Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3383acb5-041a-4b81-9516-e42d7caeaa08.cer
File:                     3383acb5-041a-4b81-9516-e42d7caeaa08.cer (raw, json)
Hash identifier:          78PH96RctLqtaRsBnmr8XOWQXwL+lQO4tLBectGnxE8=
Subject key identifier:   5C:4B:9A:4C:65:DC:00:65:96:D4:86:E1:D0:2D:4D:6C:F4:4A:7D:A7
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846E32B8B2E7FED90D51911B640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3383acb5-041a-4b81-9516-e42d7caeaa08/3383acb5-041a-4b81-9516-e42d7caeaa08.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3383acb5-041a-4b81-9516-e42d7caeaa08/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Aug 2024 19:29:15 +0000
Certificate not after:    Wed 18 Nov 2026 20:29:15 +0000
Subordinate resources:    AS: 53989
                          IP: 23.185.192.0/24
                          IP: 173.205.200.0/22
                          IP: 208.67.112.0/22
                          IP: 2604:b3c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:2b:8b:2e:7f:ed:90:d5:19:11:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 15 19:29:15 2024 GMT
            Not After : Nov 18 20:29:15 2026 GMT
        Subject: CN=3383acb5-041a-4b81-9516-e42d7caeaa08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:d6:2a:21:90:ef:aa:a8:38:f8:62:a5:32:
                    ae:de:0d:0b:6f:6a:8e:20:43:32:4a:33:9e:7e:6e:
                    c3:41:56:35:d8:49:70:ca:a9:ae:89:93:7d:db:3b:
                    ee:f9:f0:40:17:66:a5:ad:04:b7:2e:12:e6:98:09:
                    bb:85:c5:e1:ce:85:98:e9:9a:14:25:c4:6c:ac:19:
                    8a:b4:bf:6e:e7:42:ab:b4:29:51:97:65:b9:f3:c6:
                    b7:41:44:77:aa:14:36:bc:ac:14:ca:0c:59:15:24:
                    d9:66:ab:00:94:22:6b:43:dd:2e:db:be:07:ff:07:
                    cd:81:4a:0d:a7:02:9a:00:59:fd:b9:a2:d3:c0:9f:
                    a0:e1:44:13:03:03:b8:3f:01:4e:12:46:bf:6a:bf:
                    75:e4:6a:04:29:30:2a:89:61:ea:66:d1:c9:75:59:
                    e8:49:e4:20:1b:04:5a:ae:12:dd:1b:1a:9f:7c:b1:
                    ea:2f:d6:5e:0a:18:0b:c5:07:7e:6c:f0:56:6d:72:
                    1c:c4:bc:59:22:5d:a7:ba:3c:1e:59:20:19:dd:f3:
                    84:42:b0:2b:d9:6e:fd:b2:dd:c7:22:f5:02:b5:fb:
                    33:da:4e:da:89:43:fc:d3:5a:b3:0e:3b:8d:25:cf:
                    cc:f6:65:bb:c2:17:51:d3:53:51:be:5b:23:41:b4:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4B:9A:4C:65:DC:00:65:96:D4:86:E1:D0:2D:4D:6C:F4:4A:7D:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3383acb5-041a-4b81-9516-e42d7caeaa08/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3383acb5-041a-4b81-9516-e42d7caeaa08/3383acb5-041a-4b81-9516-e42d7caeaa08.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.192.0/24
                  173.205.200.0/22
                  208.67.112.0/22
                IPv6:
                  2604:b3c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53989

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:4f:8c:b9:a9:30:e8:fa:b6:44:97:cf:61:4e:e7:dd:68:90:
         ac:3b:a4:65:5a:65:29:1a:ee:a9:9f:87:0a:93:7d:be:65:42:
         5d:b0:c9:f3:8b:4a:b5:1a:cb:5f:d4:45:e4:b8:35:2e:cc:09:
         8d:a2:12:ca:54:2a:79:fa:00:b4:03:44:c2:70:ea:a9:43:2b:
         c9:d5:f0:27:91:f8:1d:cb:12:0d:0c:f2:0e:0c:20:ec:6f:b5:
         2e:5d:9a:c2:2b:0f:d3:b3:23:a1:4e:24:b1:aa:db:f2:90:06:
         1e:43:3e:4b:09:48:ee:d3:8c:d8:75:ef:09:d5:32:ee:fb:8a:
         6a:7e:42:cf:a9:c4:7b:fa:b3:8c:a4:28:7d:dc:02:cb:d2:4a:
         ad:42:63:19:f1:04:12:56:8b:7d:63:6e:71:9d:dc:71:c5:39:
         fa:e5:fc:37:3d:bc:93:3f:01:b0:34:37:6c:be:d8:e8:ef:9d:
         9d:92:ba:8d:34:97:99:25:5e:f0:3f:58:39:d8:2c:00:d0:20:
         b4:28:29:ed:a2:3a:2f:84:f1:06:8f:17:78:c3:3a:a2:40:e8:
         77:43:43:7d:f9:b7:a4:12:4e:16:80:71:3c:1b:84:1f:03:cc:
         bd:be:98:0c:89:56:97:48:15:8a:d7:2b:de:22:ea:22:a6:8d:
         43:2b:aa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----