Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56.cer
File:                     52719fb1-2762-4690-98c1-ed95cc4b2f56.cer (raw, json)
Hash identifier:          w9YIthzWUg55miQiwLDp8bigjJO4Ir1UNUDOVP8EQpY=
Subject key identifier:   0F:C5:82:FE:6F:02:D4:32:1A:08:30:24:55:C0:55:5A:23:ED:4E:E5
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846D07B74588B771111B3BC4D40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/52719fb1-2762-4690-98c1-ed95cc4b2f56.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Aug 2024 02:49:54 +0000
Certificate not after:    Thu 12 Nov 2026 03:49:54 +0000
Subordinate resources:    AS: 8173
                          IP: 2602:f860::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d0:7b:74:58:8b:77:11:11:b3:bc:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug  9 02:49:54 2024 GMT
            Not After : Nov 12 03:49:54 2026 GMT
        Subject: CN=52719fb1-2762-4690-98c1-ed95cc4b2f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:8e:11:ab:ef:fe:f2:29:41:35:7e:2b:4c:
                    5d:0c:aa:fd:1e:bc:74:a6:43:3d:a4:4f:0e:d2:c0:
                    62:bf:a2:c6:6d:a2:bd:48:f5:be:5a:dd:62:17:69:
                    3d:9a:0c:ef:46:37:00:57:3e:a5:b5:04:9f:ac:35:
                    5b:cd:c6:1b:34:36:44:90:d4:32:3f:5c:fe:f7:5f:
                    ab:4f:13:eb:7b:17:bd:ac:7f:d4:26:71:36:43:61:
                    55:3a:b5:e5:c7:99:bd:eb:16:9c:d4:b5:76:7c:6b:
                    44:fd:ed:37:0a:b9:58:a3:0c:67:61:c2:03:16:c4:
                    3d:8b:6a:8e:44:e9:cd:cc:01:e1:ee:bf:2a:2d:b8:
                    bc:28:8d:22:4c:36:67:f3:43:f6:49:40:41:50:7e:
                    1f:08:f5:ca:76:94:fa:c2:75:a7:11:fd:84:6f:d2:
                    f7:23:5f:e4:4b:a7:6a:a6:6f:8c:0e:a4:db:48:33:
                    11:34:81:e0:59:46:43:8e:a6:19:c8:31:4d:72:8c:
                    87:66:70:64:16:e5:a0:e3:31:65:6c:ab:9b:b8:52:
                    77:3f:b9:6f:23:ca:4c:30:aa:57:92:fc:c7:33:fa:
                    c9:ca:44:c7:a0:40:6b:60:18:ab:a1:56:de:4b:58:
                    a4:e6:c8:65:e9:ce:e4:19:55:3f:b2:09:8e:61:67:
                    ad:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C5:82:FE:6F:02:D4:32:1A:08:30:24:55:C0:55:5A:23:ED:4E:E5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/52719fb1-2762-4690-98c1-ed95cc4b2f56/52719fb1-2762-4690-98c1-ed95cc4b2f56.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f860::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8173

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:14:be:d4:96:85:ee:7e:7e:22:2b:87:1d:59:c0:72:0f:42:
         0f:b8:41:71:23:4f:70:5b:63:70:56:5e:10:fd:f3:b9:a0:a1:
         fa:20:00:da:e9:5d:ac:5a:3c:7e:63:7c:ae:70:fa:29:5c:df:
         e7:44:a9:75:9f:02:d2:6a:db:39:a8:e8:c4:0b:30:52:bb:04:
         cb:7e:35:c8:9b:98:00:16:51:41:6a:0c:dc:96:53:08:21:fa:
         cc:73:59:fc:aa:ca:e3:f4:80:99:50:fb:e8:ca:86:f5:8b:14:
         f3:61:df:13:ff:8d:f9:a5:ef:ad:f5:c1:b7:03:66:1d:59:8e:
         1a:d9:11:39:96:90:28:99:57:95:e9:e7:4e:f5:f6:a4:3d:80:
         83:c1:96:ca:4c:b8:cd:a5:67:c1:ae:e9:7e:20:95:9e:04:0b:
         4c:80:1c:f2:76:87:39:5a:50:a5:2a:24:03:4b:b5:09:1a:d5:
         2c:38:26:9f:70:92:f2:b9:eb:f0:e0:e4:32:ca:81:98:8b:55:
         7e:10:fc:96:9f:5c:95:d7:10:ce:bb:27:2b:83:9d:22:d9:9a:
         96:ff:09:3d:a2:16:47:ca:62:00:0d:d7:5c:4a:b4:e4:e0:bc:
         2b:28:16:b0:b5:4f:eb:17:e5:73:fa:4c:47:46:d1:b2:c1:20:
         e3:ca:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----