Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer
File:                     997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer (raw, json)
Hash identifier:          4RiCU3qZb882Dzh7pNYnBmTyjiMna/jXNmIIdWOR5F0=
Subject key identifier:   39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858478AE907F5410029FC3E6F1460
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 14 Oct 2024 21:31:02 +0000
Certificate not after:    Sun 17 Jan 2027 22:31:02 +0000
Subordinate resources:    IP: 140.235.168.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8a:e9:07:f5:41:00:29:fc:3e:6f:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 14 21:31:02 2024 GMT
            Not After : Jan 17 22:31:02 2027 GMT
        Subject: CN=997dfd51-5907-4d93-8ce3-05b9bc754eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:d9:32:5f:83:c9:21:52:02:22:b4:7d:27:
                    95:e3:9f:5d:a9:7f:a6:59:d3:18:87:b8:7a:5e:a5:
                    38:dc:da:1e:4b:6c:41:55:53:29:04:cc:5a:4e:1a:
                    6c:76:bf:9e:64:e1:d6:33:5b:c7:ce:df:26:da:dd:
                    7d:18:8c:e4:52:92:88:18:eb:bd:9d:93:f9:a3:41:
                    b4:34:ac:e5:1b:cb:b5:ae:9e:79:6d:63:79:6e:1b:
                    e2:14:8c:d8:f3:58:68:cd:af:86:b1:af:28:1a:a4:
                    3c:66:9b:84:31:c4:72:fd:f1:c4:4b:af:a8:65:09:
                    c9:44:af:c2:f1:32:42:7d:5c:dc:7d:77:f3:a0:05:
                    8d:b8:ad:e9:ec:71:fb:fd:e1:9e:9d:48:cb:97:c4:
                    6a:2d:54:b2:20:4d:90:97:dd:82:8d:78:be:0a:d0:
                    c7:a7:e1:06:b1:f9:68:38:e8:46:2e:1e:01:66:12:
                    5d:17:5f:80:50:d7:da:46:49:e7:c8:1f:75:ad:d2:
                    c3:0d:2c:8a:e3:a0:af:78:94:a1:58:81:b6:a4:86:
                    b2:13:4e:91:92:23:d2:01:e6:b2:c6:53:e1:55:2f:
                    ac:b3:6b:48:c9:1a:e4:ff:88:8b:3c:44:31:51:65:
                    01:c4:a2:fd:13:38:fb:95:c7:96:ba:a6:1a:c5:32:
                    26:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:7e:a2:36:5f:35:d4:49:90:22:dc:76:e7:96:52:cc:b5:a5:
         13:01:44:04:03:26:e7:55:43:d5:fb:f1:22:d4:a7:a2:72:31:
         b5:85:c2:59:52:45:b6:ae:f3:20:2d:8d:f9:a6:04:3b:98:4d:
         f3:4f:ca:2c:ae:09:40:e8:86:08:c4:32:13:a6:b0:57:bf:14:
         d9:bd:44:6e:27:cc:6f:5d:b2:42:6a:da:45:24:cf:68:c4:61:
         ea:0d:b3:1d:23:b1:f6:46:1a:61:61:fb:b5:34:25:75:ff:04:
         d9:00:fa:fa:83:ad:03:0f:4d:f2:cb:46:c5:3b:df:ae:4b:6c:
         6a:2c:19:0d:5f:95:93:0c:03:d9:0b:fb:c4:0c:fe:f8:a2:9d:
         43:8a:c1:98:62:6b:4d:bd:72:12:09:d9:81:80:2f:dd:a2:7c:
         76:25:3f:81:e6:1a:47:30:bb:75:fe:43:b4:ff:52:20:ba:39:
         f1:48:50:6d:09:93:c2:98:78:81:dc:ab:2f:c6:ed:eb:8d:22:
         0d:8b:06:09:2c:28:5b:54:a7:e9:bb:c0:28:4e:f0:eb:fd:08:
         11:53:85:10:42:5d:c5:77:e5:19:8d:bd:8f:f7:71:46:2b:8b:
         9a:65:55:7d:11:3c:a4:97:26:20:e4:32:e8:df:06:3e:63:2b:
         18:e4:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----