Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc.cer
File:                     6e996479-1bf5-4231-a5f2-3e7f1bcf2efc.cer (raw, json)
Hash identifier:          3ujEb/zZLpW8HZlyg+YlHgAwRd1Cob/SmASiygPJRMQ=
Subject key identifier:   BE:06:01:8A:21:53:2F:11:47:4B:81:CF:06:00:11:F8:78:F6:46:D8
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847433748AA6ED039996E376B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Sep 2024 05:10:30 +0000
Certificate not after:    Wed 23 Dec 2026 06:10:30 +0000
Subordinate resources:    AS: 395314
                          IP: 23.187.216.0/24
                          IP: 2602:f82e::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:43:37:48:aa:6e:d0:39:99:6e:37:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 19 05:10:30 2024 GMT
            Not After : Dec 23 06:10:30 2026 GMT
        Subject: CN=6e996479-1bf5-4231-a5f2-3e7f1bcf2efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:71:2d:20:c3:92:65:4d:a6:21:c6:db:1e:
                    f8:32:43:0d:04:0f:bd:af:df:1f:e0:cf:76:a7:24:
                    8d:16:09:08:7c:ef:c6:d1:f2:f3:da:9a:27:b0:43:
                    73:7f:5d:fb:5d:eb:04:f6:2c:ad:fb:ea:cb:ce:1b:
                    47:dd:9a:f3:b2:c3:c8:79:2c:4e:11:09:ce:76:c4:
                    70:80:f7:d1:e4:bd:62:44:31:3e:9e:0e:bd:e9:a8:
                    69:c0:91:72:ee:f5:ef:e9:bd:9c:33:f0:33:1c:68:
                    fa:02:5d:29:8a:36:48:33:8c:cd:06:28:67:63:6f:
                    be:b3:41:b0:eb:a8:e7:f8:e7:fa:3a:7b:b7:f7:8c:
                    cb:0f:bc:9e:d9:b9:cf:d3:18:49:9d:3d:2e:45:5f:
                    b1:63:1b:66:37:08:e0:d9:f2:43:47:9d:aa:6f:04:
                    07:7a:63:19:23:21:3b:1d:f2:de:97:00:07:63:e7:
                    1b:48:d5:ca:7d:a4:43:ac:79:dc:34:6c:dd:92:6b:
                    ac:c3:65:cf:88:58:cf:f2:76:ed:2d:a0:b6:06:5b:
                    66:dd:bc:f2:50:17:5a:f3:d6:37:5e:c5:87:81:ef:
                    0a:2c:a7:bf:d9:56:64:01:00:ef:8c:09:8e:0e:cd:
                    fb:07:33:e1:05:f9:ae:1e:aa:39:cd:d9:4c:74:15:
                    7e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:01:8A:21:53:2F:11:47:4B:81:CF:06:00:11:F8:78:F6:46:D8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.216.0/24
                IPv6:
                  2602:f82e::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395314

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:61:db:dd:d6:94:d6:c1:69:c4:bf:da:91:18:89:a4:07:b9:
         a1:3d:8b:1a:78:0d:d3:17:58:8d:ea:03:53:ea:e0:f7:01:69:
         ac:c4:8a:53:0d:41:7d:69:70:2a:cf:de:18:74:0e:78:cb:45:
         ba:ac:6b:6f:af:49:91:e3:ef:86:f4:04:26:97:b3:1d:bd:57:
         0c:aa:91:1e:35:11:e6:27:91:ab:e5:62:e6:ee:f4:18:c3:ce:
         76:1a:9e:e1:4b:9a:61:53:72:b9:38:0d:3d:60:c7:b4:00:4b:
         bc:bb:aa:fc:e0:46:89:8c:cc:8d:a3:8a:b4:58:8c:5c:79:88:
         f8:c7:12:06:18:3d:8d:e7:9c:0a:7b:97:aa:dd:21:89:97:0d:
         24:25:d7:ce:58:e4:12:1e:76:d2:54:da:e7:81:af:a1:75:53:
         07:c9:af:7e:16:80:d0:d2:77:71:f8:17:48:0b:26:fc:62:ad:
         41:93:f2:3b:f4:7e:f8:c2:d8:0c:47:e9:ce:39:aa:9e:34:ba:
         32:1e:e0:db:ae:99:47:86:29:df:50:76:6a:d6:db:53:ff:36:
         85:48:2f:29:27:a4:f4:62:9d:bd:8f:65:ce:38:7a:85:89:aa:
         fd:d3:b7:9d:8b:e8:ce:2b:0e:f7:63:a9:24:48:37:84:d9:2b:
         a1:f5:57:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----