Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f.cer
File:                     1ec086e2-3054-4b39-ac69-6f7453ed188f.cer (raw, json)
Hash identifier:          VToIl0u+xZgIA+p0t38Jr7AM2cHrbbDWG/xSoHsLfZc=
Subject key identifier:   B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846DF9E29EBCA1FAC2380E2F500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 14 Aug 2024 12:56:57 +0000
Certificate not after:    Tue 17 Nov 2026 13:56:57 +0000
Subordinate resources:    AS: 40495
                          AS: 54668
                          IP: 174.137.112.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:df:9e:29:eb:ca:1f:ac:23:80:e2:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 14 12:56:57 2024 GMT
            Not After : Nov 17 13:56:57 2026 GMT
        Subject: CN=1ec086e2-3054-4b39-ac69-6f7453ed188f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e0:a5:50:e1:16:47:f5:d3:f2:07:80:ed:c0:
                    3d:c0:6a:54:65:44:9c:20:09:13:1c:44:13:61:b9:
                    d0:23:ac:91:c4:9e:b4:a0:b1:d9:4f:12:ef:54:ad:
                    71:c4:16:93:25:e3:bf:52:92:5a:3e:30:f4:6d:13:
                    1e:87:10:87:69:fc:32:01:e3:fb:8c:9d:59:99:c7:
                    8f:fe:4e:86:6b:fb:d9:0b:05:ca:ef:f1:0a:40:3b:
                    f6:68:c5:7e:d9:66:29:8a:ce:67:67:88:5d:0f:12:
                    e3:ab:81:78:53:de:41:cf:0e:85:bb:a3:4b:b1:e6:
                    58:e7:c0:38:05:6a:d1:66:f2:ef:0b:32:4d:4f:76:
                    3e:90:f8:83:b3:59:9a:5f:69:1a:1c:a8:01:46:0b:
                    e3:95:0f:ba:6d:48:8c:27:00:5b:d8:20:46:fa:59:
                    c4:1b:90:d2:79:26:3d:73:15:e6:33:d3:8d:2e:14:
                    f3:f1:df:11:f9:24:c9:95:ff:00:32:af:20:73:c0:
                    d2:1c:1f:fa:b1:e3:c9:90:37:d5:a2:3a:2a:4c:93:
                    14:04:a1:da:09:e1:41:48:1d:f2:48:17:29:2c:65:
                    00:5d:1d:80:0c:49:2d:7c:92:de:10:a7:e0:52:36:
                    61:1f:c6:24:dd:37:04:4c:1a:94:5c:4b:d4:46:73:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:98:1E:DA:4B:41:D4:50:17:0C:35:DC:1F:DA:40:61:AB:AF:49:7E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1ec086e2-3054-4b39-ac69-6f7453ed188f/1ec086e2-3054-4b39-ac69-6f7453ed188f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.112.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40495
                  54668

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:f5:89:07:b1:6a:b5:a5:c6:9b:a2:e2:cc:8b:3c:92:db:67:
         cd:e8:2d:ca:29:3e:1e:6a:85:92:6e:99:64:fc:57:e2:b9:31:
         c1:3e:b2:7d:cc:39:7a:57:87:40:19:dc:e6:eb:f0:ba:e3:17:
         ab:77:ba:99:46:de:3c:f3:7c:1a:0c:9f:09:69:a4:1a:f9:5e:
         d4:09:9d:84:74:e1:32:7b:31:97:16:99:5c:1f:98:e2:b4:2d:
         f0:0b:a7:ce:54:74:74:df:db:82:b7:a7:72:23:45:40:71:64:
         c1:84:59:16:67:4e:20:7c:69:c4:21:76:1a:97:6e:54:c5:c5:
         9f:e0:be:31:0c:7d:e1:04:f1:dc:af:98:c4:b5:73:97:d6:b2:
         af:6d:fb:9c:6b:6f:99:3f:b6:64:66:62:42:81:1e:8b:4d:50:
         d6:28:18:0a:cc:4d:dd:67:c4:21:c4:d1:3d:a3:92:c1:7d:bd:
         8d:99:57:d7:34:e8:b7:bd:9f:2f:5c:83:93:92:0f:b9:18:5b:
         21:4f:58:db:7e:d2:ad:a2:24:6a:70:77:1a:51:bd:56:65:dc:
         2e:da:f0:d4:e4:23:af:0a:91:fb:97:3f:e5:57:40:da:b3:78:
         dc:cd:39:50:1a:fa:d8:0d:90:06:8b:34:7b:4c:14:5e:90:42:
         12:c2:21:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----