Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer
File:                     21536be2-b559-4b5e-9749-413cb6af0bc1.cer (raw, json)
Hash identifier:          F6sF6gn2cvKpgq0vj2Cv3GjqTWpDYPyXDUbDOmR+jD0=
Subject key identifier:   D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847B1B940C4079BC19578DB0D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 28 Oct 2024 19:11:17 +0000
Certificate not after:    Sun 31 Jan 2027 20:11:17 +0000
Subordinate resources:    IP: 139.84.0.0/17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:b9:40:c4:07:9b:c1:95:78:db:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 28 19:11:17 2024 GMT
            Not After : Jan 31 20:11:17 2027 GMT
        Subject: CN=21536be2-b559-4b5e-9749-413cb6af0bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c9:84:f3:9f:ed:10:54:0c:d9:7d:6d:8d:5e:
                    7b:c0:48:a6:b1:cd:cb:4f:a7:e5:4c:c0:f1:55:2b:
                    42:e5:d9:7e:57:08:83:57:dd:05:fd:37:30:59:56:
                    a3:4b:b2:1c:4b:4e:7f:c7:88:75:68:61:2a:d3:43:
                    78:69:a7:aa:78:be:97:fe:8f:42:64:77:bb:6d:9c:
                    8d:a1:32:88:ab:07:15:7d:10:43:87:17:a2:04:c9:
                    85:a2:36:3e:49:15:12:71:db:55:98:d7:2f:ef:ea:
                    73:f9:19:c3:60:35:00:3f:e8:ba:c2:ac:65:9c:b1:
                    0f:ac:8b:2b:6b:30:6d:8b:d3:1a:14:64:c8:9f:a5:
                    33:c8:24:c9:7f:92:22:02:5c:66:bd:8a:97:59:8f:
                    19:4b:7e:a1:fe:d4:a7:ed:09:97:cc:b6:df:b3:2b:
                    48:09:e6:ac:f7:4c:f8:d5:aa:0b:94:c2:8c:e3:f0:
                    ee:69:48:20:4c:ff:ce:03:fc:f8:a2:20:34:67:d7:
                    24:cc:42:23:79:74:72:8c:45:c4:13:7a:9b:00:b6:
                    7e:18:55:53:39:83:e4:8e:cf:79:2e:4d:68:a0:35:
                    7b:34:cb:a1:69:2b:0e:27:f0:cd:70:92:82:9d:8c:
                    a1:a6:7b:39:b9:44:db:28:18:4b:8d:99:c0:6e:49:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.84.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:49:bd:9c:1b:01:4c:3f:9c:00:02:a4:5f:5b:a1:43:6a:64:
         1f:d7:df:31:7d:b7:2f:53:dc:7a:be:87:f7:89:7b:f5:ee:ed:
         91:e3:f4:2a:d7:b8:c5:6c:a7:4f:18:3e:a6:0a:14:cc:69:c0:
         8e:c6:ae:cd:7c:14:7e:c9:24:4b:7c:c5:9b:be:6b:6a:b8:f1:
         80:6b:bb:52:f1:4f:a3:8b:f7:ed:51:ad:91:c8:c5:70:1b:49:
         0b:0a:1f:39:89:01:3e:74:96:86:6a:a3:a9:19:67:37:bd:94:
         fc:8a:2d:04:13:e3:54:0f:17:9b:5e:dd:19:25:50:11:28:79:
         16:6f:ae:b9:f3:b6:a4:cf:38:33:40:7f:43:6a:0d:6a:bd:aa:
         3a:83:5b:e4:73:6a:11:28:3b:bd:94:bf:b6:49:ac:d4:fa:76:
         4b:6c:9c:ac:ff:5a:bd:e3:eb:25:80:fd:b1:85:0a:dd:c1:14:
         5a:c1:9d:ca:cf:80:15:81:68:30:3d:f0:ad:40:d8:84:75:7d:
         cb:fd:fe:f4:d8:fd:3e:1e:4b:c9:c6:48:80:d9:b3:0a:3b:5d:
         6f:ce:68:e1:11:92:0e:29:24:2f:d8:b9:9b:82:16:d1:49:49:
         fc:8b:b7:a0:34:68:31:c6:02:ec:90:16:0a:ff:47:e6:2d:df:
         e4:0d:88:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----