Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer
File:                     0d76e4c1-4951-48f9-a654-18ee7c98157a.cer (raw, json)
Hash identifier:          /b3Yy7i5b8SpvrigCDxXK5fVGGJniGaE0+8crq+qArI=
Subject key identifier:   BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847B114AAE6B2A743206D786480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 28 Oct 2024 13:39:40 +0000
Certificate not after:    Sun 31 Jan 2027 14:39:40 +0000
Subordinate resources:    AS: 1066
                          IP: 104.254.140.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:14:aa:e6:b2:a7:43:20:6d:78:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 28 13:39:40 2024 GMT
            Not After : Jan 31 14:39:40 2027 GMT
        Subject: CN=0d76e4c1-4951-48f9-a654-18ee7c98157a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:ed:12:75:c4:dd:80:4c:11:68:38:fe:32:
                    b1:44:13:97:cf:0c:f7:4f:f5:3c:3c:f1:55:6f:1b:
                    c5:d8:b0:dd:83:f6:11:00:65:a5:fd:cf:a4:56:3e:
                    64:e0:51:f0:eb:3a:f6:fb:8f:d5:5a:ab:0d:aa:a6:
                    66:d9:01:29:ad:f2:1b:04:57:ec:e9:f7:11:46:58:
                    d2:8b:c3:d6:77:c4:55:83:03:12:cd:a9:ce:6f:12:
                    77:48:44:50:69:0e:76:68:69:a8:ce:cf:56:6d:02:
                    ba:e9:d3:79:ed:53:78:22:03:e6:0c:1d:a7:ce:65:
                    92:66:ca:62:c6:e1:56:73:6b:42:a1:bd:1b:35:91:
                    e7:20:0a:35:23:09:45:1a:25:0a:f8:cf:06:51:55:
                    b7:76:33:99:4f:11:fa:8b:04:a8:c3:84:c4:ee:71:
                    f9:d6:22:53:22:7d:e5:0b:c2:16:2a:80:0f:0a:46:
                    26:ff:61:e5:4d:5e:70:cc:9c:db:71:25:a3:da:1d:
                    87:ff:c3:57:3d:9c:9c:cf:09:4a:f1:75:57:3e:50:
                    ce:e2:f4:31:d2:d2:8a:7f:8c:9f:7d:3a:ec:01:b2:
                    1a:fb:0e:ab:fd:46:27:f8:77:48:b8:1b:d5:5d:61:
                    f8:44:c8:91:bb:48:19:2b:dc:ff:b9:3c:88:22:02:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.140.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1066

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ee:90:e7:2d:17:13:30:9f:05:b8:6f:8f:67:20:38:52:d1:
         6c:2e:60:f0:46:79:9f:33:e0:bb:c3:63:a4:17:c3:c5:b7:6a:
         84:01:51:b8:0f:31:d2:36:b0:5e:7d:be:dd:e2:6b:12:ee:fa:
         69:36:54:0d:fb:ae:50:6f:a4:96:89:b9:74:a2:43:d6:e4:2b:
         a1:02:fc:b4:d7:72:09:27:79:76:ae:4f:27:bf:05:cc:e1:2c:
         8b:0e:21:7f:c1:a7:a2:72:e7:fd:25:3e:db:78:bd:91:7a:ae:
         5d:a2:47:f7:a9:b8:5e:97:eb:1d:88:c8:dc:37:59:be:07:ec:
         1f:da:7b:fe:ae:38:7d:62:b5:0f:a5:de:53:ff:11:5d:e0:1c:
         a9:84:69:36:fa:e1:aa:e7:fd:cf:3d:8c:93:5c:14:0d:e1:39:
         95:5c:ea:ea:fa:04:99:ec:9a:31:0b:98:54:d1:be:0e:57:d3:
         e7:66:d1:81:e3:c7:c4:cf:d0:53:17:1a:c4:e3:7f:3f:a8:c6:
         6b:55:1d:aa:71:3a:28:a6:cd:7b:1b:03:48:8e:a9:2c:74:92:
         aa:d5:9e:09:91:fe:a0:2b:d8:28:11:02:6c:fc:27:f6:db:0d:
         f8:6f:36:05:7d:70:ed:b2:3a:35:de:d8:39:81:ae:ab:1c:36:
         00:f2:a9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----