a:ba:aa:c1:01:
         1f:16:94:52:99:61:6e:a8:c9:03:5f:55:23:e1:6a:c5:68:44:
         c5:44:b7:01:5c:8d:c4:ce:fd:45:ac:1a:42:a9:9e:2e:a9:98:
         bf:88:51:a2:bd:78:ba:7c:e4:7c:43:cb:c1:33:01:cc:05:aa:
         6e:6a:9e:74:76:41:03:af:f4:8f:4b:43:fa:71:2c:4c:8f:12:
         17:82:0b:07:52:02:6e:2c:3c:2a:b8:4d:81:7e:ba:7d:67:3a:
         d6:2c:b5:87:56:0d:71:97:04:d0:dd:9a:09:4a:fc:f7:db:ef:
         5a:e1:10:2e:72:38:0e:9a:c1:ac:77:86:a8:5b:58:12:f9:30:
         70:39:96:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----