Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer
File:                     44b921f7-65dd-4b33-b399-9d372fb4a9e5.cer (raw, json)
Hash identifier:          QRHf7xcdRGzE2i8QQ3h86nyBnn3t8RVcOcLfJBg1GSM=
Subject key identifier:   D7:CF:CB:83:53:E0:39:AE:EC:3E:6F:8F:1D:78:2C:52:51:F1:4B:AC
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584777204A7E6AD3DF61B6517440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Oct 2024 19:26:12 +0000
Certificate not after:    Sun 10 Jan 2027 20:26:12 +0000
Subordinate resources:    IP: 205.211.160.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:20:4a:7e:6a:d3:df:61:b6:51:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  7 19:26:12 2024 GMT
            Not After : Jan 10 20:26:12 2027 GMT
        Subject: CN=44b921f7-65dd-4b33-b399-9d372fb4a9e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:59:0f:1e:f1:fc:7f:de:7e:76:72:c4:7c:46:
                    bf:a4:4b:5d:c5:18:ed:af:a4:0f:d9:30:fc:c8:56:
                    2b:4b:6f:22:77:cf:46:bf:e0:ad:d8:87:61:c4:be:
                    a2:0e:92:6b:63:e9:9c:bd:7f:68:ae:a2:80:00:5d:
                    f9:b3:9a:c4:d2:db:ac:f9:4c:da:5c:2c:2e:22:4d:
                    29:37:86:28:e7:20:d9:f6:ad:08:50:db:ec:83:32:
                    fc:e4:ec:f2:7e:62:bb:02:bc:df:fe:6e:5d:82:0e:
                    14:8b:da:76:57:9b:6b:ff:7d:32:c6:03:f4:43:b7:
                    6a:dd:dd:02:1b:80:10:0f:dd:75:bb:cb:0c:22:6d:
                    1b:dd:8f:bd:5d:4d:08:13:5e:7f:67:51:1d:38:e0:
                    e2:9c:3a:d1:a6:f8:01:a1:af:0d:dd:d7:5c:32:02:
                    27:61:89:3c:f0:82:33:a8:22:c1:0e:f6:fe:5a:0a:
                    f8:45:7a:ba:4d:12:be:d4:e1:54:e2:8c:30:42:f3:
                    21:11:f8:34:aa:17:81:0e:ac:80:55:59:14:a3:57:
                    56:58:9e:e9:c2:15:06:e6:10:18:5d:77:17:cd:00:
                    34:25:f2:62:c9:7d:bf:38:2f:dd:f7:77:92:4a:53:
                    85:61:7d:16:11:1a:2d:5e:7e:d3:68:11:a6:d2:95:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CF:CB:83:53:E0:39:AE:EC:3E:6F:8F:1D:78:2C:52:51:F1:4B:AC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44b921f7-65dd-4b33-b399-9d372fb4a9e5/44b921f7-65dd-4b33-b399-9d372fb4a9e5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f2:38:14:58:4e:02:0b:df:94:9c:1c:9d:a8:1c:41:4c:03:
         df:34:21:d2:5c:7f:34:46:8f:04:c7:90:38:92:04:5d:99:86:
         37:85:a8:38:db:1b:e6:0b:67:36:1d:d2:74:e6:cd:f7:1c:2a:
         b2:e5:8e:12:4f:5c:54:bd:06:b2:ad:20:f2:3d:e0:d7:fe:8e:
         f2:16:35:3f:37:6b:03:fe:77:a7:7c:d6:d8:cb:c4:f2:b0:9f:
         c5:9d:79:12:6c:b1:e7:0c:45:06:ed:6b:d1:7e:aa:2c:35:28:
         0f:3f:be:b1:46:7b:8f:5f:b3:c2:2a:d1:70:02:5b:68:5d:e2:
         af:83:2f:32:14:c1:ea:69:3d:2c:32:8f:71:96:2b:41:fe:fb:
         db:90:17:c0:40:59:3e:fd:3b:51:a0:e2:72:1c:b7:43:b5:7a:
         03:6b:55:06:47:01:35:c4:71:4c:e7:77:e3:f5:fe:da:8a:5d:
         fd:02:2e:8c:15:75:fb:33:3c:80:de:26:49:50:95:2b:73:4a:
         92:de:f5:8b:e9:64:14:fc:11:5e:43:e4:0e:ea:be:e6:35:05:
         e5:1f:66:9c:9f:61:96:a0:78:f9:82:04:ce:17:fe:ce:a1:b0:
         3b:7b:50:f4:4a:26:c0:60:a9:6a:ed:d1:1c:46:44:16:f3:3d:
         16:34:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----