Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78d07005-8f04-49c5-9b16-27227f704299.cer
File:                     78d07005-8f04-49c5-9b16-27227f704299.cer (raw, json)
Hash identifier:          ShBrX4Pwm07jEc7nj9nt+S18LuYJmPqgCP+XDmBBJMI=
Subject key identifier:   54:8F:8C:5B:5B:54:E4:44:96:F5:4C:48:7A:3C:BF:E3:71:B3:6A:E2
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847E115021B6A06D4A78DB32800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78d07005-8f04-49c5-9b16-27227f704299/78d07005-8f04-49c5-9b16-27227f704299.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78d07005-8f04-49c5-9b16-27227f704299/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Nov 2024 18:19:09 +0000
Certificate not after:    Wed 17 Feb 2027 18:19:09 +0000
Subordinate resources:    AS: 19239

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e1:15:02:1b:6a:06:d4:a7:8d:b3:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 14 18:19:09 2024 GMT
            Not After : Feb 17 18:19:09 2027 GMT
        Subject: CN=78d07005-8f04-49c5-9b16-27227f704299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a3:a1:9c:64:bf:46:ca:bd:2e:be:de:64:06:
                    27:88:7c:4c:d6:80:de:d8:d1:1c:f9:39:88:5d:58:
                    fb:46:71:cb:7e:d3:22:b3:0b:21:5e:df:c7:dd:61:
                    15:90:a3:e7:f0:dc:28:8a:a3:d5:a9:85:da:d0:f8:
                    fd:ff:77:ad:1d:b7:fb:68:27:b3:89:8c:74:d3:ff:
                    4b:b8:0b:04:c3:5e:04:38:2f:ce:25:1b:ee:48:d3:
                    d4:62:22:f7:12:91:b2:ea:aa:8a:f9:73:54:cc:ee:
                    b8:6c:f5:e0:f9:76:d4:5e:b7:22:c6:ee:1a:49:f7:
                    99:79:7f:9d:ca:ad:c8:c1:32:1d:0e:3b:80:05:92:
                    a5:30:77:39:cf:ac:e3:b8:f5:f1:a4:f0:9b:0f:13:
                    ea:d7:a8:e7:f4:c1:41:1c:49:4a:4d:8d:bd:36:45:
                    8b:5d:01:07:5d:5d:90:23:3d:93:8c:e5:36:73:62:
                    de:8a:1a:08:35:2c:9a:9f:c9:73:b2:31:63:f5:de:
                    84:a4:d1:48:d8:81:1f:6e:1a:3b:ee:fc:03:f2:81:
                    c8:d7:81:26:d0:6a:22:0c:b1:a1:1b:b4:8f:96:d8:
                    63:4d:b8:5d:e7:9a:94:f2:2b:8b:7b:ad:8a:7e:ae:
                    39:88:e4:6b:21:4a:93:8e:d1:1c:5c:e0:d7:20:df:
                    30:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8F:8C:5B:5B:54:E4:44:96:F5:4C:48:7A:3C:BF:E3:71:B3:6A:E2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78d07005-8f04-49c5-9b16-27227f704299/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/78d07005-8f04-49c5-9b16-27227f704299/78d07005-8f04-49c5-9b16-27227f704299.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19239

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:eb:31:cd:15:39:71:8f:4f:81:71:cf:dd:28:76:63:a7:cc:
         a7:3f:3c:c3:15:09:7c:e4:99:ae:cc:34:c1:66:9a:8f:38:4f:
         8e:52:dc:cf:9c:29:f6:30:9e:4d:2f:40:f6:f3:2d:24:75:fd:
         db:28:7e:eb:86:ce:a6:d3:ac:68:81:60:f4:5b:6f:25:6c:4d:
         c5:52:0e:fd:dd:7e:20:25:68:b6:cc:23:b1:1b:f4:b7:ed:ac:
         33:28:72:33:06:74:d8:b6:1e:9c:34:3a:09:05:2e:6c:72:d5:
         fa:d4:0f:2f:8f:2a:0d:19:d3:d7:98:3f:00:54:a8:a0:c9:8c:
         e1:7d:9a:89:a1:f6:37:8a:38:a3:b2:0d:bd:a8:58:4d:32:8c:
         ba:4d:9b:30:8e:fe:06:fc:cc:cf:5c:60:51:56:be:86:90:99:
         ce:80:1a:d3:69:0f:2f:91:d0:df:f3:a0:82:a6:41:31:66:8b:
         f6:9b:ad:10:1a:f4:eb:00:9c:d2:dd:8e:8b:de:b5:7c:e2:88:
         26:7e:0c:a9:27:a3:c0:4d:a6:7e:c3:bc:4c:b7:77:d9:20:da:
         4b:52:9e:e4:98:76:b3:49:dd:7c:9c:af:79:01:75:d4:62:5a:
         71:b4:b8:f3:1c:68:2b:25:46:86:10:22:1f:38:2b:de:80:00:
         4e:64:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----