Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf.cer
File:                     19c7927c-2aee-47c8-9379-dec57902bacf.cer (raw, json)
Hash identifier:          cChyk+LxYBjFtZ3DdAXwG5pWFpUcDP0LIyoV4w+J2U4=
Subject key identifier:   47:2C:39:0C:24:5E:9C:33:A0:EF:9B:0C:B9:54:85:97:32:60:9E:25
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846D9F8C1CFEB044E4184DCA140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf/19c7927c-2aee-47c8-9379-dec57902bacf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Aug 2024 12:24:38 +0000
Certificate not after:    Sun 15 Nov 2026 13:24:38 +0000
Subordinate resources:    AS: 30254
                          IP: 23.185.184.0/24
                          IP: 2602:f86c::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d9:f8:c1:cf:eb:04:4e:41:84:dc:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 12 12:24:38 2024 GMT
            Not After : Nov 15 13:24:38 2026 GMT
        Subject: CN=19c7927c-2aee-47c8-9379-dec57902bacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f1:e1:82:76:53:0c:77:60:af:a1:f2:fd:73:
                    38:c1:b6:31:4a:7b:39:62:ae:e5:34:5b:3a:50:7a:
                    19:0d:bf:14:d3:e0:5c:3c:f6:4f:77:09:04:09:a7:
                    99:61:9f:f0:f8:67:be:ef:55:83:05:f1:2f:fa:f8:
                    5b:e2:6c:6a:18:d1:b5:d5:a8:ab:97:73:96:9d:74:
                    01:39:74:41:c4:eb:be:64:de:7e:95:14:74:fd:5c:
                    7a:a6:d9:c8:27:78:b8:8f:40:c7:28:16:b6:2c:ed:
                    e3:27:61:14:70:98:15:79:52:55:be:f8:b9:77:3d:
                    53:f5:23:67:7c:d2:76:89:95:e5:76:84:24:6a:4a:
                    13:63:ae:76:f6:39:5f:b9:58:54:2c:84:03:6e:55:
                    57:4c:55:af:23:f3:35:f3:ad:c9:72:a9:93:56:bd:
                    ee:e9:57:be:a0:11:15:40:e9:ba:49:83:2b:72:ca:
                    4f:45:20:4f:c7:4e:78:7f:34:0a:23:a2:19:a9:3a:
                    83:1a:03:7a:dc:e7:fa:f7:2a:ed:77:af:f5:dc:5c:
                    c1:61:1b:ed:e3:20:f9:9f:05:30:19:28:7f:82:8f:
                    b7:71:91:55:44:34:1c:5a:19:f7:ed:3c:38:f6:89:
                    a5:72:a1:14:6b:36:e1:32:59:91:2a:1b:ce:2d:e4:
                    73:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2C:39:0C:24:5E:9C:33:A0:EF:9B:0C:B9:54:85:97:32:60:9E:25
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf/19c7927c-2aee-47c8-9379-dec57902bacf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.184.0/24
                IPv6:
                  2602:f86c::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30254

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:87:69:36:8e:24:4e:81:37:c2:b3:e3:3a:a8:18:e3:0a:fe:
         4f:95:f0:83:b6:ca:f2:3c:4a:07:2c:9d:ae:f5:61:98:57:5b:
         76:e8:02:3e:86:38:a6:14:9d:b9:25:f7:aa:49:84:1d:62:27:
         8e:f5:30:49:96:ef:04:c1:09:20:1d:79:17:7b:d7:3a:29:72:
         01:95:71:2f:87:63:75:df:ac:c1:e2:6c:69:8b:2d:13:e2:e4:
         f2:8f:91:40:d2:42:e9:e3:68:fb:aa:7f:83:d4:1a:af:55:d9:
         d5:61:60:28:b3:9b:d5:ce:48:0a:96:0e:26:80:c2:5a:79:6c:
         d6:34:99:da:9b:51:b1:36:ff:c7:3a:0c:9c:cd:79:bd:cd:f8:
         45:05:53:59:04:75:43:30:4b:ef:26:03:fc:ff:f0:75:f3:34:
         cc:0a:94:a4:05:af:f2:37:f8:d6:14:d4:b0:53:c7:0a:6f:a6:
         29:20:11:93:ef:30:7f:e7:02:c2:09:72:72:3c:d9:6c:4e:90:
         6a:46:5c:3c:ca:e2:70:e8:ec:cb:80:f9:64:83:e6:cb:1c:df:
         e5:60:b9:a0:7b:f7:bf:7a:56:08:14:15:25:b0:49:0a:07:54:
         ed:04:d5:29:c4:ea:71:26:a0:df:0b:db:56:80:77:88:75:da:
         4c:97:22:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----