Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8490019f-3334-4789-b5d8-222fabc92a07.cer
File:                     8490019f-3334-4789-b5d8-222fabc92a07.cer (raw, json)
Hash identifier:          RloD7poFPDdGyJqlalpvXXCPaTNAjnFsZlyGp2fINv8=
Subject key identifier:   CE:2F:F5:25:FE:A4:78:5D:25:89:E6:0B:7D:DE:1A:D0:31:E1:FD:5B
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846FF70ECF26D27E10EB9074F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8490019f-3334-4789-b5d8-222fabc92a07/8490019f-3334-4789-b5d8-222fabc92a07.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8490019f-3334-4789-b5d8-222fabc92a07/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 25 Aug 2024 22:31:40 +0000
Certificate not after:    Sat 28 Nov 2026 23:31:40 +0000
Subordinate resources:    IP: 2620:42:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ff:70:ec:f2:6d:27:e1:0e:b9:07:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 25 22:31:40 2024 GMT
            Not After : Nov 28 23:31:40 2026 GMT
        Subject: CN=8490019f-3334-4789-b5d8-222fabc92a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:f3:d4:3e:c5:fc:73:e1:9b:94:10:1e:ff:
                    5f:94:ea:08:51:91:46:8d:e9:32:c7:9b:16:c7:e8:
                    b9:32:f5:bf:ee:0e:fc:d4:46:3d:59:3e:f9:f0:71:
                    77:92:d6:bf:91:89:6c:6a:38:33:ea:fa:b8:15:5f:
                    15:49:c1:63:da:98:26:0a:f5:30:ba:1c:93:4a:88:
                    c1:88:db:6d:b9:38:38:80:61:7a:56:f3:a1:35:5c:
                    dd:31:b7:e5:fa:31:a6:e0:b4:ad:a2:3e:06:3c:2e:
                    7c:99:22:6c:fc:df:38:f4:ff:2e:93:25:fb:f6:63:
                    cb:89:73:8c:fc:af:4f:c5:89:d7:a6:26:fc:19:18:
                    2e:a1:ec:38:b9:24:f4:3a:2e:cd:4d:82:8c:5f:fb:
                    cf:32:85:f0:ab:94:95:5b:00:e9:d6:3e:1a:a8:2e:
                    94:b4:20:d4:96:b7:59:48:b6:61:33:3b:18:80:3a:
                    1c:ec:20:bd:b8:29:91:72:c7:57:2e:fe:32:99:6e:
                    e1:4f:17:ed:4c:88:f8:ba:97:11:cd:bd:c5:fe:c5:
                    a7:53:72:52:d3:9f:4e:2e:2c:12:41:39:4d:98:ad:
                    8a:f3:41:7b:9d:fa:73:bc:71:a1:81:96:33:a6:65:
                    c0:f0:c1:0a:8a:ce:31:8d:07:22:27:3c:20:42:d4:
                    e5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2F:F5:25:FE:A4:78:5D:25:89:E6:0B:7D:DE:1A:D0:31:E1:FD:5B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8490019f-3334-4789-b5d8-222fabc92a07/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8490019f-3334-4789-b5d8-222fabc92a07/8490019f-3334-4789-b5d8-222fabc92a07.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:42:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:39:6b:cc:82:57:41:92:75:40:92:ab:fb:5f:90:66:27:c2:
         2f:94:0d:e6:3f:0e:f5:2e:28:5b:8b:14:5b:5d:62:84:27:d8:
         5f:01:2a:e4:f3:d9:13:df:cb:9c:4c:53:14:14:5f:22:38:10:
         ce:b9:dc:d4:03:6d:a2:f4:6f:c8:c2:54:8e:df:20:ff:c8:ea:
         90:f9:b8:f6:99:b4:ee:ad:4f:ed:e8:5a:89:a3:1c:c6:e7:33:
         91:8b:a8:32:9e:b1:a4:cc:90:91:fa:7b:fa:20:9d:a9:89:26:
         3b:6f:bf:63:35:bc:ef:d8:12:9b:4a:5b:5b:f3:68:04:b1:ca:
         48:71:65:da:df:80:f0:a0:e4:73:5f:48:8e:e4:0a:36:c7:97:
         85:e0:cb:8c:cd:0b:74:38:7b:29:cd:b7:ef:c9:0d:27:7e:2f:
         b3:c0:03:57:5e:2c:d3:1d:98:31:99:d5:c1:eb:d9:df:f8:19:
         a7:57:30:76:96:c5:33:4a:bb:34:5d:2b:20:9b:b7:dc:e3:9a:
         de:05:37:39:67:b5:87:85:cd:85:3a:38:21:13:98:24:41:35:
         91:15:6f:6e:d3:22:70:79:34:2b:ac:54:a1:c6:be:1a:49:fc:
         2a:18:5e:84:f1:fe:61:05:93:8a:86:c3:38:0d:5b:e3:6c:93:
         c7:51:dd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----