Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd.cer
File:                     545b8526-3b5a-46c2-b925-6c40139289cd.cer (raw, json)
Hash identifier:          //SetHLNAcSJuVYDTPoN//LnjZ/q+ZJ9f4Pom0I+OzA=
Subject key identifier:   9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584717912183717DE2A40B4C6280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 03 Sep 2024 13:55:58 +0000
Certificate not after:    Mon 07 Dec 2026 14:55:58 +0000
Subordinate resources:    AS: 13383

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:91:21:83:71:7d:e2:a4:0b:4c:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep  3 13:55:58 2024 GMT
            Not After : Dec  7 14:55:58 2026 GMT
        Subject: CN=545b8526-3b5a-46c2-b925-6c40139289cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:35:23:23:7f:8f:43:ca:e2:17:b0:36:6d:ce:
                    e7:ef:dc:cc:dd:6e:78:c3:6f:89:e9:08:53:13:ec:
                    f2:52:3b:c5:5e:ec:4a:4b:6a:da:11:21:5d:9d:87:
                    58:28:58:88:7a:5a:7a:d3:fe:e3:e0:a1:16:94:9c:
                    70:cb:60:fe:57:ab:87:e3:a5:aa:ea:a7:db:57:2a:
                    b1:78:18:cd:2e:13:0a:9f:be:10:35:7e:f3:28:27:
                    6b:e2:c4:e4:bd:3e:61:82:16:e2:95:1b:6e:e5:a6:
                    7e:f8:df:f6:a0:47:db:9f:47:10:6c:60:16:59:dd:
                    8c:02:47:dd:21:13:8c:f3:3d:da:71:ad:f0:7d:97:
                    a5:1c:22:69:2a:f0:e3:ed:e6:3c:e6:58:99:aa:58:
                    b7:12:f4:38:9d:c9:51:8b:03:4e:27:1a:a4:fd:61:
                    b0:fa:41:cb:ec:93:b4:fc:3c:af:86:2f:5c:58:2c:
                    62:81:b8:76:f2:67:69:13:13:52:b2:63:b9:f2:28:
                    20:58:02:6c:d9:43:82:4f:ab:92:d1:a2:2e:27:6d:
                    e3:38:df:e3:9a:35:20:b2:97:24:b2:fb:19:39:99:
                    8c:0e:77:ee:3e:54:4e:c2:82:a1:2e:33:d0:e6:c2:
                    cd:f0:3a:3d:62:61:7f:87:1d:5d:e3:b6:4d:6e:3f:
                    43:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:71:FB:D5:6B:E1:46:BD:44:91:34:E8:4F:35:4B:D1:12:57:A3:58
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/545b8526-3b5a-46c2-b925-6c40139289cd/545b8526-3b5a-46c2-b925-6c40139289cd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13383

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:33:34:7d:d4:54:5a:72:25:34:4e:2a:00:e4:9e:0a:fc:58:
         04:95:75:83:09:0f:59:c8:f2:9f:b6:bc:3c:db:c2:00:d5:40:
         1d:2d:e9:f8:f4:05:ec:18:5c:b3:b7:fe:52:bb:dd:f7:59:56:
         35:7b:14:ab:82:64:3f:22:61:97:a6:cd:95:95:8a:9c:d7:5d:
         4b:41:f5:80:d6:c9:71:c4:ef:ef:79:57:e7:f9:48:28:fd:23:
         9a:18:ae:53:7e:93:2a:84:2e:02:5f:26:6a:18:8b:6f:ac:ac:
         75:06:1b:39:e0:d9:7a:c9:7f:98:12:59:75:2a:51:61:ec:64:
         4c:d4:98:fd:0a:ed:67:18:bc:f9:59:cc:4c:0b:40:e4:6f:85:
         d8:73:39:cb:1e:fb:19:86:8f:ac:a4:71:67:fc:c0:fb:ef:85:
         9d:f1:1a:8e:ad:1c:ce:6b:43:ad:7a:d4:9e:86:61:54:a9:47:
         91:d7:03:5b:1b:7c:ec:97:9a:c5:3b:5e:ca:f0:ec:b5:9c:34:
         04:f7:a1:40:9d:0c:4c:af:bc:f5:50:b0:12:ac:12:b7:a9:84:
         37:1c:43:47:c5:a2:c4:0e:f7:83:28:d5:6a:df:3c:74:1e:1e:
         84:b5:f9:6b:c9:77:09:c0:e6:0a:6e:a2:6d:f8:fb:4c:19:91:
         ef:7a:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----