Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer
File:                     8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer (raw, json)
Hash identifier:          SP13LoQvbQSFqiI+gVIegO6Lw2NzE3PyyMg1lJVdHrM=
Subject key identifier:   D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858473ECE53B0A451F7357DDCB880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Sep 2024 15:15:47 +0000
Certificate not after:    Mon 21 Dec 2026 16:15:47 +0000
Subordinate resources:    AS: 397469
                          IP: 136.175.243.0/24
                          IP: 2620:91:2000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3e:ce:53:b0:a4:51:f7:35:7d:dc:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 17 15:15:47 2024 GMT
            Not After : Dec 21 16:15:47 2026 GMT
        Subject: CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:6d:61:05:9e:c1:d2:66:3e:37:9f:c1:9d:
                    32:f5:fa:6b:c6:9e:e1:12:a4:42:a1:fc:26:d8:53:
                    66:76:a7:d9:03:01:ad:f2:78:40:d2:da:bd:f5:66:
                    12:91:11:81:b7:9d:05:33:e8:1d:c2:91:ba:2b:1e:
                    cc:a5:a1:64:aa:66:11:40:89:08:96:a8:4b:c3:f9:
                    05:63:49:f4:24:06:a4:72:66:c9:e2:f1:31:cc:67:
                    b2:bf:63:6c:65:a0:cd:bb:71:e8:d4:62:88:e9:b1:
                    03:e6:c4:5b:be:d7:07:b9:29:9c:2b:70:54:87:10:
                    b8:0a:39:6e:f7:dd:4a:e1:bc:6f:38:30:66:23:cb:
                    d9:5d:83:56:bb:a3:a5:a7:fc:a9:44:c1:1a:3f:28:
                    44:54:81:bc:25:34:b6:cd:a3:e6:7a:c0:41:29:19:
                    35:14:37:54:c9:01:2d:4d:a2:37:d7:af:c9:ac:28:
                    90:d8:7e:cf:6a:f4:cf:9a:a0:c3:5e:0a:2f:75:29:
                    d5:56:09:d2:4f:9e:ac:12:09:61:90:e5:88:bd:9e:
                    6a:df:8e:5c:5e:5a:b0:36:0f:4e:5b:2b:4b:38:8f:
                    35:28:f5:19:2d:a2:19:c0:97:22:99:3f:81:c2:42:
                    9c:f2:af:5d:6b:e3:cb:27:9e:5c:2a:de:60:cc:f6:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.243.0/24
                IPv6:
                  2620:91:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397469

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3f:33:52:a7:20:58:b8:3c:83:2c:2c:b8:13:1a:5d:c4:ff:
         15:d4:11:ff:79:da:e4:bc:fd:2f:0a:55:51:e3:3a:bf:a2:8a:
         89:4a:b5:20:73:e7:df:e3:23:42:d3:a1:c2:9a:b1:48:ac:d2:
         e7:aa:08:65:cb:5a:ab:77:5c:7b:59:23:c2:77:fc:52:06:68:
         87:ef:30:cc:06:d6:00:18:47:1e:09:ba:97:58:d1:da:a4:c0:
         65:de:e1:4f:f4:11:92:41:93:f2:0e:e6:c8:32:30:20:94:de:
         6e:d2:03:de:24:05:2d:90:a1:24:25:7f:44:30:14:55:6b:63:
         2b:24:dd:aa:d5:56:48:38:6a:1d:7e:4d:69:6b:3d:29:8f:3a:
         be:0a:c6:bb:6e:82:e5:4b:1d:48:95:9c:29:40:85:67:73:cf:
         2f:e9:c0:02:11:40:4d:d2:07:e0:aa:cc:42:0c:17:49:cc:75:
         fd:c3:c0:f3:11:76:14:1c:b6:22:ea:99:b9:5c:cf:13:d2:93:
         6f:5a:a2:dd:17:80:bd:11:bb:42:cf:61:e8:ce:21:00:75:6f:
         1b:b7:2b:c6:da:26:7a:c5:32:54:13:74:e0:82:ea:4c:e4:df:
         da:d4:f1:ed:f6:75:bf:4a:be:0e:c7:68:65:1e:49:13:d4:90:
         28:ee:6b:e6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----