Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/316b0f6a-c089-4a11-955d-b5ba9d77e82d.cer
File:                     316b0f6a-c089-4a11-955d-b5ba9d77e82d.cer (raw, json)
Hash identifier:          zgsZUXBO6AvcM6JMW0cE2h+cv0oWXoBziiEidjdC9TA=
Subject key identifier:   0C:22:84:36:B5:AD:94:2A:6B:B6:97:10:4E:D8:8A:2B:C8:62:C8:4A
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584706C16BADD52A4563892ABD40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/316b0f6a-c089-4a11-955d-b5ba9d77e82d/316b0f6a-c089-4a11-955d-b5ba9d77e82d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/316b0f6a-c089-4a11-955d-b5ba9d77e82d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 28 Aug 2024 13:24:31 +0000
Certificate not after:    Tue 01 Dec 2026 14:24:31 +0000
Subordinate resources:    AS: 400898

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:06:c1:6b:ad:d5:2a:45:63:89:2a:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 28 13:24:31 2024 GMT
            Not After : Dec  1 14:24:31 2026 GMT
        Subject: CN=316b0f6a-c089-4a11-955d-b5ba9d77e82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:84:6c:fe:77:d1:50:8f:9e:c0:36:ec:6b:ab:
                    ab:2c:2d:1f:e5:70:43:04:0a:ae:33:60:8a:f4:1f:
                    b0:c1:4a:df:cd:5c:ac:c7:d2:8a:6b:5e:34:ba:5b:
                    b9:19:7c:5a:3c:1e:00:79:b5:cb:2a:30:09:7d:d6:
                    05:85:ff:d9:8b:9d:54:0c:2b:86:02:4b:5a:c5:27:
                    5c:36:6a:76:0c:fb:13:d4:06:f9:76:98:88:30:a5:
                    50:44:86:c7:44:8a:5d:6f:cd:18:36:be:95:75:17:
                    b1:46:b9:bc:4d:29:dd:f4:53:46:af:83:67:ca:55:
                    05:10:4b:48:4f:67:80:c8:2c:d8:ac:35:8b:d4:23:
                    30:8a:2e:9d:58:44:cb:8e:ad:5a:8f:a8:67:ae:9d:
                    a3:aa:f7:a2:4b:e6:95:6f:87:52:e1:68:82:98:3c:
                    47:31:ac:b0:98:78:00:2a:89:ac:da:7c:9b:55:e2:
                    46:51:9d:38:75:60:18:09:21:e6:16:ee:61:41:d1:
                    45:a8:75:6f:82:49:a6:76:b5:19:dd:05:bd:8f:88:
                    a0:c3:b9:4e:12:ab:c8:6d:9f:b6:62:ec:14:02:11:
                    4c:db:b1:9b:01:ff:fe:f6:db:28:db:d6:bc:d0:f9:
                    ac:8c:60:fb:41:24:f8:b8:f9:c0:01:01:e0:6c:15:
                    02:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:22:84:36:B5:AD:94:2A:6B:B6:97:10:4E:D8:8A:2B:C8:62:C8:4A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/316b0f6a-c089-4a11-955d-b5ba9d77e82d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/316b0f6a-c089-4a11-955d-b5ba9d77e82d/316b0f6a-c089-4a11-955d-b5ba9d77e82d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400898

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a1:4e:fc:15:1c:e7:15:e0:71:48:d0:93:b8:b4:e7:49:de:
         55:92:34:d0:70:e4:fb:17:d8:00:5d:34:90:00:5d:c7:64:14:
         e4:0f:f6:b8:e2:19:c7:f9:a9:4d:ee:20:32:a3:68:e3:db:53:
         ea:a7:d9:eb:49:70:48:5c:ef:14:3b:ef:7a:48:99:bd:16:b6:
         eb:4f:55:45:9c:69:65:a0:c5:8b:92:dc:23:43:0c:7b:a5:36:
         fb:4e:4c:d3:85:ea:6b:3f:c8:88:cc:a0:bb:3d:cc:45:c6:c0:
         73:63:39:57:13:e9:8d:bb:3f:57:9f:7d:cf:68:2b:15:a6:86:
         23:0d:3b:04:8e:eb:21:33:30:c0:94:e8:46:95:5e:2d:69:6f:
         2d:b8:02:7a:05:57:4f:cf:b8:22:cc:d2:d6:dd:55:47:92:bf:
         15:70:34:01:55:02:9b:eb:63:bc:7b:20:23:5a:57:17:f8:c0:
         1e:4c:30:62:55:83:f1:53:ea:d9:cc:67:0f:68:19:bb:93:fd:
         49:f9:10:15:cc:19:8f:7f:76:6e:18:84:98:b7:38:76:52:55:
         b5:67:fa:58:e2:da:0d:df:07:0f:c7:ed:45:9f:84:e4:a4:a7:
         54:f2:0a:02:32:e8:68:dc:57:36:9b:be:8e:13:3d:4f:43:ba:
         60:63:5a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----