Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer
File:                     ad013889-a60a-4a2c-a0dd-eb8e8d310919.cer (raw, json)
Hash identifier:          krJPERMT0jgONgxYoUvUacxO/uugBwfAF0bV7aFXyjQ=
Subject key identifier:   FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858472764FF2ED4072FE656C9F580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Sep 2024 05:59:58 +0000
Certificate not after:    Sun 13 Dec 2026 06:59:58 +0000
Subordinate resources:    IP: 98.159.96.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:27:64:ff:2e:d4:07:2f:e6:56:c9:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep  9 05:59:58 2024 GMT
            Not After : Dec 13 06:59:58 2026 GMT
        Subject: CN=ad013889-a60a-4a2c-a0dd-eb8e8d310919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1e:21:35:7c:f8:0c:01:27:b6:27:37:5b:f7:
                    30:7f:12:fe:6e:ee:4d:05:f5:e7:96:d0:f6:9b:62:
                    81:e9:59:4b:6c:1b:11:f0:e3:5d:c1:e1:9e:87:14:
                    79:d9:92:8c:6a:75:98:a3:8e:65:0c:6b:1b:a0:49:
                    4d:e8:92:ed:9f:5d:5b:d5:b2:2c:08:49:b8:6b:65:
                    43:4a:f6:9d:ff:63:cc:30:15:a2:c8:9c:55:3e:26:
                    47:6f:97:21:fe:a3:a1:b8:82:fb:c7:ab:2b:92:95:
                    04:53:04:11:51:cf:50:8a:c4:fb:58:c0:90:db:c1:
                    b0:ea:fb:09:4a:7f:e1:01:16:ef:7e:b7:46:8a:02:
                    c0:0c:be:a0:4d:eb:5c:e7:0f:57:4a:c7:1c:94:d0:
                    c3:cb:39:a3:10:cb:b1:59:ba:1a:e9:53:db:f8:8f:
                    81:2b:c3:11:7a:07:bd:24:25:e4:79:51:a7:88:47:
                    a6:77:6e:c9:b7:97:6d:51:54:3e:4d:bb:95:5e:3b:
                    7d:a8:e7:c3:9c:82:f5:f3:b0:91:63:8b:1b:fa:ce:
                    5f:10:11:c3:ab:e9:cb:87:ea:a1:51:90:f8:86:ea:
                    7c:73:f5:ed:de:a1:c5:6b:ac:40:db:c1:ef:a2:e1:
                    7b:cd:1e:a3:75:44:4f:57:6f:c3:b3:5d:76:ff:c5:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B0:95:34:5C:31:D1:7E:9F:14:DD:5D:2D:92:A0:CC:18:7B:97:B3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad013889-a60a-4a2c-a0dd-eb8e8d310919/ad013889-a60a-4a2c-a0dd-eb8e8d310919.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.159.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:06:7f:f6:b3:6b:ce:ca:f6:a0:48:cf:53:7b:1a:38:7b:
         6c:f8:2b:b6:d8:0f:a8:07:bb:ed:9f:5a:e8:52:7f:0b:e0:52:
         95:2d:72:88:b7:f2:cc:75:89:59:2a:f0:85:21:40:72:a2:2f:
         e4:46:a9:b6:d5:26:df:1b:8f:ed:59:23:53:61:01:53:da:0a:
         f9:3a:55:e5:1a:fa:5f:56:63:c9:55:42:2f:bf:8a:5e:b6:dc:
         61:64:5b:73:e6:4b:f5:fb:a2:04:5f:ff:d9:ff:bd:3a:f6:08:
         bb:1d:52:f9:cd:77:8c:df:b3:01:bd:a9:a6:f0:c9:ac:31:8d:
         c8:16:88:0c:ae:cc:77:c0:da:ad:5a:ed:76:c4:30:37:f2:28:
         be:79:b6:69:88:e2:35:6e:a0:9b:e2:3d:72:eb:ac:fe:86:3f:
         1d:db:c6:d3:f4:aa:d5:dd:bd:86:01:ae:59:b1:d7:c3:51:04:
         f7:dd:8f:19:20:d6:6c:7a:de:e6:dd:0c:49:03:04:8d:54:16:
         02:5a:a0:09:c4:15:75:ae:e4:e1:09:59:73:dc:e6:45:35:a8:
         06:e5:03:1a:ee:cd:24:cc:00:52:94:40:af:36:3d:83:03:a3:
         bc:af:84:40:19:82:4f:50:91:d0:74:c1:19:ac:d8:d9:9b:6a:
         79:e5:13:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----