Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75d035d7-d231-4a25-9c38-b59cc633fc49.cer
File:                     75d035d7-d231-4a25-9c38-b59cc633fc49.cer (raw, json)
Hash identifier:          V+YiodGgCnRG3bLrl4ANBnwtwGEgOByHlwXOuIq1X5M=
Subject key identifier:   E9:99:72:CD:CB:90:6C:05:6B:29:1C:02:B3:52:9F:34:3E:BB:E2:51
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847CD65545283293D5789C15700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75d035d7-d231-4a25-9c38-b59cc633fc49/75d035d7-d231-4a25-9c38-b59cc633fc49.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75d035d7-d231-4a25-9c38-b59cc633fc49/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Nov 2024 17:04:50 +0000
Certificate not after:    Wed 10 Feb 2027 17:04:50 +0000
Subordinate resources:    AS: 30085
                          IP: 208.95.172.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:65:54:52:83:29:3d:57:89:c1:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov  7 17:04:50 2024 GMT
            Not After : Feb 10 17:04:50 2027 GMT
        Subject: CN=75d035d7-d231-4a25-9c38-b59cc633fc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:38:8b:25:4e:44:3a:42:5e:8a:29:a1:d1:
                    d3:6b:e9:1b:57:ee:d9:3c:8d:ae:7c:1f:f5:24:fd:
                    eb:54:d3:5f:dc:ce:84:d8:58:8c:08:41:45:2b:5b:
                    e6:c1:9a:02:ca:ba:7a:24:1e:2a:38:5e:23:ce:f1:
                    dc:9e:1c:10:e0:93:4d:50:26:61:9e:64:03:b5:5c:
                    42:a8:19:32:c2:8d:f3:94:6b:eb:bc:bc:f9:26:70:
                    d5:4a:36:97:92:64:98:db:8c:75:3e:0b:30:46:7c:
                    3c:13:91:4a:c0:d2:0d:12:59:a2:b5:57:d4:84:d5:
                    7b:be:c2:8e:01:b0:7f:f9:8b:28:58:1b:dc:e7:4a:
                    63:c5:38:d3:ab:ac:f7:30:0d:27:a1:10:41:69:1a:
                    f2:95:b8:1c:6c:9a:65:22:8d:53:75:e3:7b:2f:ec:
                    1c:82:27:d7:c4:a3:8b:73:55:bb:8d:36:b1:09:2c:
                    a9:d7:38:60:76:17:02:65:f6:02:db:28:f9:c3:6c:
                    63:aa:38:4c:bc:a2:9c:ba:25:4b:c0:fc:8b:a6:af:
                    02:20:c3:c6:ea:32:e4:d0:ac:af:57:a8:bf:c6:2a:
                    75:b5:12:69:eb:85:51:fc:be:83:12:b7:68:33:9b:
                    ad:63:c1:49:72:f0:8c:5b:bd:0f:53:6b:01:e7:f2:
                    9a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:99:72:CD:CB:90:6C:05:6B:29:1C:02:B3:52:9F:34:3E:BB:E2:51
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75d035d7-d231-4a25-9c38-b59cc633fc49/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75d035d7-d231-4a25-9c38-b59cc633fc49/75d035d7-d231-4a25-9c38-b59cc633fc49.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.172.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30085

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:21:ca:4b:73:25:35:49:3c:8c:a6:c3:c9:0e:ec:d8:48:ed:
         7c:85:4e:75:e2:f9:ed:6b:3e:6b:59:82:8e:82:df:14:97:96:
         19:de:4e:72:ec:fe:4d:50:2f:e9:85:b0:a2:28:a7:11:c6:ed:
         44:de:84:af:78:ae:dc:8f:67:c3:4d:87:49:0a:fe:18:d9:4d:
         fe:ff:6f:45:43:fd:de:08:80:2f:5c:92:55:4c:d7:85:43:9f:
         3c:5c:46:b9:0a:70:96:ff:97:23:4c:c6:5d:ea:d9:2c:ec:1a:
         40:83:7f:fb:0f:df:e2:19:14:0e:2c:bb:9f:c2:0e:5c:c3:c1:
         c8:ed:62:00:96:c1:4b:5e:32:10:18:81:ba:94:6a:c4:f6:82:
         9e:a8:dd:99:1f:a1:1e:34:51:19:8e:ee:f6:d6:17:52:57:5b:
         75:be:22:c6:98:39:1e:56:1d:4e:94:64:e4:9c:a0:c4:2c:f2:
         9d:74:1b:74:7e:46:2e:d1:78:0f:63:3c:ea:84:f9:c0:fe:9f:
         41:5e:fd:00:57:e0:e8:56:64:d6:9d:8e:67:d2:8a:89:53:92:
         6c:10:3c:50:d4:3d:c4:56:39:3e:62:b6:ca:b4:68:a0:43:62:
         dd:5a:a9:a3:f3:14:00:c5:2f:73:7b:17:b0:b3:18:8b:86:ea:
         90:b8:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----