Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cf0a89e-6bdc-4bd9-993b-62a48087dcb6.cer
File:                     7cf0a89e-6bdc-4bd9-993b-62a48087dcb6.cer (raw, json)
Hash identifier:          kD+xdRcZ5hmWSk8IoLyhDCF32ZgORpVtaUreg2Tixmk=
Subject key identifier:   A4:85:AB:E8:46:B9:5F:D9:4F:72:6F:50:B7:7C:53:1B:48:66:48:F8
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584701F4015C2648102A9C52FCC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cf0a89e-6bdc-4bd9-993b-62a48087dcb6/7cf0a89e-6bdc-4bd9-993b-62a48087dcb6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cf0a89e-6bdc-4bd9-993b-62a48087dcb6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Aug 2024 20:07:24 +0000
Certificate not after:    Sun 29 Nov 2026 21:07:24 +0000
Subordinate resources:    AS: 53390

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:f4:01:5c:26:48:10:2a:9c:52:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 26 20:07:24 2024 GMT
            Not After : Nov 29 21:07:24 2026 GMT
        Subject: CN=7cf0a89e-6bdc-4bd9-993b-62a48087dcb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:38:ac:35:c1:2e:e0:1d:c6:67:69:41:d1:
                    f4:fd:4a:7d:14:5b:74:e8:3c:e2:c4:73:53:ce:1d:
                    1c:ea:11:41:cc:92:a0:3e:3e:a7:5c:01:0f:49:39:
                    06:51:df:4d:1c:f3:69:e2:75:81:46:2c:d6:f7:8f:
                    35:7d:ba:28:71:48:8a:af:bb:89:d6:ba:e1:d3:3e:
                    ad:cb:3d:85:fe:2b:dc:36:d3:3f:98:8c:9f:ec:ae:
                    d4:04:5e:f3:9c:dd:71:1d:6e:7c:1e:d4:64:a7:56:
                    82:f5:b2:a8:c1:9d:73:7b:76:8a:75:7a:dd:b2:66:
                    7c:e5:29:63:ed:26:6d:d8:79:a5:e9:ff:3e:a9:22:
                    dd:f0:bc:fd:5f:bc:d2:e7:1b:9d:74:c9:f9:f1:e4:
                    f2:9a:30:f0:66:6c:e9:15:b9:44:95:a1:7f:e7:b7:
                    bd:97:d1:69:c6:34:33:65:a4:47:5f:c3:e0:f3:66:
                    e0:86:91:25:4c:e8:4f:1d:80:d2:65:0f:63:27:20:
                    84:db:19:37:3e:4f:e9:ca:c5:db:b6:10:93:95:1b:
                    e1:23:c6:3b:d2:40:50:2c:c4:7a:25:28:a9:53:c7:
                    c1:4a:87:ec:c2:4d:37:72:e6:76:84:0e:68:83:25:
                    d2:ec:d0:e2:da:ee:fc:4e:a5:0b:78:57:76:ba:99:
                    d3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:85:AB:E8:46:B9:5F:D9:4F:72:6F:50:B7:7C:53:1B:48:66:48:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cf0a89e-6bdc-4bd9-993b-62a48087dcb6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cf0a89e-6bdc-4bd9-993b-62a48087dcb6/7cf0a89e-6bdc-4bd9-993b-62a48087dcb6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53390

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:39:36:1a:f0:ba:93:f1:40:18:79:02:8e:4d:27:f0:11:02:
         71:f9:25:0f:7a:8c:2c:b2:28:c1:a9:7a:e7:55:a1:0f:e5:66:
         56:ea:0a:59:ee:43:9c:44:c1:6c:39:43:92:b5:d5:c1:75:46:
         40:0e:4c:f0:a2:10:df:91:b0:1e:c0:06:cc:d9:85:ea:72:e4:
         cb:27:b4:cb:7c:ab:c3:f8:0c:e1:1f:de:82:2e:bc:d9:b1:9e:
         15:09:4b:02:ec:40:7e:6d:6b:8c:49:5c:ab:d2:f1:b8:7d:1e:
         34:f0:95:91:5a:b9:08:c6:3d:e4:fa:e9:44:5a:fc:ad:a3:f5:
         c5:cf:13:a1:29:d4:54:71:e5:75:df:70:23:03:32:b5:7a:dd:
         fe:1b:6d:5e:5d:68:13:9f:ad:59:20:34:41:57:44:b7:75:1d:
         e9:25:19:fe:4e:20:72:f1:d3:d4:50:ab:e2:ad:cd:fb:af:41:
         49:b7:f9:61:a2:e0:65:d5:9e:81:08:c2:5a:49:9c:e3:56:60:
         14:df:18:77:34:12:f2:43:df:8a:f1:bb:7f:b4:05:da:83:86:
         96:b3:20:3c:bf:05:7f:89:46:a3:fc:e3:20:c8:fc:1a:3a:e3:
         af:3a:09:12:60:bb:b1:43:3f:b5:92:bf:2b:9e:95:72:0b:58:
         e6:eb:f9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----