Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9f244f1e-f265-427d-8d63-dcf53ce68db5.cer
File:                     9f244f1e-f265-427d-8d63-dcf53ce68db5.cer (raw, json)
Hash identifier:          jnpRykbgStXHSjk5CUR4P5wdM8KCz1GyGL+UAEdbavE=
Subject key identifier:   C1:2E:7E:24:77:A6:29:FE:7E:B1:8C:FB:82:25:EB:92:43:26:1E:47
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584757EB83DECE9B6B693E0C2F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9f244f1e-f265-427d-8d63-dcf53ce68db5/9f244f1e-f265-427d-8d63-dcf53ce68db5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9f244f1e-f265-427d-8d63-dcf53ce68db5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Sep 2024 15:09:49 +0000
Certificate not after:    Wed 30 Dec 2026 16:09:49 +0000
Subordinate resources:    AS: 13446

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:eb:83:de:ce:9b:6b:69:3e:0c:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 26 15:09:49 2024 GMT
            Not After : Dec 30 16:09:49 2026 GMT
        Subject: CN=9f244f1e-f265-427d-8d63-dcf53ce68db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:04:a3:7a:fc:fa:2b:e2:65:73:95:33:5d:58:
                    a9:2a:fc:05:fc:10:cb:82:04:e9:c8:e5:f3:0b:b5:
                    64:77:e3:c8:50:11:f2:6d:e9:51:d3:ff:af:23:18:
                    24:99:67:a1:74:0e:f2:74:e3:a5:7d:1c:0b:93:95:
                    9e:4d:72:bb:49:d1:45:ed:df:65:8b:e4:8b:b3:65:
                    e0:62:77:b1:6e:20:ba:d5:a4:53:37:2b:53:e1:26:
                    e7:81:2b:df:ed:b8:6c:26:b4:3c:ba:03:7a:59:35:
                    e6:61:b7:f2:fd:b4:ac:a8:b7:c2:19:87:1c:c9:4e:
                    43:5d:ce:bd:d8:30:54:b8:54:0a:e4:35:57:2d:41:
                    06:c6:d7:af:45:6c:db:3b:03:a7:d2:6e:8f:60:fa:
                    45:de:c3:d1:be:c1:cd:b3:15:30:31:b8:21:2c:5c:
                    7e:e7:da:d0:cd:95:43:50:67:d9:23:40:eb:44:24:
                    24:a3:82:8a:59:7c:f7:c1:e6:fa:54:f8:46:52:7f:
                    21:be:06:df:c6:a6:e2:ac:3d:4c:2e:c7:69:fb:42:
                    78:90:9a:fc:fa:3b:5b:5d:59:25:6b:21:ea:13:1e:
                    a0:71:d6:e9:28:f6:04:0d:af:8b:85:7f:38:7a:5e:
                    72:8e:c1:fe:fc:ef:9f:7b:46:a5:36:1f:ec:57:89:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2E:7E:24:77:A6:29:FE:7E:B1:8C:FB:82:25:EB:92:43:26:1E:47
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9f244f1e-f265-427d-8d63-dcf53ce68db5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9f244f1e-f265-427d-8d63-dcf53ce68db5/9f244f1e-f265-427d-8d63-dcf53ce68db5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13446

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:36:b6:b0:ed:25:44:21:fd:2f:66:78:da:5f:cb:a0:4d:52:
         d2:3b:7e:de:b2:b6:81:d4:93:23:43:d2:f5:d7:41:e3:a1:f2:
         a3:39:95:e7:c7:b9:e9:3d:77:60:76:df:a0:98:a2:61:8d:dc:
         a9:31:2d:5e:0f:82:79:4f:de:d6:f4:5d:75:03:8f:a1:ee:97:
         52:93:b2:d3:a7:de:9a:d2:5e:7d:b5:1f:67:81:91:48:d6:da:
         26:60:f6:ff:9e:82:96:45:20:f3:bd:10:d2:0c:16:23:ac:79:
         20:a7:c3:9c:d7:b4:4a:46:25:bd:e1:f7:93:33:b2:b2:0f:c6:
         b2:b6:9c:31:81:b4:65:c2:38:7a:57:7d:1a:12:9a:2a:8b:9d:
         31:66:4c:64:12:ff:8a:1f:ca:6c:3e:47:f8:10:65:4f:ae:47:
         1f:eb:d0:33:be:40:c1:7c:fd:19:42:d0:61:1d:f2:97:78:a5:
         30:fe:00:a1:7d:e0:f4:93:50:37:fd:73:ef:bd:cd:99:21:a5:
         da:a8:30:7e:17:dd:73:df:15:1d:48:7d:f1:fc:1e:cd:23:96:
         8f:ce:e1:0f:08:d3:c1:0e:a2:30:76:2a:bb:e2:64:b4:a0:a2:
         17:13:9a:e4:b0:6b:83:b9:61:3e:dd:94:22:34:f0:33:79:e1:
         12:54:f8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----