Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026.cer
File:                     a678b84f-a615-4754-9dcb-e51b04125026.cer (raw, json)
Hash identifier:          R+aI8SKwJU5Cf0D1tc+FPDcLXJjBcjBUU2mTMQqHXgo=
Subject key identifier:   D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846F3D1A7ACD38469C82047AB88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Aug 2024 18:36:52 +0000
Certificate not after:    Tue 24 Nov 2026 19:36:52 +0000
Subordinate resources:    AS: 16661
                          IP: 172.83.94.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f3:d1:a7:ac:d3:84:69:c8:20:47:ab:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 21 18:36:52 2024 GMT
            Not After : Nov 24 19:36:52 2026 GMT
        Subject: CN=a678b84f-a615-4754-9dcb-e51b04125026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:4f:70:bd:27:23:ec:bc:01:47:40:77:9b:
                    eb:67:aa:3b:69:5c:f7:63:c1:c7:7b:31:d5:3c:12:
                    ec:9b:d3:fe:38:a2:89:b9:e6:f1:9d:92:5b:0c:da:
                    31:66:b6:d1:f2:f8:fa:97:12:c6:c7:a3:a6:36:9f:
                    21:f6:46:12:f1:1b:fc:d0:36:2f:bd:24:7e:e3:8e:
                    46:26:5d:d2:09:b5:41:1a:1d:45:83:f9:35:6e:55:
                    25:b9:b6:c0:de:cb:7c:c2:81:01:b3:d2:16:d1:a5:
                    3f:b3:f8:8c:55:45:ac:c0:f2:78:07:de:18:c2:f5:
                    9d:0b:63:df:a8:4e:09:4c:6c:c6:a2:98:19:01:a7:
                    9e:a6:cb:5d:8b:28:19:32:a4:8c:32:5b:67:cc:d3:
                    b2:ef:60:aa:05:03:de:a2:c6:57:dd:64:f5:6a:30:
                    f6:08:65:0d:10:b3:85:b7:4b:88:ed:a9:b3:83:fc:
                    dc:b0:14:71:a9:41:d4:8d:35:8f:05:53:99:ba:2a:
                    66:07:b1:04:69:e3:44:90:d7:7a:e1:cb:e4:a8:95:
                    c3:f8:a1:60:24:c4:85:93:4c:85:38:d4:6b:d2:38:
                    e2:78:26:cd:cf:ad:3e:50:4a:b7:aa:2e:9e:3a:ca:
                    32:1e:3d:42:28:28:c9:91:2d:9b:c3:53:83:10:40:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9E:94:40:5E:55:0F:6B:1A:42:B4:FD:DD:48:3D:5C:90:F9:E1:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a678b84f-a615-4754-9dcb-e51b04125026/a678b84f-a615-4754-9dcb-e51b04125026.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.94.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16661

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:98:9e:f2:8c:65:04:d4:d4:3e:ce:cf:0b:c0:88:f8:4a:b5:
         98:85:dd:e4:62:ac:ef:e3:a9:e7:f5:66:c2:ab:4e:92:61:ec:
         8c:c9:a4:f4:ce:f6:dd:9c:61:1c:0d:0a:5c:68:26:df:ae:f0:
         c6:f4:84:32:ca:1c:d9:29:d6:ad:89:1a:b4:53:e4:07:3d:58:
         dd:32:43:30:35:0a:7e:b3:d5:bb:63:0a:95:ba:88:35:9e:17:
         be:18:52:37:ab:37:c8:02:be:50:8e:12:93:55:53:b7:21:6a:
         3f:b5:57:72:ea:27:ae:6c:77:2a:78:d3:ad:fc:b3:17:9f:65:
         6c:32:f0:0e:79:9d:97:51:0a:72:3e:f8:36:d3:bc:60:8a:3f:
         1b:ee:6e:2d:4e:8d:17:8d:20:44:d9:99:99:33:dd:3c:cf:e2:
         81:78:2d:9b:60:7a:99:bc:92:25:b4:b7:16:e4:e9:7e:27:0f:
         9d:89:8a:d5:c3:dd:04:e6:7e:2b:7b:c5:41:25:e4:47:63:31:
         2b:fb:2c:42:c2:41:2e:92:6d:e7:a3:96:d5:b1:6a:eb:1a:9e:
         3d:e3:87:71:ef:2c:2a:a2:f8:db:61:58:a8:26:39:93:95:03:
         ea:2d:b1:c6:5d:24:43:3d:16:52:ba:65:fa:5c:5e:43:3f:5f:
         3b:21:9a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----