Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284.cer
File:                     5c075a41-a878-494c-804f-5abe30d80284.cer (raw, json)
Hash identifier:          odtBHyDJA+5YWI/tw+CU3fwSrRaOWjfPpeEI401xr4g=
Subject key identifier:   EA:E3:66:50:14:7E:B9:8B:6D:53:74:2D:52:02:15:62:C3:EA:8E:15
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846E365E3CD952C535EFDE60B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/5c075a41-a878-494c-804f-5abe30d80284.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Aug 2024 21:26:48 +0000
Certificate not after:    Wed 18 Nov 2026 22:26:48 +0000
Subordinate resources:    IP: 2607:cd40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:65:e3:cd:95:2c:53:5e:fd:e6:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 15 21:26:48 2024 GMT
            Not After : Nov 18 22:26:48 2026 GMT
        Subject: CN=5c075a41-a878-494c-804f-5abe30d80284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:fb:f0:c4:07:b4:f7:dd:fc:5f:29:79:cb:
                    4b:a0:5c:7b:40:8c:ae:df:72:64:59:6e:d2:89:1d:
                    5a:a6:bd:50:65:6c:f0:44:15:6a:70:af:a4:09:21:
                    11:f9:48:4d:52:c7:4f:e4:a6:e1:b9:37:ed:e0:2a:
                    8d:33:61:3e:6b:2e:58:e0:1a:08:77:22:87:29:86:
                    92:2e:c6:a3:98:c6:95:ce:fa:be:12:85:58:c4:4c:
                    5e:06:62:08:f6:3e:4e:70:a4:ca:94:89:21:19:e8:
                    36:e4:5c:21:03:30:12:4b:28:4a:54:4b:ee:66:87:
                    c3:e9:0c:dd:37:75:67:1a:41:27:8c:88:cb:81:fb:
                    7b:55:74:e9:3a:a4:f9:2b:12:a8:f1:9a:c1:48:72:
                    f1:99:7d:f3:99:26:62:bb:28:ea:0f:ce:75:85:cd:
                    73:94:94:09:d7:9b:3c:7a:24:00:87:37:15:21:69:
                    93:5f:64:bc:2f:dc:e5:a0:f0:4c:9d:b4:6e:ed:8d:
                    e3:b0:70:86:36:9b:b8:03:0a:7b:fd:66:20:07:d6:
                    2d:e5:1e:ed:77:23:28:0b:1b:63:96:07:0e:9e:7a:
                    7b:ea:df:f9:e1:ef:f7:72:ab:81:ce:26:56:7f:aa:
                    e8:e0:c4:81:07:8a:50:92:8f:61:5f:09:ac:33:f9:
                    3e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E3:66:50:14:7E:B9:8B:6D:53:74:2D:52:02:15:62:C3:EA:8E:15
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5c075a41-a878-494c-804f-5abe30d80284/5c075a41-a878-494c-804f-5abe30d80284.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:cd40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a9:9f:b3:ef:72:9d:41:dd:ca:1e:ed:5b:b8:90:7f:db:bc:
         7c:1b:39:ad:fb:a9:8f:8b:9f:b7:98:28:2c:8f:5f:85:a2:98:
         3d:3b:cc:13:b5:2d:e0:8b:81:d4:07:08:c3:df:6d:65:df:da:
         11:c8:b7:af:25:74:62:f3:e9:b0:f5:34:00:fc:6d:cc:7e:dc:
         5f:a1:6d:30:66:dd:74:ca:64:20:09:62:1c:35:f2:40:25:3e:
         5e:59:5f:7e:35:63:d4:bc:f5:1f:2f:c2:83:ef:36:00:95:e9:
         e8:f4:cc:98:36:4f:75:1b:0e:39:63:5e:60:d4:78:0a:f9:d1:
         58:f7:9b:35:d4:9e:0a:76:7f:39:1a:b7:26:ae:a6:5d:93:d9:
         1c:6c:3c:8d:a0:d0:13:05:85:44:89:5e:48:19:74:ba:5d:f6:
         d5:f9:27:6d:a5:d6:b6:86:6e:d5:a1:5b:cb:8c:f9:e9:e1:8f:
         51:39:3a:aa:f5:a6:67:c7:54:9c:54:1f:38:43:2b:28:e0:55:
         ae:9d:82:df:c4:84:b8:e4:c2:9b:00:ea:67:1d:98:61:5c:46:
         f2:e9:81:bf:b2:b5:7f:75:d8:4a:4b:81:8e:4a:0f:a4:b6:f3:
         2b:ef:91:d6:8a:9e:c5:f0:fb:de:dc:f2:d7:c7:4d:69:7f:f6:
         66:57:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----