Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3.cer
File:                     7d07cbba-57bd-49fa-a417-c19f23af1ce3.cer (raw, json)
Hash identifier:          hcRFIl6L0SbV23v/dN6gatWS76KxoUB+L3E1ei3vZJo=
Subject key identifier:   1E:4F:1F:6C:A5:3F:41:04:8F:0D:8A:43:64:DB:66:79:09:8F:6B:C2
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847F1DACF3C8824269B57F99740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/7d07cbba-57bd-49fa-a417-c19f23af1ce3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Nov 2024 18:30:38 +0000
Certificate not after:    Tue 23 Feb 2027 18:30:38 +0000
Subordinate resources:    IP: 137.190.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:da:cf:3c:88:24:26:9b:57:f9:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 20 18:30:38 2024 GMT
            Not After : Feb 23 18:30:38 2027 GMT
        Subject: CN=7d07cbba-57bd-49fa-a417-c19f23af1ce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fb:f9:63:fe:52:b2:d0:e8:d8:72:52:c7:95:
                    a2:79:e0:45:eb:ea:c1:81:52:2b:5c:d4:84:b0:2d:
                    7a:a7:9b:8b:72:dc:15:1e:32:ac:5b:18:96:27:39:
                    44:00:32:0f:1b:a7:d8:b4:cc:a4:5d:d5:6d:dc:83:
                    78:be:2e:3b:d8:50:6b:62:b6:b0:78:fa:32:35:3a:
                    fa:20:b3:f8:85:65:5f:2a:0c:60:39:ea:eb:c9:93:
                    fe:09:d3:08:96:59:94:39:0e:af:07:67:cb:b2:41:
                    9c:d9:a3:74:1e:a9:f5:aa:98:60:fa:21:8f:d9:7f:
                    b9:0e:06:f2:3b:64:e0:9f:e1:fa:d4:b2:dc:10:c3:
                    58:cc:bd:ba:72:17:d4:5a:0e:5c:32:d6:25:4a:a6:
                    92:20:5c:5b:17:e5:89:82:3f:c5:c4:50:5c:bd:e5:
                    37:1a:9f:e2:90:75:07:af:86:3b:2e:74:5a:7b:07:
                    a2:e4:67:08:2d:ec:f5:ca:90:4a:7f:37:88:15:9b:
                    fb:88:73:b8:86:d5:d5:70:cd:24:6f:39:ef:aa:aa:
                    22:4c:02:49:78:2f:20:15:6d:23:10:74:9c:ea:56:
                    aa:bc:f3:98:45:07:3d:05:6f:33:a7:02:9f:12:ec:
                    02:1d:26:22:eb:b9:3b:78:37:c3:1d:78:48:0f:79:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4F:1F:6C:A5:3F:41:04:8F:0D:8A:43:64:DB:66:79:09:8F:6B:C2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7d07cbba-57bd-49fa-a417-c19f23af1ce3/7d07cbba-57bd-49fa-a417-c19f23af1ce3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.190.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:26:0a:d0:3d:07:94:bd:8c:fe:62:f0:fa:bc:b3:a5:0d:
         17:4d:97:81:42:d0:29:93:06:f8:f3:3c:3c:ef:d8:28:dc:5d:
         b9:cb:87:ee:2e:91:b0:8b:63:2b:9b:ff:ad:f8:40:e8:ce:e1:
         34:d1:64:61:fa:00:da:cb:3e:83:ed:43:de:ad:d3:74:86:66:
         d1:7a:76:85:dc:29:51:1a:d6:ab:d9:44:6a:e7:ee:0b:01:e4:
         07:21:0a:bd:14:84:9e:e8:01:60:d8:d2:b4:8c:e0:f7:b5:da:
         54:43:3c:48:a8:6b:f1:2d:b9:47:36:c3:31:fb:da:4e:d3:a9:
         b9:bf:da:9d:bc:44:97:e7:1c:be:55:3c:5f:61:41:3a:47:02:
         da:d9:4c:f6:97:65:84:70:31:fe:88:5b:dd:9c:67:dd:7b:a1:
         b2:d7:9e:83:ad:ee:6e:11:77:e7:d4:a9:f1:5e:65:b6:ba:d4:
         2c:f6:3c:ee:55:8f:00:36:91:87:90:26:97:46:e9:f0:d9:e3:
         b8:a6:71:49:8e:e7:59:13:83:94:bf:82:ae:e2:fa:8e:14:d8:
         8d:ed:1d:b6:ff:91:67:21:05:b4:9b:88:6b:e0:f9:ba:47:7b:
         d0:23:7c:c4:0d:57:32:67:2f:0c:b1:a3:4a:2a:03:3f:3c:d8:
         13:49:8f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----