Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b.cer
File:                     6935e5f0-57c3-49af-bbca-0feb72f3c19b.cer (raw, json)
Hash identifier:          Dd2eARCloSXBmcRBX1oYpr64h0Q/T1sP2IYZJU65sSQ=
Subject key identifier:   6B:A9:25:AB:2E:3C:50:09:B3:A3:40:A3:2A:47:41:4D:25:59:1C:97
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847826B91725AB85F830E510B20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/6935e5f0-57c3-49af-bbca-0feb72f3c19b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 11 Oct 2024 20:31:46 +0000
Certificate not after:    Thu 14 Jan 2027 21:31:46 +0000
Subordinate resources:    IP: 205.235.208.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:6b:91:72:5a:b8:5f:83:0e:51:0b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 11 20:31:46 2024 GMT
            Not After : Jan 14 21:31:46 2027 GMT
        Subject: CN=6935e5f0-57c3-49af-bbca-0feb72f3c19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f8:8c:a6:d0:1a:43:15:5e:f5:a9:9a:d2:c8:
                    85:49:f8:8b:e0:0a:2c:04:cd:02:5c:ac:d9:ce:e0:
                    f8:3e:d3:e3:ae:47:19:fa:10:cd:2d:00:50:7f:c4:
                    d9:39:ed:a4:e4:ac:85:f7:61:18:70:e4:f5:a0:93:
                    e9:78:d1:58:56:b7:56:d2:05:00:b9:88:7c:5a:d4:
                    3b:ac:bf:54:b7:8d:f9:d1:53:05:49:d8:cd:4c:12:
                    e1:d0:1f:d4:9a:fa:b7:a0:5f:bd:7b:76:9b:e6:f0:
                    43:86:44:51:56:c7:4c:8c:40:d4:14:89:2d:12:80:
                    e5:50:a8:f1:fc:f5:58:05:41:01:74:54:9f:82:b9:
                    b7:02:39:a5:67:c1:72:47:87:65:06:4e:fe:39:d0:
                    9d:f1:b3:bf:39:07:6b:5b:c5:06:79:0d:0a:e8:d6:
                    b9:d5:fb:02:cf:d7:31:03:90:fc:f0:1e:f3:44:fb:
                    36:2f:37:e9:c4:3a:51:1b:53:f8:79:88:14:2c:6a:
                    ea:8c:65:a1:87:fe:d2:56:fc:6a:96:c3:a6:8d:6f:
                    66:e9:61:8b:5f:f0:aa:54:5c:65:ca:77:a0:43:60:
                    01:b6:76:b8:be:fe:60:c9:dc:72:3f:40:20:4d:8e:
                    ad:91:ff:24:06:c5:7a:14:f6:af:81:91:a6:39:11:
                    0a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A9:25:AB:2E:3C:50:09:B3:A3:40:A3:2A:47:41:4D:25:59:1C:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6935e5f0-57c3-49af-bbca-0feb72f3c19b/6935e5f0-57c3-49af-bbca-0feb72f3c19b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.235.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b3:f4:c9:a0:85:84:1c:d4:df:0c:33:f2:22:f5:d0:40:ca:
         3a:36:ff:23:0c:8f:09:ea:8b:73:7d:83:12:2b:c6:de:4d:24:
         4d:41:bb:df:23:14:42:79:4d:9a:11:bf:1b:1f:a1:2f:64:6d:
         63:c5:e8:be:a7:16:41:80:42:c1:ce:eb:e4:b3:13:d0:21:a7:
         79:9e:3c:a8:c6:16:5a:fb:4f:03:03:2b:7f:a6:69:ee:da:ed:
         5f:96:f9:2f:09:8f:3a:b1:a2:9e:70:ba:06:98:29:b5:7e:61:
         d3:eb:44:61:c8:73:9f:7c:0c:5c:74:d2:19:0a:c1:e9:0a:92:
         db:cf:79:9f:9f:9c:33:53:f6:9d:2e:d7:a8:ae:bd:40:6e:ea:
         1c:28:f8:66:a4:a7:45:3f:58:ee:ad:30:32:cd:80:e9:27:f8:
         4b:1d:34:dc:74:51:fd:69:f0:08:6b:d1:79:0e:29:e6:e5:74:
         81:ea:b5:b5:bb:0f:9c:8a:70:a2:fc:ad:1b:34:31:f0:bb:0f:
         a8:f2:f9:89:a1:67:e2:10:c2:c3:89:ef:8f:1d:57:06:68:84:
         36:9b:1d:32:56:6c:87:7b:e3:2b:c0:6f:27:39:b4:12:d9:9a:
         6e:7c:51:dc:74:4a:a0:bf:aa:e4:8a:3d:4e:9e:2e:2a:05:ed:
         f8:5c:c0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----