Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer
File:                     32f4e84a-4abf-4422-8d26-57083e3e17cd.cer (raw, json)
Hash identifier:          Ew+rEOWmjQH4COOnng53g1fJS+Xbx6P5ybpz5J5qdow=
Subject key identifier:   5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858470151F453B59453888C301200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Aug 2024 14:40:53 +0000
Certificate not after:    Sun 29 Nov 2026 15:40:53 +0000
Subordinate resources:    AS: 31829
                          IP: 199.127.180.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:51:f4:53:b5:94:53:88:8c:30:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 26 14:40:53 2024 GMT
            Not After : Nov 29 15:40:53 2026 GMT
        Subject: CN=32f4e84a-4abf-4422-8d26-57083e3e17cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:c7:a1:6b:86:12:e7:82:25:d5:25:ea:32:
                    e1:45:97:e0:fd:76:1d:cc:82:cc:51:b0:41:16:f5:
                    9c:41:1a:3b:58:1b:2f:72:f0:7f:9d:53:4c:90:b6:
                    fb:1b:9c:98:b4:48:f3:85:e3:0b:48:05:8b:a1:7e:
                    84:24:bd:13:76:67:70:fe:2d:2c:71:fd:26:9d:b1:
                    2b:1f:26:86:cc:15:aa:0b:0e:c3:67:5e:8e:85:e3:
                    95:0b:a0:5d:f7:d2:22:b8:1b:8e:b6:ff:d3:aa:32:
                    7d:20:ac:c1:9f:d9:23:bc:31:61:d0:cc:1b:ec:2a:
                    39:87:55:bc:4e:f0:60:46:04:2b:36:6c:83:a3:13:
                    2a:32:f2:42:14:11:d4:59:38:fb:f8:e6:bb:c4:b3:
                    3f:eb:ae:b2:3c:c6:fb:e8:fd:51:bb:9f:eb:e1:81:
                    da:28:f4:a9:4c:ff:7b:26:b2:3b:eb:6a:98:9c:76:
                    51:e0:2c:ef:57:24:e1:e4:82:ba:67:b5:20:2f:0b:
                    c6:3d:c9:d6:66:ae:6e:7f:fb:80:ee:40:d2:a9:75:
                    c9:57:d5:69:3b:9a:39:a2:47:7f:8f:55:39:5d:7d:
                    80:29:0c:d5:a0:7e:65:d5:16:96:b0:9c:76:3d:47:
                    dd:85:36:f2:af:b8:bd:37:eb:a3:5e:be:d8:ca:b8:
                    81:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.180.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31829

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:06:3e:ae:8d:e8:3a:3c:54:03:be:65:8c:2a:fc:83:0f:5f:
         f2:98:88:44:2f:97:a2:54:16:a3:c7:7a:69:57:47:34:23:f6:
         da:da:e0:88:a8:dd:40:14:26:98:d4:e4:9b:24:5a:b5:70:97:
         b3:22:70:ea:b5:10:3e:ef:38:40:74:03:d8:b7:33:cd:65:cd:
         48:86:19:a8:03:73:a6:49:aa:8b:70:8b:9c:c8:ae:8a:d2:91:
         4e:0c:ab:9d:00:02:7e:60:a8:da:59:db:2f:6c:72:d6:36:3c:
         63:f6:0d:50:66:38:93:7e:9f:65:9d:42:13:03:cd:83:cc:b9:
         52:f3:38:b3:48:f4:f5:1c:dc:e3:e2:77:75:b5:4c:f2:03:b1:
         b0:4a:d5:3e:15:64:77:7e:b6:a1:19:c1:f6:b0:47:bc:3e:4f:
         dd:00:8f:ae:50:39:4a:3a:04:c5:0f:f0:8e:3c:a0:fb:ac:8b:
         db:c8:e3:25:e9:48:d7:dd:c4:91:ea:b7:72:11:8f:89:94:29:
         99:e8:5e:3e:cd:db:57:15:da:b2:15:6a:27:4a:5d:8a:63:9e:
         7b:c2:4d:39:7f:05:4b:46:e3:ee:4b:26:9a:a6:22:8e:50:d3:
         47:40:a9:95:77:b0:29:13:6d:6f:3e:74:b4:88:fa:64:e2:ed:
         1c:bd:f5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----