Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer
File:                     19c7de84-b33a-43c7-acd3-7cd3ffceccb8.cer (raw, json)
Hash identifier:          N5omnm5rSgrwKfiYDluhjpw7gwgLvtykypzpJKM7n8A=
Subject key identifier:   F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858477BF8E3C2CC3EB39A552DA738
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 09 Oct 2024 13:05:52 +0000
Certificate not after:    Tue 12 Jan 2027 14:05:52 +0000
Subordinate resources:    AS: 62903
                          IP: 198.62.163.0/24
                          IP: 2620:79:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f8:e3:c2:cc:3e:b3:9a:55:2d:a7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  9 13:05:52 2024 GMT
            Not After : Jan 12 14:05:52 2027 GMT
        Subject: CN=19c7de84-b33a-43c7-acd3-7cd3ffceccb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5a:3c:67:a6:63:b1:de:1e:c3:46:b3:31:f0:
                    9e:c3:09:f3:32:4f:cb:6c:76:6c:3d:3b:f2:38:f5:
                    39:96:ca:2f:85:3d:f9:71:37:49:2a:71:f2:a0:bc:
                    bd:aa:5d:43:0c:1b:af:aa:f6:24:d0:32:bd:37:26:
                    eb:cc:5a:c1:2d:0d:00:58:9d:85:6f:a9:10:ef:e1:
                    1a:65:c1:99:5f:34:a0:18:80:ff:0d:7c:62:71:01:
                    ea:c0:26:56:81:c6:90:e1:2a:f4:45:f0:6d:0e:bd:
                    d9:f6:f1:93:33:b7:67:59:00:d8:79:f6:07:35:6a:
                    38:5a:fe:d8:5a:c5:6d:bc:a8:bd:a0:73:04:76:05:
                    bc:a9:f2:1e:09:79:7c:4c:67:ee:76:3f:01:98:d7:
                    5e:bf:88:10:59:94:33:f5:1d:60:5b:89:7d:50:70:
                    3d:a6:b2:0b:c8:25:7a:c7:30:f8:b1:9c:83:01:b6:
                    1c:b4:48:e1:32:96:5e:2a:64:c9:44:d8:34:64:f5:
                    99:a2:29:e6:af:f2:b5:94:c7:05:b1:c7:53:4d:d8:
                    68:13:82:ec:94:34:28:02:68:33:4e:0c:82:37:9d:
                    75:bc:75:dc:25:f5:d4:d1:02:f1:fa:b2:ee:83:47:
                    75:e9:fb:be:6a:c4:11:6b:85:d0:61:c3:31:bd:10:
                    8b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:78:C8:3D:4C:89:41:1B:0E:4C:C7:C4:7F:6F:76:DE:3F:7E:0C:2E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7de84-b33a-43c7-acd3-7cd3ffceccb8/19c7de84-b33a-43c7-acd3-7cd3ffceccb8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.163.0/24
                IPv6:
                  2620:79:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62903

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:7f:51:b0:ea:be:5d:2d:68:6f:ae:71:db:d6:99:ae:10:
         3e:84:81:c5:69:01:5b:42:ae:77:68:b8:e1:18:12:26:e2:15:
         54:85:c5:20:79:fe:82:f5:f4:18:db:fb:1b:9b:6d:f2:4b:46:
         31:b8:d1:ca:03:4b:e0:46:65:29:26:69:06:85:05:7c:4c:32:
         dc:4f:08:13:4e:6f:cc:6b:1b:53:c2:95:3c:b2:f2:8e:86:42:
         a6:36:0a:f8:ab:fb:0e:a7:68:d2:61:85:3f:7f:eb:4c:03:a5:
         78:a8:39:55:7a:d8:fe:b7:6d:94:1b:5e:5e:39:57:31:a9:7e:
         00:f4:3c:e9:38:02:b7:c1:63:18:ca:c5:44:12:d2:57:23:c6:
         ba:5f:bf:e9:5f:83:02:a7:a7:70:bc:81:62:97:d5:27:a9:58:
         ba:3a:b9:ee:74:40:72:11:69:c6:2e:bc:c6:d4:ee:dc:ba:d7:
         49:a7:60:72:94:15:de:68:7f:27:0f:f5:bd:5e:de:9c:e1:73:
         e7:cf:3a:bb:1d:f9:bf:d7:40:54:14:62:6f:52:a7:a4:f4:21:
         40:bd:a4:ba:60:db:47:77:b6:79:99:5f:8f:4c:c6:16:cc:ae:
         62:fd:cd:2f:50:75:4c:e7:58:2e:d9:81:56:a0:fe:50:a7:9c:
         fd:47:4a:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----