Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600.cer
File:                     a104eebe-1440-46ec-8e49-7cb808ab3600.cer (raw, json)
Hash identifier:          Jy5BWchNmW2q5X4YcMFNX8TgUYFRXcex1EOuQ/zk51s=
Subject key identifier:   A8:83:F4:7E:F8:CD:D4:64:C2:FE:56:EE:40:F7:F5:31:6D:0A:95:CD
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858475882F849FE441C64703CEA00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/a104eebe-1440-46ec-8e49-7cb808ab3600.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Sep 2024 20:14:58 +0000
Certificate not after:    Wed 30 Dec 2026 21:14:58 +0000
Subordinate resources:    AS: 397257
                          AS: 400106
                          IP: 23.174.160.0/23
                          IP: 2605:20c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:58:82:f8:49:fe:44:1c:64:70:3c:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 26 20:14:58 2024 GMT
            Not After : Dec 30 21:14:58 2026 GMT
        Subject: CN=a104eebe-1440-46ec-8e49-7cb808ab3600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:94:8f:03:f4:b6:55:f5:e9:21:58:2e:9a:73:
                    df:20:d4:f0:3e:68:0f:e5:3e:30:d2:23:69:8d:49:
                    78:7c:5d:9b:23:9d:9a:22:c2:0a:64:c5:07:2e:a4:
                    a3:a1:80:11:5d:e0:17:a8:b3:2b:7b:be:a0:80:23:
                    4f:37:50:ac:3d:80:74:9e:d9:6e:24:d9:88:60:70:
                    7b:1f:5b:df:9f:00:d6:8c:1e:8a:d3:7f:52:48:50:
                    09:77:f4:51:8f:88:54:6d:1d:17:f8:df:48:e9:6b:
                    46:16:09:ff:43:dc:ee:1f:85:11:24:8f:22:19:29:
                    56:c1:7d:36:7d:c4:38:ce:62:62:a5:9d:9b:df:f7:
                    00:9b:5b:af:81:99:0e:a6:81:0c:b0:ed:04:01:e5:
                    11:f8:05:13:51:eb:9f:2c:09:2d:f1:76:ff:66:07:
                    7b:53:ec:3b:56:2f:60:e5:20:2d:f6:2b:17:26:3c:
                    13:69:28:50:53:a5:53:63:6a:94:3d:c3:76:bc:15:
                    9b:a1:02:e7:2b:26:1d:0a:6d:be:d3:70:fa:7a:47:
                    30:c1:2b:9d:ad:04:6b:0e:93:2b:c7:c5:54:46:ca:
                    66:99:9b:f4:6d:85:55:4f:13:a9:57:d3:82:43:a8:
                    24:fe:cd:36:82:92:eb:23:03:c5:f6:1e:7d:60:52:
                    f7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:83:F4:7E:F8:CD:D4:64:C2:FE:56:EE:40:F7:F5:31:6D:0A:95:CD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a104eebe-1440-46ec-8e49-7cb808ab3600/a104eebe-1440-46ec-8e49-7cb808ab3600.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.160.0/23
                IPv6:
                  2605:20c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397257
                  400106

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bb:23:9f:d3:59:2c:54:cf:44:6f:bd:08:01:ae:d5:b1:3c:
         46:63:c8:b8:ac:50:92:92:f4:fd:46:85:3c:ab:db:84:13:fb:
         bd:45:8b:f4:d2:82:a3:5b:23:ea:3e:5c:bb:f0:e4:7b:21:d3:
         e8:a8:4f:54:0d:be:c1:7a:52:2d:57:3d:21:ff:14:82:4d:de:
         35:d4:39:f9:6b:28:f4:72:1f:9d:80:01:cf:f1:df:11:7b:43:
         32:35:5a:ba:02:cc:20:67:b8:1c:14:09:08:74:83:65:ed:fb:
         6b:76:7d:12:62:02:02:a8:0b:dd:2d:b0:d1:fe:81:e0:8d:fb:
         d6:31:bc:10:f2:8e:64:36:63:88:3e:e8:09:1a:9a:4c:aa:87:
         25:18:51:6c:65:0e:60:ad:fd:b9:0f:93:f1:73:7b:04:4e:78:
         71:fa:b0:eb:75:f6:ad:e3:a2:1a:a3:e6:5b:60:d1:a0:1f:53:
         86:76:d5:f9:d3:80:4c:81:5b:3e:73:3c:48:53:d2:4e:da:de:
         08:7a:56:8d:53:ea:02:c1:10:6c:7a:b4:d7:d0:a3:9c:2a:a1:
         6e:fc:5b:c7:d8:92:cf:c9:6c:0f:fa:8f:81:18:3b:15:c8:48:
         e0:4c:e3:04:c8:cb:06:b0:35:37:54:61:ee:78:39:13:8a:77:
         b1:df:c0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----