Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
File:                     4021c43f-b78a-496f-a8cc-814abc11a7e9.cer (raw, json)
Hash identifier:          zTf4lstbsePHttvJjLyxVj1gfjO920TDI2ezbg6GwUU=
Subject key identifier:   19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847D01F6C6841F5BC637C90BFE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 08 Nov 2024 16:31:24 +0000
Certificate not after:    Thu 11 Feb 2027 16:31:24 +0000
Subordinate resources:    IP: 2610:20:6000::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:1f:6c:68:41:f5:bc:63:7c:90:bf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  8 16:31:24 2024 GMT
            Not After : Feb 11 16:31:24 2027 GMT
        Subject: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:b9:91:00:71:62:92:b4:56:89:70:7d:63:
                    8c:b9:db:fa:23:57:14:6e:cd:fa:ab:fb:cc:74:2d:
                    d7:81:3f:36:5c:ad:de:1a:e5:59:39:3b:27:b9:9a:
                    7c:70:35:68:8c:b4:7e:64:1c:39:59:5e:c3:f6:d7:
                    e2:2a:8f:17:72:e8:01:11:83:4d:92:83:be:45:aa:
                    3f:36:e3:13:9b:02:ce:e2:8f:32:de:8e:93:f7:a5:
                    1b:e5:69:77:13:ad:11:e3:dd:47:45:6a:e0:c2:13:
                    fc:45:88:10:dc:16:a3:a0:60:b2:29:c7:39:ae:d4:
                    38:a4:fc:f6:ce:af:37:da:b0:f7:a2:1d:2a:5d:b8:
                    e2:ef:d8:6a:12:18:83:d1:da:78:89:b0:1c:4c:a0:
                    6d:09:ee:36:12:8a:90:71:11:03:58:30:c7:cb:ef:
                    7d:41:b7:a5:8f:4f:80:27:87:bc:87:84:1e:ce:bc:
                    80:50:db:41:ca:c2:c4:43:f3:69:39:1d:c5:8d:10:
                    1f:da:0a:a7:73:55:c8:13:e6:b8:01:5f:f4:db:d4:
                    36:f0:81:49:4d:a3:ea:09:55:7c:1b:b8:78:9a:63:
                    5c:fd:b3:8d:0d:76:ec:5c:37:0c:8b:9c:a0:3a:44:
                    0c:6c:df:87:c0:4a:6e:1f:1a:be:0d:4d:a6:da:e0:
                    a8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:20:6000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:09:1c:cd:ea:68:53:9a:8e:c8:41:c2:c2:93:0e:3d:61:b9:
         b0:ba:8c:86:23:40:16:07:1c:df:90:41:88:a6:7a:00:c0:3b:
         ea:9a:0d:fb:de:ad:89:e2:63:aa:ae:29:78:4a:b3:fb:bd:b6:
         fd:c0:7a:7e:53:fe:58:dd:c5:1b:05:ee:ea:1e:38:d4:e7:c3:
         70:62:16:b6:52:2c:20:8e:8b:e7:7b:32:db:8b:b6:74:4c:ae:
         ed:4c:ab:6d:25:b9:a6:21:2a:32:79:63:c7:b0:e2:4c:bf:6e:
         d0:b6:54:53:9c:2e:2e:7e:50:c3:71:2d:14:1f:34:e6:98:8a:
         9c:37:ea:9a:3f:f6:08:87:ad:ac:4e:86:29:5d:17:1a:41:d2:
         6a:47:ec:8b:a8:e9:68:d7:e5:a7:49:ae:5b:65:e8:c0:08:91:
         81:e1:2c:0b:8c:cd:9a:67:af:ea:4d:42:4c:7a:86:19:b7:59:
         76:22:76:bd:c0:21:12:76:e8:60:2c:3f:db:f0:4d:20:17:45:
         c4:0c:fb:12:dc:a4:9a:44:92:dd:1a:b6:54:6f:3a:f0:95:61:
         cd:9d:7d:2b:24:04:90:2d:51:1c:56:53:36:c0:be:ca:b9:56:
         4d:4a:01:32:de:06:cb:4c:49:3d:93:1a:5d:3d:75:0e:de:29:
         b1:3f:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----