Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93facf2e-e118-4905-bfc7-e060fae2403d.cer
File:                     93facf2e-e118-4905-bfc7-e060fae2403d.cer (raw, json)
Hash identifier:          KAoJWtf3gWGKeHmbMRKN5onuVoHyTmzD4i8Cormnoi4=
Subject key identifier:   10:7D:2C:DC:E0:22:8F:E6:78:45:9A:8D:45:F0:71:6F:CA:45:9D:E7
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584741D60546518C40C3496BD280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93facf2e-e118-4905-bfc7-e060fae2403d/93facf2e-e118-4905-bfc7-e060fae2403d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93facf2e-e118-4905-bfc7-e060fae2403d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 18 Sep 2024 17:18:43 +0000
Certificate not after:    Tue 22 Dec 2026 18:18:43 +0000
Subordinate resources:    AS: 19076

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:41:d6:05:46:51:8c:40:c3:49:6b:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 18 17:18:43 2024 GMT
            Not After : Dec 22 18:18:43 2026 GMT
        Subject: CN=93facf2e-e118-4905-bfc7-e060fae2403d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:a7:cc:28:cf:b0:fe:b4:ec:2b:44:7c:37:
                    97:78:2b:56:e5:44:35:ac:ac:ac:a0:03:b9:20:25:
                    ef:8e:c9:1e:df:7b:33:84:b4:96:d3:41:db:9a:99:
                    43:ac:56:a8:6d:2f:9f:cd:32:50:a7:84:5b:4d:d9:
                    36:b2:c4:e4:ba:8f:a2:10:1f:ad:73:4a:52:6e:e0:
                    2c:35:8a:5f:8f:48:ed:46:e9:c6:9d:ca:3b:ad:72:
                    68:c5:70:50:55:98:39:3c:d3:ec:c7:d2:bb:c8:f2:
                    0b:f3:b9:e6:80:57:99:41:4c:ed:20:f2:d9:cd:d3:
                    cc:90:c1:28:de:51:78:d2:d4:88:fe:35:52:d0:dc:
                    33:ec:ad:b5:9a:39:f2:c7:08:5c:0f:22:ff:02:80:
                    9f:d4:93:36:16:3a:29:7c:96:c2:57:58:8e:11:30:
                    ab:2c:f3:3b:0b:cd:1e:72:94:70:6a:9f:b4:d8:ba:
                    68:bc:71:5d:83:fe:6c:b3:41:47:95:d9:5e:24:9d:
                    fa:c0:c9:11:4f:b4:fb:03:96:32:c9:b9:23:a4:aa:
                    6f:6e:b9:82:47:83:ae:e5:71:80:13:a2:02:c0:62:
                    e3:e0:c8:97:2f:8b:f0:98:29:c2:84:70:3d:a3:f4:
                    5f:31:6f:ce:2e:f8:02:d9:d6:d4:dc:49:7d:3a:ee:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7D:2C:DC:E0:22:8F:E6:78:45:9A:8D:45:F0:71:6F:CA:45:9D:E7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93facf2e-e118-4905-bfc7-e060fae2403d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/93facf2e-e118-4905-bfc7-e060fae2403d/93facf2e-e118-4905-bfc7-e060fae2403d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19076

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:20:0e:2c:a1:06:26:64:e1:bd:9e:d1:e5:e5:06:a5:31:3c:
         21:c6:ac:41:86:b3:16:2e:5d:05:43:ed:c8:ac:59:a3:69:c9:
         6c:bd:3a:b9:90:58:f2:65:c9:72:07:41:7f:e7:bb:b9:98:8a:
         4c:e2:34:05:36:f9:64:8b:35:ad:a0:5f:63:aa:bd:87:e7:74:
         65:f1:7f:91:db:e9:97:d0:2b:08:24:d1:72:a9:9c:f7:00:ea:
         a9:03:1c:09:8a:0c:ee:72:65:9a:73:05:a9:02:34:05:17:f7:
         1d:81:9b:d8:7e:3c:42:5b:c0:11:66:16:7f:10:db:79:7a:79:
         70:05:3c:02:4c:16:39:86:cc:18:e6:bb:ef:2d:d9:53:41:cd:
         cf:92:1b:e0:ba:84:0f:61:95:e2:16:87:71:49:89:af:30:43:
         f7:e4:40:f1:43:e6:56:70:d9:88:7f:5d:41:b1:25:e1:4d:77:
         64:30:02:fe:87:ed:05:69:ae:c6:45:f5:10:c9:47:a5:f2:79:
         34:bc:95:9e:9f:2b:9e:60:03:82:c6:26:79:1c:b0:5a:c9:cf:
         03:80:f8:9c:a7:49:fe:64:d0:42:74:57:15:94:ac:ff:f4:97:
         2b:70:ee:33:17:7a:8d:3f:3f:f3:66:fc:0a:8d:1f:93:e5:01:
         ae:8a:18:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----