Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348.cer
File:                     12c922f5-d2fe-44e3-9541-84c46c7d8348.cer (raw, json)
Hash identifier:          E1gJmSpQ8aiRIyeKxXSl30RtSxfpzP/fDumgXRmnfC8=
Subject key identifier:   FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847E98174EBB99BE41A0E8C4F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 17 Nov 2024 18:44:08 +0000
Certificate not after:    Sat 20 Feb 2027 18:44:08 +0000
Subordinate resources:    AS: 36221
                          IP: 66.241.144.0/20
                          IP: 2607:f7c8::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e9:81:74:eb:b9:9b:e4:1a:0e:8c:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 17 18:44:08 2024 GMT
            Not After : Feb 20 18:44:08 2027 GMT
        Subject: CN=12c922f5-d2fe-44e3-9541-84c46c7d8348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:e8:49:ab:56:57:ec:84:7c:14:5d:47:9b:
                    58:45:4d:96:0c:f6:8d:bb:5c:36:2e:f4:d1:76:ab:
                    d1:7a:01:88:9e:4f:cc:c4:71:10:21:00:c2:25:b1:
                    65:1d:df:74:ae:b5:b6:a3:4a:fc:f3:4d:44:4d:79:
                    01:5f:80:f0:76:25:b6:e4:0d:d0:18:78:88:c4:5b:
                    68:bf:06:db:51:8d:af:a3:98:52:74:05:0a:f2:41:
                    2f:58:45:b4:01:4d:bf:5e:c0:ef:4a:ae:6c:72:d2:
                    00:40:41:59:99:2b:57:ca:41:a4:2b:4c:05:00:ba:
                    d8:d4:6d:b7:ba:3a:b7:e9:fc:45:8b:ff:73:a4:32:
                    0f:af:49:df:f0:38:4d:e8:f3:49:a4:1a:2b:f4:c8:
                    ce:8c:ba:70:94:cb:4c:ed:3e:2e:9d:c2:f4:3a:6f:
                    6f:47:28:1e:fb:3e:a0:43:2f:52:72:dc:0e:83:dd:
                    20:2c:39:80:15:8f:40:d5:ad:b6:28:f9:99:fc:b2:
                    4a:75:7f:0b:d4:e7:aa:49:c6:f6:9e:c9:18:f0:15:
                    87:37:60:b2:5c:11:33:0a:82:af:b6:b3:f9:52:5d:
                    d4:c4:a2:74:87:c6:fb:09:7b:ff:95:57:5f:99:53:
                    ea:3b:8e:d4:9a:f3:ed:4e:c0:0c:9a:cc:dc:dd:78:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0C:D9:11:19:4F:6E:44:88:68:AF:D9:E1:AB:4D:8C:46:77:42:B7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12c922f5-d2fe-44e3-9541-84c46c7d8348/12c922f5-d2fe-44e3-9541-84c46c7d8348.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.241.144.0/20
                IPv6:
                  2607:f7c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36221

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:2e:5f:ce:8c:21:9b:5a:cc:c3:62:53:66:9a:61:5f:48:
         cd:20:9d:7e:12:d8:c6:95:ad:33:14:65:6f:42:dd:ad:db:c0:
         d9:85:13:0d:47:08:8d:78:47:27:9a:a3:98:3a:87:b9:48:23:
         5d:90:a0:f8:ee:97:3a:60:81:4a:3a:c2:f2:a0:4e:d2:ee:7e:
         fa:61:40:3e:13:82:4d:a3:21:d3:d1:a5:51:7e:3a:04:08:ef:
         ae:b4:a9:fd:00:6f:66:99:da:71:1f:44:9e:47:cb:8c:29:de:
         44:69:01:63:51:0a:aa:d6:72:dd:06:ea:36:22:d7:c1:58:de:
         ba:37:1e:dc:98:d6:94:ad:a9:31:89:04:99:34:9c:70:e3:28:
         cf:b0:87:12:fd:9b:a8:86:d7:c0:31:2b:e0:c4:f7:c0:31:b6:
         4a:c2:5e:a7:1d:9e:d2:10:63:1a:fe:fa:6a:d2:fd:64:23:83:
         25:1e:80:b1:3a:f2:2d:23:29:9e:60:b9:81:12:98:ff:68:3e:
         47:f5:21:94:c9:41:40:08:df:a6:73:8d:87:b4:b7:99:55:6e:
         6d:8c:08:28:a6:22:ff:af:5e:c1:fe:5f:c7:6b:47:0e:37:7f:
         68:7a:8e:07:18:fc:95:26:19:9f:5b:64:7f:d7:5a:75:af:8a:
         1c:09:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----