Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer
File:                     20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.cer (raw, json)
Hash identifier:          m3rwOSHsx75ILayNq5eZj6UFdf/K+X5c7ccO3fVtTPI=
Subject key identifier:   B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847551D9F35D3D18FC402AF4200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 25 Sep 2024 15:03:21 +0000
Certificate not after:    Tue 24 Nov 2026 15:10:58 +0000
Subordinate resources:    AS: 21790
                          IP: 64.190.140.0/24
                          IP: 2602:81a:4000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:55:1d:9f:35:d3:d1:8f:c4:02:af:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 25 15:03:21 2024 GMT
            Not After : Nov 24 15:10:58 2026 GMT
        Subject: CN=20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:93:89:95:15:64:92:6a:fc:da:df:5a:14:
                    08:aa:59:62:9a:c5:f9:87:ab:f2:e9:e9:8f:1c:27:
                    a5:84:f2:72:a1:23:0f:60:ee:f5:41:e1:ee:58:0b:
                    0d:5b:d0:9b:38:ea:a7:3a:ad:b5:2a:68:b2:20:f6:
                    96:93:0a:01:cd:7c:3f:2a:b8:11:41:15:52:5d:09:
                    7a:12:51:cb:23:4d:09:5c:2b:df:79:be:67:5b:2c:
                    1d:59:52:6c:77:17:8d:f2:71:34:23:93:11:34:69:
                    55:06:47:d5:00:b8:29:78:ac:66:0a:8f:cd:6f:d3:
                    30:a3:98:da:b2:fe:97:46:2d:cb:17:e0:e4:6c:31:
                    4a:ef:a8:0b:19:7c:e8:08:bc:99:b0:d9:8e:bb:bf:
                    a8:97:3f:16:9a:7d:a1:c7:8f:6a:e4:54:58:8b:a1:
                    aa:35:d3:0d:8c:d0:88:a9:14:58:86:15:a6:e1:09:
                    fa:35:de:3a:49:9e:d8:93:4d:64:87:af:c7:15:a8:
                    8e:a8:a8:93:fc:d3:5b:27:6a:1e:d7:c5:42:60:4f:
                    8c:9c:7b:e6:b5:86:dc:e8:37:bb:98:2e:ba:ca:50:
                    3d:fb:c3:c9:6b:9f:ff:84:6f:82:86:07:19:d4:cf:
                    70:a6:02:1f:42:47:3f:c0:9c:c9:6e:44:d1:f1:77:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:9D:C3:8F:82:1E:92:58:6B:AC:7E:60:33:85:13:34:51:93:A3:50
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e/20f8bce6-e33e-40e8-bfb3-c4b5b2159a7e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.140.0/24
                IPv6:
                  2602:81a:4000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21790

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:96:26:a7:89:4f:e7:b5:25:56:ee:15:12:31:92:c9:2d:6d:
         68:96:4a:98:f7:78:5b:8a:de:83:35:29:f7:de:a4:ef:84:67:
         03:75:c2:35:6c:9b:2c:0a:52:cf:91:a2:e9:37:4a:69:f8:47:
         1a:85:8c:96:af:5b:92:a5:02:4d:02:01:d6:8d:13:7f:88:c9:
         63:be:60:6e:55:03:e2:7b:c6:0f:bc:a2:de:85:f7:87:87:48:
         9d:9c:6a:e7:ee:0e:e5:ce:c2:7c:c6:33:98:21:36:c3:88:45:
         40:d0:9a:f1:3e:81:cf:5d:84:e6:c3:49:d1:48:dc:5f:8d:b7:
         07:6a:e5:75:f2:51:ee:73:b6:52:27:38:1e:ed:1d:89:8a:f7:
         b9:f0:47:99:18:97:a5:07:a6:de:cc:e4:07:d7:28:2f:8d:88:
         ae:69:d7:fd:25:46:26:4d:40:46:ae:76:af:8c:93:15:c4:4a:
         9b:ca:a1:0a:f3:0c:99:21:35:61:cc:27:26:3e:ff:95:f4:16:
         46:cf:2e:c3:9b:54:70:1a:22:23:ae:65:57:57:3d:3b:bd:4b:
         de:6e:7f:d5:38:e9:24:55:ae:59:3b:c3:cf:71:e6:ac:d0:91:
         51:8a:d5:a0:15:6c:b5:f9:7b:24:c0:c4:67:68:7b:6c:44:51:
         b2:db:19:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----