Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318.cer
File:                     61b23514-b37d-4216-9f76-1988ace05318.cer (raw, json)
Hash identifier:          BjFL98zdeLGMO3RzmC8O6PHDIiYa/RWZEKcmbLCQec0=
Subject key identifier:   46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847F2DA90B225474A77C796D480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Nov 2024 03:05:57 +0000
Certificate not after:    Wed 24 Feb 2027 03:05:57 +0000
Subordinate resources:    IP: 199.4.162.0/23
                          IP: 2602:80f:2000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:da:90:b2:25:47:4a:77:c7:96:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 21 03:05:57 2024 GMT
            Not After : Feb 24 03:05:57 2027 GMT
        Subject: CN=61b23514-b37d-4216-9f76-1988ace05318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:20:63:90:9b:59:3c:00:6d:91:9e:c2:63:27:
                    d3:2a:ee:f9:88:38:d4:eb:2f:50:8b:22:50:15:2a:
                    ee:75:ef:f8:79:49:45:f1:bc:29:6a:09:26:f8:23:
                    38:75:0a:18:1f:47:a7:5c:fa:28:e1:38:f0:8c:3b:
                    98:81:82:b9:0c:af:a7:54:9a:a1:62:ba:06:8d:be:
                    75:dd:fc:0b:64:c9:9f:11:68:69:35:a4:86:b8:f8:
                    68:45:45:f8:f2:71:a5:50:01:98:5c:79:31:23:30:
                    72:90:cf:b2:27:5c:02:59:6c:b8:38:82:76:ec:f5:
                    b9:14:2a:79:4e:45:5b:9e:7c:58:8b:e2:b6:53:7b:
                    83:22:ba:9d:bf:7a:08:73:55:c3:f7:7f:2d:08:05:
                    87:04:d1:8e:9f:6c:0f:4c:56:db:92:6f:70:47:f1:
                    08:94:51:a2:7a:b6:c0:aa:a4:ef:7d:3f:b0:7c:f1:
                    ed:21:38:95:27:26:1e:b6:7e:d0:7d:00:b3:d8:ef:
                    4a:8e:77:c2:5f:89:ef:fa:50:5c:d9:e0:8b:8e:6a:
                    a7:cc:3d:48:71:3f:d2:65:ee:ad:95:6e:a3:16:6a:
                    b4:0c:80:b6:41:2f:0d:a8:ba:99:32:a3:45:7e:c1:
                    42:d5:9b:fc:71:1b:06:7f:62:40:53:11:e1:ff:55:
                    67:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7E:47:E0:E0:2C:0D:3F:E8:AB:11:77:4B:82:FE:27:2E:34:6E:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61b23514-b37d-4216-9f76-1988ace05318/61b23514-b37d-4216-9f76-1988ace05318.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.4.162.0/23
                IPv6:
                  2602:80f:2000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:51:d8:3b:aa:de:1d:d1:c9:57:12:1a:e1:53:75:fd:8e:be:
         cc:56:9a:8a:f4:6c:10:2d:9d:1e:40:d2:3b:9d:07:f0:ce:8a:
         57:e1:7e:99:da:c9:93:47:37:02:7d:2a:58:35:2a:60:54:3e:
         17:49:c3:95:a0:de:ac:89:32:57:9c:8e:c1:12:93:db:45:c8:
         35:69:30:7c:45:d9:e0:72:24:fc:a0:23:46:0c:11:7d:17:fa:
         48:f2:4f:ba:d5:83:6d:1d:72:89:cd:88:c0:7d:68:16:7f:59:
         8f:9a:14:7f:c5:cc:d4:93:84:16:99:a3:6c:fd:b4:87:16:ae:
         07:72:97:a7:b6:c1:f8:bb:a1:a6:8a:4d:b5:13:16:25:8a:40:
         15:e5:3f:5f:08:e5:04:6e:90:e6:2b:3d:f0:47:f8:2d:5d:76:
         45:5c:ae:6f:e4:05:3b:4c:3f:60:4f:b3:d4:70:12:98:8d:e0:
         b8:62:5e:87:4d:28:09:e5:8f:2b:c2:12:f4:ec:34:3a:8b:19:
         17:ab:4d:c3:c4:2f:10:53:94:c8:d1:ef:b4:7c:37:6c:e7:bf:
         15:b5:7f:bf:ea:64:ec:4d:e9:6a:1c:38:1f:18:f8:9e:f6:bc:
         17:19:a2:9f:1d:f5:dd:c1:c3:a4:2a:65:40:df:04:e9:e8:28:
         3d:ba:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----