Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer
File:                     a3073e85-2b7a-45f5-809d-4c36116cd85c.cer (raw, json)
Hash identifier:          I3P2d4q41KugYYCDPdn/kXKbxNdoSS3ro1vw29fpoFM=
Subject key identifier:   16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858478D23283DBAB5893388E9E830
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 15 Oct 2024 16:39:46 +0000
Certificate not after:    Mon 18 Jan 2027 17:39:46 +0000
Subordinate resources:    AS: 401245
                          IP: 206.225.4.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8d:23:28:3d:ba:b5:89:33:88:e9:e8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 15 16:39:46 2024 GMT
            Not After : Jan 18 17:39:46 2027 GMT
        Subject: CN=a3073e85-2b7a-45f5-809d-4c36116cd85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:31:a3:6d:df:ee:30:83:25:6a:bf:f4:07:
                    cf:d6:28:a1:d0:dd:a2:33:2a:6c:2d:d2:22:e6:c5:
                    49:73:f0:0b:52:42:0d:df:45:27:8f:5d:c7:5c:12:
                    ae:e7:ae:db:bd:6c:99:9a:ab:1e:21:28:78:35:84:
                    b1:41:93:ba:2f:b0:5f:4f:40:8e:b1:3b:1b:3e:65:
                    e8:3b:36:99:9c:d8:a2:ff:ef:71:3b:6b:3e:74:1b:
                    03:7a:14:1e:4c:2d:2c:0c:78:a3:4d:81:98:29:e2:
                    cc:cc:25:7b:72:49:5f:e8:12:e6:b0:df:84:e8:45:
                    03:d2:6c:94:47:bb:13:2f:ec:0d:9e:47:45:fb:41:
                    e7:de:58:ab:1f:1b:a5:f3:73:ae:23:52:54:49:98:
                    8a:74:7e:f3:34:70:44:70:53:62:9f:c4:66:d7:71:
                    8f:9a:e4:26:f5:30:5a:62:4b:12:71:a5:2e:58:e2:
                    37:8c:01:ce:e7:a9:99:4d:41:75:53:1d:02:29:b5:
                    e7:8b:99:e5:52:91:82:3e:92:87:30:cd:23:83:32:
                    bd:0d:6c:c2:2a:c0:cd:f0:ad:b1:4a:c4:db:b6:6c:
                    a8:52:4d:35:53:8c:2e:a5:0f:1e:c7:4f:b2:ec:ec:
                    ce:5a:66:c9:9e:d0:f2:28:81:c1:0c:25:5a:2b:f6:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.4.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401245

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:3a:9c:71:17:f4:81:fc:d9:b2:01:78:5b:8a:b0:d0:7b:
         40:94:1e:74:6f:98:79:99:fe:af:8f:67:9f:de:98:12:51:87:
         6c:7f:bb:f6:99:70:26:85:98:6a:43:de:3f:90:4b:1c:9b:79:
         44:6f:ed:6e:68:35:a8:75:f1:37:6b:15:52:29:b8:1b:c3:5e:
         4e:e5:31:84:63:7f:bf:e8:0c:f7:a6:69:3a:5e:24:26:27:80:
         79:5c:3b:5f:88:df:c4:ea:4e:6a:f5:3c:51:83:62:2b:68:24:
         25:67:0e:10:a3:4f:b3:a6:30:07:90:fb:91:74:27:cb:18:da:
         63:cf:43:08:99:80:37:ec:c7:f9:2b:89:33:88:2f:5a:a6:ea:
         5b:a8:99:10:1a:1c:a4:24:fd:15:3e:cc:85:03:93:7f:53:33:
         1f:e0:0b:7b:fc:aa:79:24:46:a7:2d:db:69:ee:62:3c:37:56:
         8c:a2:63:15:e2:cb:fb:45:e9:a4:45:a2:e9:98:b5:2b:c5:f6:
         ed:87:fd:7a:3b:f5:c1:31:ac:7c:2d:3b:3a:8d:14:6d:04:8a:
         c6:0b:2e:61:d3:dc:67:2b:f8:3d:3e:79:76:d2:7a:b8:73:d1:
         73:6d:a8:95:a6:48:d3:b2:39:71:9b:02:a9:30:01:94:de:1f:
         b6:de:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----