Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer
File:                     6c19ecdd-eda4-4041-9b92-0ac7a99fc631.cer (raw, json)
Hash identifier:          w4xS0U08aMnl6HMxXMkAhulHY6TeH8bba5K7wdL0mmI=
Subject key identifier:   E2:16:05:3D:59:79:3C:06:9F:1F:5D:37:57:BF:DF:69:62:35:DD:0E
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847CD6A74F11910162DA0F21380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Nov 2024 17:15:10 +0000
Certificate not after:    Wed 10 Feb 2027 17:15:10 +0000
Subordinate resources:    IP: 198.169.136.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:6a:74:f1:19:10:16:2d:a0:f2:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  7 17:15:10 2024 GMT
            Not After : Feb 10 17:15:10 2027 GMT
        Subject: CN=6c19ecdd-eda4-4041-9b92-0ac7a99fc631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:6c:c5:e2:ce:c5:2d:df:ff:ff:3a:0f:71:
                    04:aa:ce:b1:27:41:5d:40:be:58:ae:09:42:33:f7:
                    f7:3e:af:1f:8e:5a:b8:a6:06:70:aa:5b:be:d2:24:
                    21:fb:3d:33:21:87:2b:9b:dd:cf:58:3f:03:28:ec:
                    7c:b5:31:be:53:07:a0:57:f3:18:47:4b:3b:14:ab:
                    5f:84:c1:46:b1:8e:d0:ef:fd:0f:c4:fd:f4:6f:3d:
                    01:f6:1d:ac:01:eb:ea:52:f6:bd:99:84:80:80:e3:
                    2d:0c:d8:cc:c1:71:54:af:19:dc:aa:32:83:3f:16:
                    23:3b:4a:2b:1a:74:f8:bb:8d:64:fc:6a:63:17:b0:
                    28:41:0d:8e:9a:d7:ac:0b:f2:70:b3:d4:11:0b:f0:
                    5a:6a:f4:9c:9f:e6:b2:4a:7a:92:07:18:ef:f1:36:
                    6b:46:63:c7:0a:73:d5:e6:92:92:a3:c0:9e:93:6e:
                    83:06:33:e9:45:a2:d7:43:c0:4c:01:e4:35:25:6c:
                    e1:26:16:55:c2:03:cd:7d:da:e4:53:d8:4e:51:bf:
                    28:2c:05:76:04:ac:a2:cb:77:92:82:d5:ef:3e:4b:
                    8f:62:b8:d5:e4:d5:0c:b7:e8:3b:cc:ae:9f:aa:f4:
                    db:b5:f9:44:5e:41:4b:f3:f9:7c:92:aa:9c:7b:2f:
                    da:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:16:05:3D:59:79:3C:06:9F:1F:5D:37:57:BF:DF:69:62:35:DD:0E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6c19ecdd-eda4-4041-9b92-0ac7a99fc631/6c19ecdd-eda4-4041-9b92-0ac7a99fc631.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.169.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:67:5c:93:e0:46:55:10:4f:b9:83:80:da:39:4a:fc:48:
         ea:5c:1f:11:9b:5a:e3:bb:bb:3f:42:12:d0:6c:a8:d9:10:11:
         c0:50:01:1e:2f:b2:20:ad:cc:70:17:49:06:e8:fd:6c:b7:6c:
         1f:cf:4c:d8:36:54:7f:be:e1:0c:62:fe:c1:78:3f:a4:c6:b1:
         f4:20:ad:7e:1c:b2:70:30:42:b2:f7:a5:4d:8a:ee:b1:56:aa:
         c9:ea:b2:1d:92:3a:54:b5:4b:03:22:fb:d6:64:12:56:c4:ca:
         4c:65:96:59:75:82:1e:e3:c5:61:ec:79:a9:55:db:73:13:df:
         34:cf:31:ff:f5:8c:64:08:4b:ed:51:ea:27:28:d8:32:0c:36:
         02:f2:b7:35:32:a4:db:a5:1c:f4:d3:48:24:6b:a7:e5:17:e0:
         c0:3a:98:1c:e4:3a:3a:26:95:47:47:78:0d:22:59:82:2f:e4:
         08:9f:9b:74:25:9e:93:34:1a:cd:f0:f9:bd:a1:ca:68:06:2e:
         3d:1a:ec:c6:b6:ea:dd:ca:9a:63:2f:82:3a:0c:07:3b:d7:29:
         4d:36:2a:a1:72:8b:43:bf:fd:ac:94:c3:36:ed:e2:85:2e:09:
         88:e7:86:2a:68:c6:8f:8a:92:b5:87:13:53:83:2b:1e:06:b4:
         7a:de:af:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----