Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer
File:                     20a16a9a-6641-447a-8644-025fca0c6683.cer (raw, json)
Hash identifier:          0dl0dYcGWgG1/Y1SE3XsJ1q94sfB1//5jzs0lyBMLcM=
Subject key identifier:   B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847820899FE112F071A886115E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Oct 2024 17:12:22 +0000
Certificate not after:    Thu 14 Jan 2027 18:12:22 +0000
Subordinate resources:    IP: 140.235.108.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:08:99:fe:11:2f:07:1a:88:61:15:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 11 17:12:22 2024 GMT
            Not After : Jan 14 18:12:22 2027 GMT
        Subject: CN=20a16a9a-6641-447a-8644-025fca0c6683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:d3:83:09:c1:f8:5a:62:c3:c1:46:33:87:
                    93:a1:c2:4f:9f:a5:07:62:65:71:13:7d:c5:60:37:
                    e4:b8:bb:32:8f:79:e3:ab:76:47:88:2c:c9:68:db:
                    dc:6f:26:17:c9:f9:79:bb:36:4a:e5:44:23:b7:f7:
                    0f:f0:15:ab:af:2c:c2:9a:aa:44:f4:37:40:4d:18:
                    97:95:b7:31:1f:3e:d8:17:5e:d1:a9:f5:af:98:fe:
                    a5:08:8c:39:2e:68:ba:4b:83:3e:6b:1c:4d:10:b6:
                    d1:16:90:a1:f7:11:1c:82:21:de:86:7c:06:cc:81:
                    e9:e1:c2:fd:3a:80:08:00:47:df:cf:1d:b0:d5:c6:
                    2a:4e:58:06:c3:2b:5b:8b:0a:07:31:4d:30:07:9d:
                    2b:77:14:ed:40:62:6a:08:30:0a:f7:2e:7d:7a:22:
                    6f:e7:04:dd:31:70:63:3e:56:2c:21:12:6c:8d:38:
                    22:bd:30:96:08:c3:e6:ae:89:ef:75:0e:0d:ec:8c:
                    ab:e6:50:67:43:8c:d1:4b:fb:6c:57:2d:02:2c:68:
                    9e:73:87:ff:f1:87:98:96:87:12:60:70:3f:27:b8:
                    f9:b3:af:25:12:6b:bc:80:12:73:c7:bf:0e:88:b7:
                    f2:77:a3:30:c1:6b:e3:64:cb:8c:1a:8d:e7:3c:1a:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:54:66:64:a5:ec:d0:1a:18:4c:f5:21:01:bf:5b:8a:81:
         af:1b:33:63:12:f5:0b:c6:83:47:a4:6b:90:bf:c4:45:8c:fe:
         65:11:b5:fc:98:42:38:74:7d:f0:c9:e7:40:74:98:5a:a7:0d:
         ac:7c:44:d4:70:be:a0:de:b7:42:c1:c8:7b:cb:61:6d:36:a6:
         24:92:2f:33:2b:57:92:de:bf:9f:73:0c:d6:39:81:cb:c1:4c:
         ef:bc:9c:40:00:e7:19:01:4b:33:14:d3:da:1b:54:d4:59:25:
         08:db:b9:87:9f:10:21:55:ea:53:21:85:5f:7f:1e:0a:cb:8f:
         63:ab:89:c1:36:19:0b:42:0b:75:95:0e:fa:88:57:92:32:99:
         70:69:fe:a5:2b:8a:ae:da:80:0a:f8:77:78:9c:4a:31:4c:05:
         a9:d2:c6:8e:fb:a9:70:87:1b:4e:cf:24:a3:88:08:5e:8e:95:
         18:cd:b5:6d:0d:b3:d6:94:f1:96:9d:85:45:1d:bd:2d:d8:66:
         b3:cb:69:c2:d0:46:04:3b:19:dd:c3:d4:5d:47:9d:c2:2c:5c:
         02:fe:2d:c3:cd:ef:9c:6e:37:65:23:4a:6b:fd:66:2c:fb:f9:
         e6:d3:6a:fb:66:c6:4a:c8:52:18:e3:1b:30:2d:08:90:9b:f6:
         80:3f:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----