Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f.cer
File:                     1a6caf55-a53e-446e-9958-ee41f172c88f.cer (raw, json)
Hash identifier:          xqJQqXxS1P3kUSutih8OnTtu5X9FHyanR65SLf8D6Bo=
Subject key identifier:   10:DF:30:B3:02:46:F3:B0:F2:8A:50:08:46:67:1D:3E:5A:E8:44:4D
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847BA15188F75B3662600DAE040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 31 Oct 2024 19:02:49 +0000
Certificate not after:    Wed 03 Feb 2027 20:02:49 +0000
Subordinate resources:    AS: 401181
                          IP: 192.112.152.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:15:18:8f:75:b3:66:26:00:da:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 31 19:02:49 2024 GMT
            Not After : Feb  3 20:02:49 2027 GMT
        Subject: CN=1a6caf55-a53e-446e-9958-ee41f172c88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:7a:04:72:7c:20:d2:40:5d:58:64:01:a1:
                    cc:1f:05:e6:87:92:88:26:5b:7a:2b:b7:c9:1e:89:
                    3e:05:7f:b0:77:c6:e2:ea:0d:60:25:db:5b:d2:a1:
                    70:d9:8a:bd:a8:c7:d0:d6:2d:6a:f8:72:9f:43:f7:
                    e4:1b:5b:35:8f:ca:35:bf:9a:a2:37:b1:50:78:74:
                    61:b8:10:64:08:f3:2c:f3:f5:ce:79:82:ea:52:26:
                    2c:93:e4:5b:c3:4e:1f:17:74:d3:d6:72:37:a0:0b:
                    32:f3:a3:f8:28:d3:1e:e9:80:b7:9d:b7:06:4b:87:
                    f5:8f:32:67:b3:46:29:8a:1a:a9:0c:6c:e6:63:74:
                    42:d1:f9:2e:a1:56:bd:cb:a4:c7:64:10:98:2b:50:
                    a7:80:3c:12:5d:f3:85:5a:aa:25:40:42:25:5d:e0:
                    7d:74:53:f5:66:b7:74:7b:1e:a4:81:96:f9:cc:1f:
                    91:d2:5f:52:e0:ee:3c:d7:06:67:75:c9:d2:bb:e3:
                    f9:0a:6f:c3:cd:36:26:b2:01:97:9d:26:66:e9:5c:
                    fb:6b:9a:dc:a3:43:1e:5e:aa:27:93:ca:f7:3c:c5:
                    c5:58:9b:a5:d2:86:bc:a1:26:9c:41:35:2d:c5:6d:
                    32:6c:76:b6:ef:56:51:c7:8b:aa:26:9b:f3:5c:c5:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DF:30:B3:02:46:F3:B0:F2:8A:50:08:46:67:1D:3E:5A:E8:44:4D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a6caf55-a53e-446e-9958-ee41f172c88f/1a6caf55-a53e-446e-9958-ee41f172c88f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.152.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401181

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:58:49:ef:cc:bc:8c:31:52:57:9f:ac:87:61:c2:59:74:58:
         bc:f8:9e:b5:cf:37:9d:12:33:9c:b7:94:db:00:dd:2b:db:71:
         39:a6:00:d8:87:a1:3f:ab:3a:75:67:71:8b:26:6c:5b:63:bc:
         53:19:6b:5b:18:03:36:aa:56:34:0e:97:17:cf:9f:dc:1d:6b:
         1f:b9:c6:62:b8:9b:30:ea:c4:1c:0b:46:26:11:2b:0b:dc:89:
         cc:e2:dd:ea:01:cf:e8:80:87:95:44:a6:c1:31:22:85:24:d0:
         49:90:a8:58:2a:64:c8:44:9f:e2:54:42:df:4f:65:d0:f6:c1:
         7f:21:38:ce:f8:fb:1a:98:8a:1a:ab:95:99:ff:2a:6b:53:69:
         ee:18:0c:1d:c4:9e:b3:f4:c7:24:8f:7c:0d:75:e4:53:8a:bf:
         a2:58:35:d3:3b:f1:ca:c1:84:19:71:6a:0d:ac:05:d4:b3:01:
         ac:04:98:9c:b3:c0:85:25:b2:c5:15:37:6c:43:1d:ab:62:ed:
         39:00:5e:fe:7a:95:fd:10:3a:f6:f4:7f:53:5b:5e:02:60:c1:
         7a:d0:55:b3:63:51:5b:06:e1:20:8d:6e:58:f3:71:65:ee:98:
         60:83:8a:6b:34:b2:f8:a6:1c:94:1b:fc:89:13:f6:7f:bf:83:
         e0:f8:08:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----