Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer
File:                     5cafbd32-7d6e-4297-9ac5-dc120aaa97da.cer (raw, json)
Hash identifier:          zPKoLRR003NdbeLBOOHbZzOYnwolWc0uyxgmYMPlEaY=
Subject key identifier:   04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846DAB52259880C38CA27845E40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 12 Aug 2024 18:44:12 +0000
Certificate not after:    Sun 15 Nov 2026 19:44:12 +0000
Subordinate resources:    AS: 32507
                          AS: 399999
                          IP: 23.186.120.0/24
                          IP: 104.247.98.0/24
                          IP: 2602:f84c::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:da:b5:22:59:88:0c:38:ca:27:84:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 12 18:44:12 2024 GMT
            Not After : Nov 15 19:44:12 2026 GMT
        Subject: CN=5cafbd32-7d6e-4297-9ac5-dc120aaa97da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:99:68:68:0e:7c:40:6b:01:61:67:b8:d3:ca:
                    65:50:46:7b:38:58:6a:eb:6b:f7:27:85:08:ae:8d:
                    31:7e:bf:12:2f:81:50:af:29:56:b1:63:72:65:4e:
                    06:13:fe:9b:fe:5a:74:bb:c4:12:b8:7e:64:09:7f:
                    ef:54:2a:82:ae:f5:21:cb:2f:1d:0b:0a:1d:32:1d:
                    38:62:25:6e:32:b1:ae:79:00:52:94:29:7b:ff:d6:
                    0b:1d:11:9c:af:06:9f:a8:0b:cd:00:ab:4f:c8:4d:
                    c6:f2:38:4a:7f:05:7d:bd:ff:b9:70:60:a0:02:11:
                    ee:bd:74:c4:4f:d0:5b:5f:26:b0:fb:5c:15:d0:1a:
                    48:4f:60:10:3b:b6:30:4d:27:fb:97:17:dc:e6:44:
                    a5:a0:22:0a:3a:44:19:f9:f5:19:00:0d:1a:a5:be:
                    ef:db:fa:f9:84:a5:cf:b9:ae:05:49:f6:48:36:24:
                    70:50:2f:ba:8b:05:6d:0d:98:c4:71:04:ea:3b:db:
                    6e:35:9a:4f:00:d5:cc:ed:60:7e:b0:5b:31:ba:f4:
                    9b:f6:38:79:1f:7a:99:b4:88:27:19:92:46:43:7d:
                    13:7b:dd:4b:56:8f:4b:ec:60:b0:3c:1d:61:a0:b8:
                    46:a6:dc:ee:2a:6d:fb:45:02:6c:9b:61:b6:1f:a5:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0D:7B:D5:83:B8:8B:76:6F:49:88:24:4C:50:70:8B:4C:B7:87:55
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5cafbd32-7d6e-4297-9ac5-dc120aaa97da/5cafbd32-7d6e-4297-9ac5-dc120aaa97da.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.120.0/24
                  104.247.98.0/24
                IPv6:
                  2602:f84c::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32507
                  399999

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ec:fd:e5:69:53:17:d8:b2:ee:ff:cf:a1:83:c5:ac:94:f9:
         d2:d6:6a:e9:62:e9:7d:80:6e:53:34:53:dc:54:93:7b:94:69:
         5e:59:be:92:a9:3c:72:fb:b8:61:87:6f:6f:04:75:5c:17:c9:
         4d:33:9b:9d:2c:47:91:f2:40:6e:de:f3:70:75:71:79:8c:3f:
         4b:37:ab:89:6a:37:95:b1:5c:14:07:d1:93:a9:55:0b:6b:ad:
         8e:15:57:f0:01:63:d5:7d:6c:1d:aa:40:69:70:e2:e3:bc:6f:
         52:ce:d7:92:17:33:72:56:60:85:04:9e:0f:09:db:f9:10:8b:
         61:ef:9b:70:03:0a:12:f6:45:dd:4f:54:39:41:96:1f:bc:14:
         2b:94:e9:15:9d:20:ad:72:fd:79:9e:5e:d9:38:56:c1:04:45:
         ea:58:1c:0b:a9:ca:19:b3:17:c3:ae:a6:99:6e:0a:80:f5:67:
         69:50:85:ab:f2:e7:07:46:88:0e:26:60:ea:52:90:e1:e1:45:
         70:7e:c8:9b:df:44:ca:ac:a6:d0:ff:83:3b:88:48:8d:05:7c:
         f3:d0:a3:39:e9:1c:ed:c9:41:8f:c0:41:f1:c6:aa:7f:e7:eb:
         7e:a0:42:7d:f6:cd:8c:83:88:68:7f:d1:58:80:cc:36:95:e1:
         df:4e:e1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----