Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4.cer
File:                     1073152b-033a-4ad5-ba98-45c1d65704d4.cer (raw, json)
Hash identifier:          AKtKTeYeiKRgZ8iUVTFbIRINtUhztYiL9GljFHRFUJI=
Subject key identifier:   AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584779A59AC5D7C1218FCB4BF000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 08 Oct 2024 17:06:26 +0000
Certificate not after:    Thu 31 Dec 2026 15:19:11 +0000
Subordinate resources:    AS: 30700
                          AS: 401389
                          IP: 23.191.8.0/24
                          IP: 2602:f7ee::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:a5:9a:c5:d7:c1:21:8f:cb:4b:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  8 17:06:26 2024 GMT
            Not After : Dec 31 15:19:11 2026 GMT
        Subject: CN=1073152b-033a-4ad5-ba98-45c1d65704d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:ac:bc:5f:14:8a:97:d2:a6:21:4b:be:24:
                    1f:cd:79:68:41:5c:7c:dc:91:44:79:f7:a9:94:19:
                    73:cb:73:80:ec:9a:13:60:f2:46:7a:59:c9:7e:ea:
                    55:ac:81:89:56:d1:df:a0:3a:03:f0:06:5a:df:e6:
                    ab:e4:71:d0:2f:5a:a9:33:9c:28:8f:f8:2c:bd:f8:
                    06:ae:db:2e:f9:30:ee:0b:5d:be:e7:42:02:8b:e9:
                    de:ea:dd:90:4d:73:fb:7a:89:1f:ed:39:d0:05:2b:
                    ec:6e:53:ed:48:f5:65:21:f6:25:d3:a1:0e:b1:6f:
                    98:ee:d4:70:04:05:fb:74:fd:a6:5e:6f:18:19:6d:
                    42:c4:d4:2c:c2:2a:41:7b:d2:74:f4:49:38:52:37:
                    ef:35:85:36:15:1a:c6:83:e6:f2:43:a0:ed:58:14:
                    c5:b2:3f:da:7b:b5:c9:be:21:c1:51:74:41:bd:94:
                    17:4b:65:fc:83:f8:80:dc:41:d6:1e:87:83:7f:08:
                    a7:8b:29:07:38:54:41:f2:35:f4:d3:bf:a7:c1:01:
                    25:49:03:df:e3:d3:e2:1e:5c:57:37:41:9f:f8:67:
                    c5:8f:c6:dd:57:7e:5e:d3:e6:b0:51:ef:d4:19:ec:
                    49:cc:2e:aa:87:f4:e1:8a:d6:ac:dd:24:e7:54:36:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6C:EF:89:28:99:02:21:63:73:BB:FA:49:68:55:AB:8C:49:1E:FA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1073152b-033a-4ad5-ba98-45c1d65704d4/1073152b-033a-4ad5-ba98-45c1d65704d4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.8.0/24
                IPv6:
                  2602:f7ee::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30700
                  401389

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:15:4d:2e:bc:e4:26:5e:e8:0a:01:50:26:f7:12:22:b3:9f:
         2e:10:c0:4e:a6:9e:77:71:fb:b5:ca:6c:b5:c0:aa:ea:25:a6:
         6d:fc:f4:7c:76:af:3f:a0:74:73:5f:db:45:cb:a1:45:54:57:
         fc:cb:ea:66:e5:58:f0:64:13:42:71:77:b3:bb:7e:a2:35:3b:
         1f:70:63:89:3d:e7:18:48:0b:6f:cc:e1:b9:04:63:2e:b4:83:
         07:57:76:9c:bc:09:15:4b:c3:27:6e:61:a4:58:c7:a8:22:38:
         a0:38:8e:55:7a:de:15:17:d8:8d:78:89:b2:62:f8:7d:fd:cb:
         3d:78:8a:4e:c7:03:19:6a:69:1e:62:33:bd:75:36:27:b6:de:
         81:75:7a:7d:f7:d6:70:c5:f8:e5:fb:e0:a6:84:31:07:4d:f9:
         5b:5b:51:37:60:65:9e:97:c7:39:62:5e:ba:b4:13:85:59:4b:
         24:28:4b:18:7d:f3:5d:6c:c6:0c:5c:29:7a:7d:13:97:bf:0a:
         8e:b2:28:8f:e2:36:73:f5:17:7a:ec:43:a8:90:c4:e8:8d:d9:
         2d:c8:bb:04:fd:ad:31:79:b8:a6:a6:f3:1b:68:84:68:34:d7:
         5a:89:24:c2:55:47:40:71:01:50:21:ef:6a:38:a5:44:aa:27:
         09:e1:4b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----