Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059.cer
File:                     9b7383ca-74b1-4e8a-b79d-f791e631c059.cer (raw, json)
Hash identifier:          GZ4OFk8L8qmqAstc/aucKwPcCPe16i+iMQhMw7woMJg=
Subject key identifier:   48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847F1665AF8C961FE2A4B96D780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Nov 2024 14:36:00 +0000
Certificate not after:    Tue 23 Feb 2027 14:36:00 +0000
Subordinate resources:    AS: 6550
                          AS: 19615
                          AS: 22056
                          IP: 204.153.8.0/22
                          IP: 209.80.64.0/18
                          IP: 2620:10b:4000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:66:5a:f8:c9:61:fe:2a:4b:96:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 20 14:36:00 2024 GMT
            Not After : Feb 23 14:36:00 2027 GMT
        Subject: CN=9b7383ca-74b1-4e8a-b79d-f791e631c059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:2f:05:89:9e:44:19:b2:e7:0d:20:24:6e:
                    e2:a8:9e:d4:f7:10:de:48:91:c5:46:dc:a6:29:19:
                    13:29:6f:fa:e0:76:bc:1e:83:07:ea:ee:41:b4:9a:
                    36:2d:8a:c9:e3:67:59:ba:76:08:22:dc:8f:13:c2:
                    10:0b:36:bd:13:54:48:0f:90:d1:cf:24:38:a1:ba:
                    35:05:36:43:53:34:cd:fb:c1:07:e1:53:bd:5b:e9:
                    66:b9:c3:fe:fb:fe:cd:85:e0:25:36:bb:b1:63:d0:
                    f8:35:0a:16:79:ba:d1:7d:a2:41:f6:31:85:54:d5:
                    1e:2e:e6:c5:0f:58:e0:59:7d:6c:60:b8:aa:03:2e:
                    44:0c:a5:7f:8e:2d:99:1f:d4:67:83:ce:ab:25:61:
                    58:47:c3:27:3b:a9:6d:19:55:d3:d5:f5:bd:ad:95:
                    83:90:aa:10:d3:15:98:f0:d6:51:5c:04:ba:65:9e:
                    65:23:fe:a6:33:40:03:28:98:06:9e:50:55:22:94:
                    ac:e8:0c:5b:32:83:67:ed:df:e2:4c:5a:63:8b:93:
                    da:b8:4b:c5:f1:2d:bd:d0:aa:74:5f:59:4f:aa:66:
                    05:e6:a5:81:85:a5:d1:19:48:c1:f8:1e:9e:c8:80:
                    d0:a6:e2:c8:59:86:0b:24:f9:68:9f:42:62:ae:e6:
                    7b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DF:BA:BA:AC:06:B3:DE:0D:40:C6:9B:66:06:A9:9A:2E:3B:E1:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9b7383ca-74b1-4e8a-b79d-f791e631c059/9b7383ca-74b1-4e8a-b79d-f791e631c059.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.153.8.0/22
                  209.80.64.0/18
                IPv6:
                  2620:10b:4000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6550
                  19615
                  22056

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:5f:e1:d4:17:36:03:a5:aa:d9:7c:74:5e:20:7e:0c:a5:
         4c:76:d2:50:ea:82:b6:f1:7e:b7:8d:6e:79:88:08:07:40:45:
         7a:fc:ff:ed:4c:7e:7e:ee:e0:ce:1c:92:cb:6f:e7:94:58:08:
         71:5a:b4:f8:5d:b3:ab:7d:fe:cb:f6:c1:6c:94:ea:6d:bf:83:
         6e:46:95:e3:e2:65:08:f6:9a:08:ea:08:ae:1a:07:bd:4c:b4:
         9e:2e:57:e4:1c:42:37:90:45:94:eb:e1:8d:f5:3d:48:eb:05:
         00:1e:0b:a6:a0:e0:f7:ec:dd:c6:2b:61:98:2f:b6:55:5b:bc:
         aa:38:ae:73:18:b4:44:cb:86:32:c8:a7:98:88:7a:cc:39:be:
         2c:57:24:9b:36:2c:ad:e6:ab:8d:76:8d:53:14:ea:a9:25:20:
         43:c0:dd:6a:7c:ef:7c:47:74:bb:99:b9:90:74:7c:2d:ad:57:
         e5:52:23:d4:2b:ab:5b:f0:59:26:92:39:0c:94:b1:55:ac:ba:
         67:fe:af:1d:87:82:01:db:8f:0d:65:d0:97:1a:21:36:8e:2c:
         cd:6c:f1:e5:dd:5f:01:93:b6:4c:95:07:b7:72:d3:bf:35:7a:
         cc:c2:0f:df:7b:24:7e:a0:e7:22:55:7b:16:35:e1:64:f8:75:
         2b:1a:b5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----