Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a.cer
File:                     190a907f-bde1-4ae9-a43b-80d0b516600a.cer (raw, json)
Hash identifier:          trP0Hwa/f8//+gt9qkH1kY3gbvq0K8KksrVHNaJdIGY=
Subject key identifier:   08:3A:AF:31:B7:C0:61:09:23:30:1E:39:8E:9C:75:6E:E8:81:CC:C9
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847D6B018666B44176CD394B660
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Nov 2024 00:57:45 +0000
Certificate not after:    Sun 14 Feb 2027 00:57:45 +0000
Subordinate resources:    IP: 156.142.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:b0:18:66:6b:44:17:6c:d3:94:b6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 11 00:57:45 2024 GMT
            Not After : Feb 14 00:57:45 2027 GMT
        Subject: CN=190a907f-bde1-4ae9-a43b-80d0b516600a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:e9:3f:dc:ec:16:f9:ac:36:e5:df:48:bb:
                    45:23:82:35:43:75:0c:e0:9f:c7:a5:b1:b6:87:74:
                    dd:de:c9:c1:c6:d6:4e:41:24:f7:82:fa:6f:f7:d6:
                    7f:a0:ba:b1:f5:5d:f3:af:49:20:12:21:5a:98:28:
                    2c:64:88:52:f3:de:21:df:ab:d4:f2:7d:a9:c6:5d:
                    26:12:f1:d8:46:dc:db:2a:e7:2f:1f:71:4c:12:eb:
                    73:bf:ac:59:08:cd:9a:f4:67:fb:a2:36:02:94:a1:
                    f8:9b:53:cc:5a:6c:3e:3b:44:36:37:ee:4a:ab:dd:
                    d0:45:80:c3:e1:f8:5d:c4:c3:53:c6:65:f3:d6:e4:
                    5f:ac:de:4f:1f:76:c7:40:19:a5:f4:d4:fd:8c:bb:
                    72:4f:4d:46:f8:84:63:1a:51:b2:da:34:ff:14:d3:
                    ca:37:f7:12:b5:26:5d:eb:76:00:4f:3a:b1:81:8a:
                    de:7c:21:d7:45:89:d8:04:de:f1:c9:7d:c9:4e:6f:
                    f9:1b:15:e2:5e:a5:0c:86:9a:82:13:14:3a:03:d7:
                    c9:0c:6f:46:f8:12:ea:82:3e:5b:cd:08:5d:0c:88:
                    e4:e0:a3:59:e1:13:78:e9:49:b6:5f:d5:1b:94:7f:
                    2c:40:90:b8:8b:6e:8c:2f:af:8b:fb:27:8c:c6:05:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3A:AF:31:B7:C0:61:09:23:30:1E:39:8E:9C:75:6E:E8:81:CC:C9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/190a907f-bde1-4ae9-a43b-80d0b516600a/190a907f-bde1-4ae9-a43b-80d0b516600a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.142.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:0b:2d:ce:f3:62:84:6d:7f:51:63:01:ed:58:c1:66:2f:2b:
         17:44:56:32:8e:be:11:52:70:50:73:ee:74:ef:5c:1e:bc:75:
         fc:e3:89:9d:a8:23:6a:94:c4:d8:7d:e9:8c:72:57:bd:61:fa:
         9b:8c:b9:11:78:7f:13:d5:6a:49:97:9b:69:bb:dc:88:8b:33:
         21:ed:e3:ef:28:90:ce:6b:70:92:25:1e:5b:f3:c9:fc:d8:ef:
         6f:91:df:70:30:f8:92:db:64:a4:7e:e5:39:59:57:8a:20:7a:
         db:c2:b5:cd:e9:38:70:73:16:5a:c3:cf:a7:63:7c:9d:a4:64:
         a6:00:b2:5b:22:8b:04:90:35:4b:4f:a6:13:9c:3d:6c:f5:d7:
         fb:73:b8:f4:5f:dd:78:d1:59:d4:64:e9:44:84:d2:21:64:bd:
         96:df:0e:3c:62:1b:62:9c:30:b2:ef:1f:2b:ee:8d:5a:8e:97:
         c3:9d:00:40:4b:87:e5:89:d0:94:6a:8e:3d:27:6c:ed:0e:b3:
         7f:1d:47:e8:91:1e:13:eb:91:54:7c:12:44:7b:b9:e1:c0:35:
         01:0a:68:51:3e:9b:14:e3:af:61:f5:c9:92:83:2f:81:8b:98:
         bf:58:2d:0b:60:ea:a4:59:0a:3b:79:84:8b:f2:b5:75:9e:50:
         17:3d:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----