Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
File:                     6cc31951-8581-4fc7-a691-41d9e992a7cc.cer (raw, json)
Hash identifier:          EcTMEdnnmKIm+SgIFThoPDnzaOFWPJmbTEGXMMlypHU=
Subject key identifier:   D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584763AB3A63164A40EE8205B600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 30 Sep 2024 20:09:59 +0000
Certificate not after:    Sun 03 Jan 2027 21:09:59 +0000
Subordinate resources:    IP: 204.13.136.0/22
                          IP: 2620:72:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:63:ab:3a:63:16:4a:40:ee:82:05:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 30 20:09:59 2024 GMT
            Not After : Jan  3 21:09:59 2027 GMT
        Subject: CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:45:02:05:64:d1:82:9f:c7:f7:d5:71:37:2c:
                    ac:73:3b:a2:4a:91:3f:02:73:07:ab:96:88:31:1e:
                    0c:55:8c:c1:6c:35:24:8b:40:50:08:49:8b:b4:ad:
                    98:27:99:3c:fd:ea:59:be:c9:3a:30:eb:e4:0f:03:
                    89:ed:b0:64:82:b5:00:eb:2b:95:30:27:57:fb:d0:
                    97:5e:76:e8:61:2f:a7:e6:fc:a8:88:ed:9f:bd:62:
                    70:60:0e:93:3b:1d:0a:f9:a6:a8:b3:42:25:51:73:
                    75:c9:ea:1c:bd:11:d4:30:d2:3f:b2:83:e7:a9:91:
                    a8:b2:f7:82:df:6e:8d:d9:ff:1b:7d:e9:4e:98:3a:
                    a6:c6:90:1d:4d:c2:d6:45:22:05:e6:00:8a:70:d4:
                    c6:56:cf:d0:c0:6b:21:4c:67:e7:22:12:f0:3e:49:
                    45:ac:a4:67:33:1f:14:06:cf:01:90:42:b4:cb:d5:
                    2d:c6:0f:36:5a:bc:f2:44:cd:c3:c2:ed:ae:f5:b9:
                    5c:9f:bf:c1:5c:09:57:96:d2:d4:46:db:be:cb:cb:
                    8b:e9:3b:f7:89:11:48:97:55:b8:78:9b:d6:2b:a8:
                    7c:ac:d6:4c:39:f5:b3:6b:2b:9b:9f:0a:c0:c5:d6:
                    bd:ff:b7:64:43:f8:d8:97:a5:fd:ee:31:5c:97:4d:
                    72:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.136.0/22
                IPv6:
                  2620:72:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:8b:56:1e:2e:60:3c:d7:f2:ad:44:91:76:9d:1b:b1:91:26:
         6a:76:89:f4:d8:81:fd:eb:6e:93:40:b5:e5:ee:3b:27:7b:21:
         bd:5c:d0:a5:19:61:a0:23:ea:0c:02:f0:d5:9d:ae:d6:fc:3c:
         74:07:23:d0:2a:70:12:19:d4:05:0b:fb:08:87:22:66:e4:69:
         de:fb:52:04:81:eb:b4:b6:40:1b:60:99:3e:8e:cc:2a:2d:8c:
         ba:b8:78:f6:34:38:11:62:80:61:fd:38:7a:12:56:3e:58:9a:
         3b:31:b5:72:c8:7d:16:f2:0d:2f:7d:b5:c2:e0:44:ca:df:37:
         29:01:fa:00:48:d8:e2:7e:de:29:55:9d:2a:cd:8e:63:23:e7:
         f6:93:cb:e0:c0:5d:9c:24:f0:40:fd:b6:35:d3:8e:17:2a:54:
         e3:01:fa:05:01:c0:bb:d0:75:2d:7a:1e:56:57:93:4f:f9:96:
         ef:e8:43:54:c6:93:a6:1f:57:e0:89:a9:fe:6f:75:fe:e7:58:
         80:52:4f:4e:0c:66:d7:77:56:92:35:fc:4b:09:36:cc:3e:94:
         b8:92:dd:2d:ee:6f:32:b7:2f:ca:78:b5:8e:2a:62:fb:9c:8b:
         1b:89:ba:37:cc:d4:d5:68:ac:b7:c5:87:df:58:a3:9c:a0:52:
         56:05:07:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----