Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677.cer
File:                     a4f253af-de59-456e-9354-4078d22e8677.cer (raw, json)
Hash identifier:          7iLM91UUibK8NjgHF0+cDa8mwzVzBxC068gmhYWBatg=
Subject key identifier:   81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847043CC40C770A771E974E1480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 27 Aug 2024 15:45:37 +0000
Certificate not after:    Mon 30 Nov 2026 16:45:37 +0000
Subordinate resources:    AS: 55031
                          IP: 2607:4240::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:04:3c:c4:0c:77:0a:77:1e:97:4e:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 27 15:45:37 2024 GMT
            Not After : Nov 30 16:45:37 2026 GMT
        Subject: CN=a4f253af-de59-456e-9354-4078d22e8677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:61:09:f1:d8:b4:c2:9f:bc:36:62:37:b0:
                    06:88:ee:4b:7e:9f:f4:fd:c3:73:95:39:4f:61:fa:
                    1d:93:b8:2b:56:f1:2f:d0:d1:72:8f:41:61:ac:23:
                    60:5c:e3:e6:96:9e:12:38:7b:2d:4b:37:a4:b5:92:
                    84:6b:07:9b:5e:83:99:33:b4:16:bb:d1:66:7d:48:
                    c2:b1:7b:83:2b:ca:e5:4f:9a:cb:55:e3:be:94:c7:
                    40:14:37:91:a4:38:83:d3:b6:f1:d0:63:eb:c4:5d:
                    52:e4:4a:7a:41:bd:76:1f:e0:d7:2f:5f:39:85:54:
                    9c:18:1e:be:1f:ac:bc:82:35:fa:02:6a:41:ac:21:
                    c4:d0:8c:3e:a4:a5:32:7b:00:8d:e0:25:fb:1f:b8:
                    fc:50:4f:50:17:50:e5:3b:26:48:87:c4:13:8f:bd:
                    14:83:df:0d:4c:b4:b2:50:2b:b5:12:b2:c0:28:e1:
                    7b:16:2c:94:06:56:fe:be:72:a5:ca:8b:49:c3:94:
                    64:ea:32:38:65:9d:2d:e3:3e:f4:1a:23:c5:4f:84:
                    e7:63:ac:95:76:63:c7:5f:44:ac:32:22:38:a4:91:
                    be:ae:26:32:f9:40:99:82:0f:7e:55:82:a9:0a:a7:
                    ad:1a:a7:c9:af:43:75:e4:1a:a9:d2:f2:be:c8:aa:
                    01:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:27:DB:F0:81:88:E4:39:2A:DF:35:A7:D3:68:47:1F:89:EC:9A:C0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4f253af-de59-456e-9354-4078d22e8677/a4f253af-de59-456e-9354-4078d22e8677.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:4240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55031

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a9:40:d9:9b:87:3b:f3:7f:dc:51:01:76:39:12:6e:e8:41:
         e5:61:aa:1c:1b:b1:01:20:b9:0c:4b:1b:57:7e:92:98:ab:e0:
         84:99:f2:61:34:a6:b4:c4:73:bb:c5:74:42:da:7d:aa:88:1a:
         08:33:e0:65:74:8c:87:7c:e6:25:46:67:7b:41:1a:20:fd:ad:
         b6:28:9e:c0:53:8c:d1:94:5a:92:27:bc:e3:d1:3f:05:ce:19:
         f1:d8:33:68:63:67:bb:c9:7d:98:51:5e:36:22:cb:22:40:ea:
         f7:2d:10:d9:47:89:80:fd:2e:86:ab:46:9e:99:41:65:b0:82:
         2a:c4:f3:45:cf:a4:1b:b5:e1:02:f8:94:8a:29:a5:f7:f8:f7:
         1c:6a:4c:6f:89:eb:a8:0e:b8:28:85:a9:a1:af:6c:3d:6e:d9:
         23:32:30:6c:31:79:6a:d6:4d:a2:aa:8f:f2:55:20:bf:8a:06:
         d1:3f:6c:e6:45:94:b8:ee:5e:b4:b9:c7:d7:34:51:f3:38:8a:
         3c:1a:9f:68:e8:07:c9:b6:28:46:10:f6:9b:36:45:80:00:a1:
         81:b3:9c:5c:3c:e1:84:27:e4:96:8e:fc:5a:95:83:33:64:d6:
         2f:31:37:b9:fb:25:56:9f:4e:a4:70:74:a0:ca:35:e3:3a:ac:
         7e:c9:54:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----