Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer
File:                     565e1435-ee87-4f33-bcd9-612cce56acf5.cer (raw, json)
Hash identifier:          j+j9YklXeRzyUJMBNMHNLK36Z3TCWiTCadtQMaeR3kA=
Subject key identifier:   62:D6:53:BD:F9:F2:45:96:B8:5D:5D:CA:26:80:99:A2:DE:C4:A9:CF
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847D6A78B7CA4C22EDBCDB62F32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Nov 2024 00:40:31 +0000
Certificate not after:    Sun 14 Feb 2027 00:40:31 +0000
Subordinate resources:    AS: 398846
                          IP: 2605:ae40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d6:a7:8b:7c:a4:c2:2e:db:cd:b6:2f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 11 00:40:31 2024 GMT
            Not After : Feb 14 00:40:31 2027 GMT
        Subject: CN=565e1435-ee87-4f33-bcd9-612cce56acf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:28:04:95:86:41:fd:9d:4e:f0:be:49:1a:13:
                    cb:0f:f2:d8:c2:09:25:4a:17:ce:0f:7e:3e:7f:34:
                    ea:85:b0:9d:53:19:6e:9d:41:4c:5c:ad:a0:54:50:
                    b2:5a:68:9f:92:f1:58:59:0e:55:31:67:c2:da:08:
                    d1:ee:90:25:93:25:a3:33:d8:e4:13:2e:fb:a6:47:
                    7c:19:56:a5:79:46:e6:20:70:75:7a:2a:13:a0:55:
                    49:6a:2c:77:37:05:1a:f9:29:b5:14:dc:09:15:0b:
                    61:7e:5f:c6:98:26:f9:24:ea:db:fc:6c:19:87:8f:
                    b5:87:02:84:1d:ff:97:2c:c4:84:0f:18:b0:a1:2c:
                    8e:d1:d3:e3:37:83:0f:7c:cf:34:29:36:e3:b1:94:
                    51:8d:6e:78:35:61:69:09:31:5d:36:b2:c5:e5:e4:
                    f6:4b:ca:8f:d1:61:39:ac:21:c8:d0:15:a4:6b:0b:
                    32:7f:e5:52:da:79:2f:ae:00:b9:21:80:4f:c6:84:
                    21:a5:2d:f8:1b:33:3e:54:7f:4c:0b:c7:cd:5b:56:
                    89:1a:2e:73:91:51:62:3a:ab:d7:a1:19:a3:38:99:
                    64:73:ec:33:49:d9:a0:37:ae:82:b5:d9:0b:ef:b5:
                    56:13:35:a7:a8:20:3b:73:84:1f:06:e0:2b:49:29:
                    1a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D6:53:BD:F9:F2:45:96:B8:5D:5D:CA:26:80:99:A2:DE:C4:A9:CF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ae40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398846

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e4:8b:54:76:08:78:56:b5:0e:51:38:49:3d:fa:d2:0c:96:
         05:10:e4:f3:31:5b:75:52:97:41:37:d0:81:7d:7f:c2:63:1f:
         8c:29:1b:a0:95:ba:5e:54:c0:50:13:20:4f:b3:55:3f:de:92:
         d7:1c:71:ae:2b:56:60:f3:59:26:0d:dc:30:b5:07:39:0e:82:
         a9:30:6d:d9:fc:35:d3:fc:23:29:9c:42:72:32:18:33:45:a6:
         4e:a3:15:92:b6:89:47:32:e4:85:c4:bf:30:ff:89:3f:33:d5:
         40:1e:f5:d8:bd:11:21:51:cb:56:72:66:10:87:bc:32:0c:2a:
         fa:5c:b2:85:d9:0a:78:50:d2:3e:47:f3:7a:fb:6f:fc:80:43:
         27:7e:f2:fe:9d:b2:1d:81:86:9d:74:bf:5b:f0:61:32:dd:ab:
         38:34:ec:5f:3a:d8:69:f2:f7:fa:65:8b:14:af:c6:99:4b:9f:
         10:90:7b:d1:80:55:45:a6:cd:da:41:59:b0:18:0f:c5:0a:6c:
         46:cf:ec:5e:80:a2:47:e3:14:c0:aa:e9:da:2f:09:78:34:9d:
         02:39:60:c5:f8:5d:97:ea:15:13:59:c5:49:3e:0b:8e:36:12:
         90:c2:3b:48:73:a1:dd:ff:60:ba:c4:44:db:8d:2c:ed:20:6a:
         d8:9a:d6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----