Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c.cer
File:                     61fc01db-d7e6-47d1-ad4d-7612a325805c.cer (raw, json)
Hash identifier:          hk6zEr71H4xN5cOmohFKqtFH3O8UFJIWKGiQyJApjtk=
Subject key identifier:   81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847CE6439EFC1A040DA98E67880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 08 Nov 2024 01:38:25 +0000
Certificate not after:    Thu 11 Feb 2027 01:38:25 +0000
Subordinate resources:    AS: 54981
                          IP: 2602:fa16::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:64:39:ef:c1:a0:40:da:98:e6:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  8 01:38:25 2024 GMT
            Not After : Feb 11 01:38:25 2027 GMT
        Subject: CN=61fc01db-d7e6-47d1-ad4d-7612a325805c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8e:cd:f3:b4:48:4a:e4:82:58:8c:c4:63:cb:
                    dd:2c:fd:36:c4:92:33:e0:60:b8:56:27:42:41:d9:
                    af:37:18:6e:48:34:c8:5b:15:69:9b:00:0d:43:b4:
                    e8:0c:4a:a0:1e:72:3f:e2:88:f0:3c:13:b7:4e:df:
                    c8:80:1a:89:a4:60:2f:59:e0:ec:c5:b8:5b:ea:9e:
                    ee:e5:26:65:64:01:bf:57:67:98:4a:32:4f:58:52:
                    5e:a5:9f:61:ec:e1:76:3e:1e:71:2f:a6:90:ba:4c:
                    51:ba:b5:5f:07:ef:82:91:59:6a:8c:70:0a:6e:71:
                    ce:a5:fe:b6:6b:f3:a5:f7:2a:f7:32:d4:00:b5:8a:
                    be:c0:be:5d:f5:da:50:ef:d7:0c:81:cc:30:b1:a8:
                    ae:9c:2e:7d:ee:34:81:a4:e3:22:21:9f:9d:6f:c4:
                    f7:d0:60:39:4d:30:b7:87:1f:fc:e9:d0:e0:a8:3b:
                    1d:4e:f2:3d:d5:18:e4:9a:df:90:81:0d:b1:8b:43:
                    b5:b7:90:51:b9:91:66:9a:de:ef:36:f7:eb:03:b5:
                    80:9e:2c:41:6e:6b:32:99:2a:c6:1d:6e:4b:a4:1e:
                    98:0f:9c:eb:3b:2c:f3:02:5a:2e:52:62:ad:ae:59:
                    d3:4c:e0:4d:f9:65:d1:63:c1:2e:e5:a4:7c:8f:7c:
                    54:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9B:BF:14:32:95:70:2E:81:F7:FD:18:9D:9E:A9:69:57:DB:50:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61fc01db-d7e6-47d1-ad4d-7612a325805c/61fc01db-d7e6-47d1-ad4d-7612a325805c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa16::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54981

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:f3:40:30:85:8f:0d:a3:ae:50:98:4b:2d:ba:e7:ff:7f:
         1e:95:67:a5:54:16:b8:35:2a:f7:8c:83:4e:81:da:dc:c1:9e:
         b6:b1:da:83:9d:3b:bf:f4:e1:44:37:3a:b6:cb:cb:61:f6:09:
         7c:86:3b:98:54:5a:e9:f7:af:8d:bc:37:9b:27:62:5c:2e:46:
         12:de:8b:4e:41:d7:b9:b0:fd:b8:c7:44:a3:b4:ff:94:bb:07:
         97:6d:01:2b:82:8a:9a:62:c4:3b:04:f5:f3:40:a7:5f:72:01:
         0f:a3:46:0d:e1:7c:f4:1f:5a:ba:1b:65:6f:0b:79:3c:2d:6d:
         00:ff:e1:b4:fc:79:bd:24:a3:07:1a:40:b1:76:b7:56:bf:fd:
         17:05:b9:c7:d4:c9:4c:44:89:63:38:65:e1:2c:f5:f7:07:4b:
         15:64:b7:98:df:aa:7c:99:7f:00:c6:e5:64:8b:54:1a:ee:b0:
         3f:e9:f2:14:b8:22:21:5d:c2:50:23:ac:47:96:ec:10:42:66:
         78:9d:a5:b8:49:3c:48:cf:da:2b:50:26:13:01:fc:7b:52:b3:
         94:d3:a2:e2:e2:0b:69:cd:b8:c2:fb:70:7c:d2:b2:b5:c1:01:
         f5:82:93:90:ce:b8:11:32:4b:36:12:67:db:e5:30:90:fa:9e:
         2e:17:1e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----