Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer
File:                     2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer (raw, json)
Hash identifier:          LXLLosJ1gXhobNwFHc1dTTcwRy3MZuLhUIITjhJVEjs=
Subject key identifier:   B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847DEBEDD988135FC7FAC825380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Nov 2024 22:13:58 +0000
Certificate not after:    Tue 16 Feb 2027 22:13:58 +0000
Subordinate resources:    IP: 137.104.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:de:be:dd:98:81:35:fc:7f:ac:82:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 13 22:13:58 2024 GMT
            Not After : Feb 16 22:13:58 2027 GMT
        Subject: CN=2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d1:74:1a:d4:e2:fc:83:2d:e1:b6:d4:e2:c3:
                    70:15:70:de:5d:90:82:96:7c:7b:e6:d7:da:c5:f5:
                    74:be:cc:89:b4:d3:fa:b0:48:dd:c7:0d:d8:6d:6d:
                    fa:75:fc:55:7a:00:cc:56:91:a1:e6:90:a7:a2:69:
                    d8:4c:38:f2:90:ad:2e:fc:78:ef:ea:27:ff:bf:c2:
                    b0:97:02:c9:dd:62:17:40:35:a6:c1:72:55:4f:5d:
                    86:a3:a6:14:ef:56:8a:09:93:91:b9:fd:f3:18:4b:
                    7e:cf:0c:f7:f9:5d:46:29:42:af:c6:3e:d3:80:cf:
                    6d:8e:a5:e0:b0:4a:ea:7f:18:19:a7:d2:5b:fa:3d:
                    03:67:02:ed:21:ef:da:16:8e:65:1d:54:32:b8:34:
                    bc:4e:54:83:d7:29:30:68:fe:a8:52:24:0d:bf:27:
                    6d:ba:b9:d6:87:30:b5:da:18:0f:4c:5a:10:6f:8f:
                    0c:81:22:ca:d8:96:4b:01:20:14:e2:d6:67:08:2b:
                    3c:86:eb:a3:0b:b9:2f:ec:82:e9:33:78:9b:d5:60:
                    34:de:bf:3e:32:c8:62:4f:60:11:8a:f8:13:1e:c7:
                    a0:21:a2:fe:76:7f:8b:db:e8:cc:9d:d4:49:ad:24:
                    d5:1f:9c:00:00:05:0b:2f:1c:f7:4b:c3:2f:8d:c1:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:4d:24:af:34:6f:91:8d:93:80:35:03:23:78:92:0b:39:3a:
         05:99:ad:8d:fb:6a:bd:20:47:ae:cc:b8:91:8b:33:90:22:95:
         57:b1:5c:2d:f9:8c:03:94:1d:34:40:b2:ff:89:27:41:9c:b1:
         13:3d:95:25:7a:e9:0e:04:58:4d:70:bf:02:6d:82:26:9f:2c:
         66:23:96:d7:69:e9:1b:f8:1b:51:bc:d4:f9:e2:fd:76:b5:fd:
         f9:b3:3f:ec:82:db:3c:d0:15:eb:4b:9c:a1:f4:15:1a:9d:14:
         1b:14:bc:fb:7d:4d:0d:82:5b:bd:cc:f3:10:63:f6:44:59:26:
         72:78:1c:c1:f9:5f:86:ce:cc:91:b6:f2:de:31:70:e3:da:b8:
         ab:0e:21:44:43:a5:d7:f2:be:f8:36:87:2f:c8:27:cc:0b:b4:
         b0:97:cb:2f:5a:af:99:86:0a:2a:8a:91:4f:e8:6c:0a:c8:e3:
         c1:5d:41:87:0b:1e:65:19:22:8d:0c:ba:2d:d0:aa:ce:08:b8:
         4d:80:78:77:39:41:e5:1b:0d:2a:5c:bb:e3:38:83:59:2c:99:
         ca:15:69:28:df:f4:42:52:8b:d7:d7:47:e5:98:50:fa:83:66:
         ab:66:f7:2b:4b:bf:62:f1:63:e4:6e:e1:22:eb:2d:14:1d:e7:
         9a:b8:f6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----