Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646.cer
File:                     9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646.cer (raw, json)
Hash identifier:          uRAdzlZyhItVES3IBZmD2Xlg4Lqe2Z8aPtxjcD2VY4I=
Subject key identifier:   2D:43:F6:D8:5A:87:BE:4A:CF:E0:D4:51:56:55:E8:16:31:23:5B:06
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846DDACF56FF08DD62BD1A22B10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 13 Aug 2024 20:15:09 +0000
Certificate not after:    Mon 16 Nov 2026 21:15:09 +0000
Subordinate resources:    AS: 33381

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:dd:ac:f5:6f:f0:8d:d6:2b:d1:a2:2b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 13 20:15:09 2024 GMT
            Not After : Nov 16 21:15:09 2026 GMT
        Subject: CN=9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:f6:27:0f:49:99:fb:10:c0:8c:79:04:3d:
                    9d:dc:8c:25:67:69:0c:60:a5:ca:53:c5:5d:97:4b:
                    0d:a3:bb:a5:c0:d4:b7:d5:47:c6:32:79:89:0a:78:
                    d0:3e:35:35:ed:08:e8:69:19:f2:ae:47:3a:59:f1:
                    de:ff:36:0a:62:d4:28:78:fe:25:73:17:13:b3:6a:
                    5e:3d:e2:84:f1:53:86:ae:bf:f1:18:0d:a8:de:c2:
                    f4:cb:04:12:b2:02:f1:75:d9:0b:ee:ae:44:6f:f9:
                    ad:67:4e:d0:79:25:40:b5:8b:83:44:91:4f:89:fe:
                    e6:27:df:8b:fa:76:e4:da:b9:69:34:a8:45:e4:b1:
                    6e:45:01:e7:21:f1:f1:1f:b5:a6:ea:3d:08:7e:e9:
                    08:f3:2a:1e:20:bb:45:43:a2:dc:e7:91:64:8c:d6:
                    83:2b:c0:07:97:7e:97:b3:61:89:5a:8c:4f:24:9c:
                    ff:05:81:04:1b:06:bd:a3:05:65:5d:43:48:1a:de:
                    bc:12:51:88:25:d2:57:e4:2a:16:24:c2:ea:63:24:
                    a5:8b:c3:ee:6a:4d:3d:af:b9:f3:bb:1f:a9:d6:5b:
                    31:1e:06:b0:45:e9:9d:45:94:df:a5:ab:e2:09:69:
                    68:10:df:a7:bb:f4:64:15:41:a5:50:df:d6:92:e4:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:43:F6:D8:5A:87:BE:4A:CF:E0:D4:51:56:55:E8:16:31:23:5B:06
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646/9a7cf5e9-6a61-4ab3-affc-a5ec17ac3646.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33381

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:52:a4:b2:62:74:c1:ea:ac:e3:10:91:5e:2f:8f:a7:63:36:
         1d:6f:af:d0:39:78:8e:24:e3:fe:a0:a1:32:1d:89:b2:d9:7e:
         b4:b3:25:8d:a5:87:21:9f:78:38:03:dd:0b:ac:b4:46:20:6a:
         08:87:5f:c2:a1:cd:7d:31:2d:7d:a8:a6:48:80:ab:4a:ec:33:
         76:ac:79:d5:f9:a9:f3:12:dc:83:70:00:8c:95:cd:86:50:e2:
         42:c1:4c:21:bb:d7:12:95:a1:6b:af:47:14:c7:25:d0:94:61:
         59:0f:d0:95:d6:40:d5:27:51:10:ad:60:1e:fd:1a:7f:ef:d6:
         7f:f0:35:3d:90:6f:db:68:71:7d:c3:14:d7:cd:c0:87:0d:5d:
         47:91:69:f6:bb:92:67:98:60:67:21:c4:4b:1e:0e:99:21:8c:
         a5:72:fa:31:cf:60:04:70:e5:38:6a:57:bd:1b:e4:1a:7d:e9:
         90:bb:be:96:db:6c:4e:82:b0:79:8c:7c:39:33:0f:19:0f:f1:
         9b:d4:43:83:6e:b4:49:07:1f:e3:60:64:12:eb:fb:17:30:4f:
         b5:68:51:86:cf:5f:d1:e3:2e:3f:f5:78:fb:8c:4d:c6:4e:46:
         03:ce:ec:5f:1f:12:cc:96:af:8e:7e:ca:e9:a3:c3:c6:49:60:
         f2:9a:24:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----