Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5.cer
File:                     9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5.cer (raw, json)
Hash identifier:          IlsOjQeeoTS0TRjCbI94aYe+ooP9Q7UK6kbYyXhi8XI=
Subject key identifier:   6A:5F:E4:F2:92:5F:46:BD:50:3D:BE:48:2A:1F:2B:7B:90:F9:D7:B9
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847588609B5FF381C643160F480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Sep 2024 20:21:09 +0000
Certificate not after:    Wed 30 Dec 2026 21:21:09 +0000
Subordinate resources:    AS: 26693
                          IP: 216.122.0.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:58:86:09:b5:ff:38:1c:64:31:60:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 26 20:21:09 2024 GMT
            Not After : Dec 30 21:21:09 2026 GMT
        Subject: CN=9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5a:78:b3:3f:59:a1:d3:15:69:4a:23:3b:5f:
                    eb:63:26:8d:55:13:20:3f:55:cd:1e:10:c4:2a:9f:
                    50:cd:62:67:c2:ac:3b:d8:59:ce:ca:1a:5f:c9:c3:
                    ed:cb:ff:29:be:06:e6:73:6b:71:94:f5:5d:cf:e8:
                    bc:c4:0f:ac:c8:e1:f2:95:58:ab:b3:c1:61:8e:77:
                    d1:82:59:22:46:99:f5:e1:c1:d4:50:db:ad:0f:c0:
                    46:14:1a:16:f1:00:1d:47:62:25:e3:8c:b0:be:a6:
                    77:91:0c:31:74:e9:fc:68:0b:43:7b:9d:d2:bb:8b:
                    38:6f:76:f4:18:5b:22:e1:3f:b7:f8:6c:14:a5:0c:
                    67:ac:d4:5b:ac:1c:13:1f:69:7e:96:0d:d9:76:ab:
                    96:c8:b4:4a:43:7b:37:bf:6b:e9:34:6e:1b:2c:21:
                    f7:5a:6c:d4:67:61:0f:a9:28:59:b1:94:32:95:e3:
                    b3:22:ab:79:7e:a5:6d:28:9b:14:54:a1:36:fe:30:
                    14:eb:16:fa:bc:31:32:2d:6f:5f:49:d9:cc:b7:99:
                    6e:12:8e:75:a7:0d:b2:89:22:20:fc:a3:4a:db:cf:
                    bd:f6:93:49:a6:f4:34:46:d0:64:4c:7b:40:e9:ed:
                    06:26:74:2f:82:80:8c:c4:a6:bc:b0:f9:40:d5:38:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5F:E4:F2:92:5F:46:BD:50:3D:BE:48:2A:1F:2B:7B:90:F9:D7:B9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.0.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26693

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:20:b0:ba:8d:06:de:7a:47:ef:9e:f6:77:5a:f6:07:e6:68:
         8f:41:ac:de:fe:84:ad:e5:ee:b2:3a:30:67:d5:12:da:1d:1b:
         69:e4:5c:49:13:d6:5b:b6:da:73:88:91:9c:35:c3:9b:5c:69:
         a5:3a:8c:d0:a1:9c:65:1f:15:8b:c4:2b:38:c6:44:38:88:b3:
         80:6e:4b:cc:d5:31:f3:da:fb:bb:da:93:f9:d3:29:2f:24:a1:
         47:32:e0:ce:ec:31:91:19:bf:64:ed:87:fe:86:3c:6d:ef:68:
         f0:11:95:6e:34:60:07:9b:56:85:df:0a:bb:34:b4:90:51:4f:
         a5:ab:b6:ba:d3:77:66:28:5d:89:97:44:50:ab:4d:10:be:63:
         60:72:18:bf:e7:87:a2:50:ba:6d:fe:2d:d4:0f:e6:66:bf:a9:
         51:af:17:f8:56:ab:3c:ed:ce:3e:91:64:b4:2d:f0:be:cb:a0:
         6c:18:bd:d5:4c:a2:89:ca:0f:bd:f3:e5:9b:6b:98:f2:a2:3d:
         10:13:c1:70:d4:ad:19:94:fa:59:f7:f6:7c:ba:01:fb:7b:fc:
         f4:57:4f:a1:65:dc:2d:3f:e3:45:7e:a1:69:3d:61:c5:3e:7c:
         a6:d0:6f:f3:f3:32:77:f0:dd:5f:40:6d:ba:b7:6d:41:6e:84:
         7b:89:93:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----