Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer
File:                     3fd3b938-664d-40a2-b584-1fe2d6002819.cer (raw, json)
Hash identifier:          TC9HQzSq1Ptdss7T4UTahhV40BOrMagOB2bDReC0Nrw=
Subject key identifier:   9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858473ED0E4D41F63EFAE08C4C0B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Sep 2024 15:20:58 +0000
Certificate not after:    Mon 21 Dec 2026 16:20:58 +0000
Subordinate resources:    AS: 46979
                          IP: 173.225.0.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3e:d0:e4:d4:1f:63:ef:ae:08:c4:c0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 17 15:20:58 2024 GMT
            Not After : Dec 21 16:20:58 2026 GMT
        Subject: CN=3fd3b938-664d-40a2-b584-1fe2d6002819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:88:fa:f9:b2:43:40:f4:df:7f:8b:b7:25:
                    a8:20:9f:20:b8:ba:a1:eb:8b:5c:15:ac:c2:c2:b6:
                    22:87:89:e5:71:a1:2e:f9:c2:67:b1:8c:1c:7d:c2:
                    fa:c4:a6:fc:09:ec:00:df:b0:3a:8b:03:bf:99:3b:
                    b0:14:3d:6c:36:5e:1b:14:42:56:44:e3:08:81:a8:
                    a0:a1:58:4f:52:f4:62:75:72:dc:61:7f:55:c6:19:
                    f4:25:2d:56:f9:e2:74:1d:85:be:c5:ca:29:7d:3b:
                    2b:1d:ef:f9:4f:30:e3:fc:f0:4f:e7:36:96:fa:e7:
                    5f:86:b8:79:5c:59:97:e0:e4:d5:df:74:28:68:76:
                    fe:21:5f:13:64:37:39:41:8a:b3:1d:39:45:f8:ec:
                    6f:4e:f7:91:6e:50:07:bc:c5:8c:4b:2e:ad:18:e7:
                    c3:1f:ab:6a:63:42:9a:7c:33:a8:37:7c:e2:37:4e:
                    4d:7b:48:dc:6e:f7:3e:89:80:8c:2e:ce:71:cc:c7:
                    f3:5c:3d:94:b4:be:b1:13:8c:fc:63:76:52:40:3b:
                    02:c2:c5:a5:bf:d4:1e:eb:f2:e4:02:be:23:bf:1e:
                    b7:f4:5c:fa:64:06:7c:82:dc:9f:73:47:e4:bc:0e:
                    0d:56:81:71:e6:0d:a9:64:5a:89:a1:2a:12:15:2f:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.225.0.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46979

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:bd:36:76:8b:b0:27:49:c9:7a:59:f0:e3:ab:d3:e7:a3:
         5f:70:8f:77:0c:55:b0:0f:3a:0d:1a:fa:ae:b5:1f:04:b9:01:
         ad:79:d8:b9:c3:89:0c:f8:f9:a2:6c:2c:2a:5a:93:4c:89:9f:
         9a:33:fb:41:9d:39:8d:10:04:b8:2a:a1:6a:01:99:8f:40:10:
         02:cc:5f:78:6d:24:21:5e:95:d5:c2:ac:a5:20:91:8e:53:60:
         b4:09:e5:4d:d2:8a:71:84:a4:7d:c4:0e:64:cb:3b:6a:6b:4c:
         b4:85:bb:5e:ea:1e:57:32:56:18:74:1a:01:94:9b:b2:1c:31:
         16:8b:4f:69:cf:d3:99:22:b2:de:28:62:f6:5c:65:5b:85:fc:
         d5:e6:92:ad:00:83:e3:30:a7:86:56:12:36:04:a3:95:24:32:
         b2:07:2b:85:6e:c7:8f:82:19:25:da:90:04:05:d0:e8:11:9d:
         24:e3:85:1b:38:c8:6f:7a:b9:96:a3:c0:22:ec:ae:db:3d:e8:
         19:f3:09:92:ef:e2:6e:3a:80:1a:60:71:7c:3b:15:a1:a3:b5:
         f5:2d:cc:a3:99:0d:8b:40:4d:b6:35:1b:7f:f8:e6:a0:2a:2f:
         14:8c:9c:f6:be:b6:05:db:34:ed:7a:e5:1a:3f:30:fe:86:a6:
         c9:61:7c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----