Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493.cer
File:                     3228caa5-d014-404b-9e3d-61cdea1ff493.cer (raw, json)
Hash identifier:          3A1Djv8wv3Ky4oHib17/kP5QowBNPNArlJxxGAuVAHA=
Subject key identifier:   61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847A625509C80A8E99575487540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 24 Oct 2024 15:39:19 +0000
Certificate not after:    Wed 27 Jan 2027 16:39:19 +0000
Subordinate resources:    AS: 401438
                          IP: 198.200.242.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:25:50:9c:80:a8:e9:95:75:48:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 24 15:39:19 2024 GMT
            Not After : Jan 27 16:39:19 2027 GMT
        Subject: CN=3228caa5-d014-404b-9e3d-61cdea1ff493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:a3:ef:7a:34:d9:71:34:46:f7:eb:8d:62:
                    0e:3d:0d:96:24:17:55:00:22:e0:4f:87:cb:c0:8d:
                    33:89:a3:b4:ef:12:3c:5d:0a:6c:bd:8f:8d:28:76:
                    fb:45:ae:db:a9:8c:0c:48:7a:92:67:62:4a:16:2b:
                    d1:83:28:48:98:53:fa:11:3f:92:ba:41:84:00:15:
                    ad:e5:8f:ab:88:9c:83:35:c3:ed:20:28:6d:94:3f:
                    63:44:c6:2d:f7:ed:dd:df:50:02:4c:19:d1:c0:ce:
                    bd:a5:9a:2a:b3:59:b4:2c:c8:31:04:cc:f5:dc:07:
                    5b:96:29:a9:ba:f7:54:d1:fd:ca:8d:5a:05:f5:e9:
                    56:da:d8:c7:b5:c2:6d:5f:80:46:bf:ea:cd:84:36:
                    be:3d:0f:e0:ad:b1:24:a0:0c:bc:51:85:a3:0e:57:
                    49:cd:f9:1e:3d:5d:8e:83:22:25:95:ef:58:aa:9f:
                    ee:bd:38:30:96:af:3e:b2:b4:46:64:f6:65:46:f6:
                    15:bc:e1:d9:9a:78:da:55:76:0f:2a:50:02:83:bf:
                    4d:da:9d:1e:09:40:40:9f:81:a0:a4:5c:ac:4b:7f:
                    4a:20:dd:14:6b:07:4b:6d:21:5b:a5:10:ba:fe:78:
                    35:e5:3c:9d:92:c9:fb:de:ca:24:bb:5a:87:68:da:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7B:A8:DA:17:40:9F:50:04:2B:D0:DE:79:D3:FF:7B:29:D2:7D:5E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3228caa5-d014-404b-9e3d-61cdea1ff493/3228caa5-d014-404b-9e3d-61cdea1ff493.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.200.242.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401438

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f6:23:db:aa:6d:34:25:39:a0:ee:e1:1d:67:fe:3b:44:cc:
         20:8b:f2:fb:9a:63:42:48:98:08:c2:72:d6:ff:c8:62:b0:c0:
         7b:4a:70:6e:cd:3f:79:f5:d3:49:93:af:c6:a7:d1:fa:64:ab:
         e4:e2:e8:2e:d4:0c:9d:1c:d4:0d:ea:46:3a:3b:b4:d9:97:f1:
         d9:37:42:04:96:93:f6:9e:9f:73:4f:7f:1b:f7:72:27:9c:0a:
         dd:05:3d:87:00:3f:7e:86:20:92:09:51:39:37:17:be:62:fb:
         eb:e8:24:6d:92:67:64:65:e9:72:9d:a7:c2:86:f9:d0:89:2a:
         ab:db:2e:0a:c1:3f:04:5f:07:b8:7e:85:bb:e9:ab:7d:2f:95:
         cd:ca:9c:3e:fc:2e:5e:a1:db:f1:b0:cd:f1:91:c2:87:4f:a0:
         c6:d8:38:ca:c0:ec:42:5e:b7:5c:7f:2d:4b:4d:43:20:9a:08:
         d8:c9:12:9d:3c:1e:7f:f4:14:92:5e:d6:42:28:47:9e:58:ca:
         06:18:6f:78:76:53:2f:f7:9c:02:a9:8e:2d:53:0c:48:12:a2:
         d6:d5:e6:d7:79:43:65:de:49:17:12:50:f9:b4:c9:7d:91:01:
         cd:5c:1f:c0:30:55:bd:30:35:82:79:0e:98:78:5b:b3:db:1f:
         d7:d6:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----