Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.cer
File:                     8dfd6a34-a7e1-4a96-8334-a15990c8a58b.cer (raw, json)
Hash identifier:          bC8Pf3Q4zeaMSbiqgIdsYd+7NtbuncMafS+4I3CVVDw=
Subject key identifier:   B9:2D:CA:F5:F6:F0:BE:CD:C4:8C:B1:37:34:74:41:B2:D8:4B:82:E6
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846DCA10A55ED99F20B4563FD40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 13 Aug 2024 11:15:20 +0000
Certificate not after:    Thu 12 Nov 2026 14:34:24 +0000
Subordinate resources:    AS: 55013
                          IP: 148.150.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:dc:a1:0a:55:ed:99:f2:0b:45:63:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 13 11:15:20 2024 GMT
            Not After : Nov 12 14:34:24 2026 GMT
        Subject: CN=8dfd6a34-a7e1-4a96-8334-a15990c8a58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:60:3c:7a:7e:b1:58:02:7e:4e:89:79:d9:
                    e9:8f:35:41:26:f8:73:08:d7:c4:c0:ed:f4:eb:7b:
                    d6:23:d5:0c:a6:00:25:3d:25:6a:19:a3:72:ea:6b:
                    35:2e:91:7f:91:fb:37:00:d4:cf:45:3c:10:84:5d:
                    57:c8:74:c8:f2:4d:d4:aa:fd:cd:1a:4f:23:3c:20:
                    32:09:be:54:7a:b5:9d:e7:d1:4a:d0:91:6a:ff:5d:
                    1f:ca:0c:92:ea:97:ad:81:8c:85:6d:ae:1e:36:39:
                    f3:f9:7c:32:34:30:78:ab:db:34:e0:d6:74:77:b8:
                    f5:55:e5:85:0b:46:c7:1c:f6:be:db:5b:f4:07:6b:
                    2f:78:1f:78:8b:23:2e:76:3d:e9:17:4a:ef:86:3c:
                    5d:2a:fa:ef:00:2b:4b:b4:3b:2f:bd:5d:98:07:7f:
                    4f:2f:12:5c:ce:f0:dc:04:2a:90:e7:b0:06:65:4c:
                    64:96:34:88:37:61:f9:fa:b7:4d:36:e8:e3:07:f9:
                    29:97:b4:e9:61:7e:26:5e:22:ff:47:09:98:f9:ee:
                    23:92:6f:ec:7a:01:d5:80:88:71:2e:f6:fb:e8:ab:
                    92:41:6b:e0:b8:98:76:31:64:f8:67:a1:88:13:b1:
                    7f:37:db:c6:a3:56:4b:76:59:a2:fc:af:23:d0:f6:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2D:CA:F5:F6:F0:BE:CD:C4:8C:B1:37:34:74:41:B2:D8:4B:82:E6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8dfd6a34-a7e1-4a96-8334-a15990c8a58b/8dfd6a34-a7e1-4a96-8334-a15990c8a58b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.150.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55013

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7a:e1:19:4d:21:01:c8:1d:cd:53:17:1e:51:05:8f:47:6e:
         c3:47:3c:23:52:f3:ee:39:19:02:18:19:a4:e0:e6:84:79:07:
         b0:14:57:dc:b2:96:4b:6c:6c:b9:c8:a1:8a:53:f1:8e:33:bd:
         83:be:63:30:c6:ed:fa:5e:d6:93:3e:a5:68:17:9e:97:5d:9c:
         f9:6f:16:53:b6:5e:06:d7:e5:b2:61:51:90:f8:57:29:a9:4b:
         a4:c2:83:a3:99:c5:b8:be:46:8f:6a:66:f0:10:65:6d:c6:63:
         7c:9c:b8:cb:cb:9b:26:b0:00:3b:5e:39:cd:df:0f:46:4e:51:
         85:a5:77:10:ce:77:73:17:36:08:54:5a:71:f7:4d:48:ee:eb:
         52:c0:0e:f6:0d:e6:89:cd:3f:17:a4:ec:71:9e:e2:20:0f:85:
         fb:92:ff:3e:65:01:b3:38:28:25:40:4d:7c:ec:a0:36:d5:0e:
         17:6a:08:de:f0:96:8c:70:13:1d:0f:27:da:00:11:8f:c4:96:
         37:dd:7e:1a:28:c1:30:e4:ec:cb:49:f7:2d:5e:0f:20:c5:3e:
         c1:e7:8c:39:6e:b6:cf:b1:24:45:28:9d:49:e7:78:ec:11:59:
         ff:db:d0:e5:43:22:aa:b3:f0:d6:6b:ef:de:72:4f:c6:b4:28:
         a9:b2:48:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----