Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer
File:                     137d13b4-f566-472a-a0e3-33b1db18e660.cer (raw, json)
Hash identifier:          FGEPL+tj4H3GnZCO70ZP8m0j+xLjj7eqGmreDtDcnWk=
Subject key identifier:   A7:FE:83:1A:7E:D1:50:1E:BB:13:21:DB:88:04:6C:CE:A5:46:64:C2
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584755765F8CB4C5E6C1C52EA9C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 25 Sep 2024 18:02:10 +0000
Certificate not after:    Tue 29 Dec 2026 19:02:10 +0000
Subordinate resources:    AS: 5664
                          IP: 142.55.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:55:76:5f:8c:b4:c5:e6:c1:c5:2e:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 25 18:02:10 2024 GMT
            Not After : Dec 29 19:02:10 2026 GMT
        Subject: CN=137d13b4-f566-472a-a0e3-33b1db18e660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2d:08:14:40:43:00:76:e5:d4:88:c5:3c:7d:
                    10:1e:86:46:44:b9:b3:97:29:1b:67:23:92:64:ce:
                    d9:a8:33:8e:e5:00:1c:a1:a8:97:a5:5a:b6:00:d0:
                    c5:60:dc:8d:66:59:a4:28:2e:70:a3:89:f6:89:a8:
                    69:40:24:78:0b:57:bf:e1:86:3c:c9:68:7b:bc:b2:
                    1c:43:34:8a:5d:be:bb:c3:dd:27:55:ec:51:d8:32:
                    8f:e0:8a:83:7f:a3:79:b1:db:ed:b8:cd:6f:78:41:
                    fa:4e:3a:7b:d3:15:25:c0:ea:13:f1:a4:0d:78:68:
                    15:ba:70:e2:b4:02:30:58:86:fa:70:37:46:b3:80:
                    65:0e:df:92:68:df:5d:fd:f0:5b:34:20:14:53:e6:
                    31:79:b8:b1:e3:55:84:58:76:8d:6c:db:38:40:b1:
                    20:10:44:f9:66:a8:e6:25:31:df:16:00:7d:98:1c:
                    81:bd:00:c8:63:b9:41:c2:e0:5e:16:96:a8:33:a9:
                    81:0c:66:42:f3:80:e7:77:bf:fb:4f:fd:f0:bf:1e:
                    73:b6:b1:77:13:6c:ab:bd:42:04:0e:02:23:9e:02:
                    ad:4d:8f:ea:e0:6d:c1:64:56:cb:97:8e:fd:ad:6d:
                    22:a6:bb:ce:8e:a4:73:1f:27:2c:b1:63:23:c8:b0:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FE:83:1A:7E:D1:50:1E:BB:13:21:DB:88:04:6C:CE:A5:46:64:C2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.55.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5664

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:84:f0:0d:a2:50:c4:d6:ba:5d:3c:21:84:c5:34:56:97:33:
         9a:5b:56:22:70:82:95:74:cd:71:2a:d9:39:9e:11:19:94:65:
         35:a3:98:fc:99:31:89:9c:67:0c:c1:c7:07:79:26:e6:e9:3b:
         98:89:30:df:be:11:5f:3c:2f:81:f8:a9:a0:af:02:29:a7:a0:
         5a:d3:a4:08:57:64:d0:40:f9:3c:97:74:aa:dc:47:8a:84:73:
         10:e8:a6:30:f0:7d:03:22:da:de:a0:74:73:0f:70:fa:41:67:
         e4:4f:ac:fc:35:f4:04:94:0f:34:b7:33:dd:e6:a6:4f:4c:e8:
         8c:83:b3:e6:63:9e:02:e6:f4:cc:af:46:0a:d2:90:fc:5f:95:
         5f:bd:91:60:d8:73:85:cb:e3:d9:38:4b:99:7f:f8:4a:2e:c8:
         20:27:e6:a8:08:65:18:af:a7:48:49:a8:f8:5a:e6:5b:b2:00:
         06:b1:74:50:53:b3:34:36:48:74:eb:2b:e1:81:ec:9b:86:6d:
         ec:8c:f2:43:24:b5:a7:4b:4e:9e:29:32:46:25:96:5a:d0:bc:
         98:bc:e0:f6:44:8c:41:fc:57:1e:12:cf:de:2f:cc:71:b8:2b:
         81:12:69:81:54:60:67:60:8f:2f:67:14:92:40:5f:7a:50:28:
         1f:da:a0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----