Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer
File:                     ad697a12-b25f-4a7b-8c14-097935c18e5b.cer (raw, json)
Hash identifier:          ZER8dFlLxPiUkIN3AHxPuHH7AQZ52yQcKK4uOfNDkdQ=
Subject key identifier:   C4:09:D9:07:5A:4B:0E:66:CF:34:3D:CC:88:C3:80:97:80:4C:D5:C1
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584733211571CFA35A30853B4800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 13 Sep 2024 10:52:50 +0000
Certificate not after:    Thu 17 Dec 2026 11:52:50 +0000
Subordinate resources:    IP: 23.189.136.0/24
                          IP: 2602:f807::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:21:15:71:cf:a3:5a:30:85:3b:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 13 10:52:50 2024 GMT
            Not After : Dec 17 11:52:50 2026 GMT
        Subject: CN=ad697a12-b25f-4a7b-8c14-097935c18e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:39:8a:3a:1a:9f:81:f2:a2:18:51:c7:62:
                    71:63:2b:a1:26:4e:b6:4d:4e:db:35:87:d3:92:d7:
                    59:bc:26:78:87:6f:05:b3:ff:07:9a:34:64:6a:9a:
                    2f:1c:25:bc:4e:40:d8:51:45:f3:28:f9:e5:3e:99:
                    41:16:ce:66:11:79:7f:f2:08:80:32:0c:ff:aa:52:
                    af:0a:9d:f2:bc:f9:5b:03:16:b3:90:9d:9e:7f:60:
                    0b:d5:35:5d:e4:d7:06:62:d2:18:5b:cd:91:8e:2a:
                    68:22:d1:36:bc:07:ed:4a:87:16:19:4e:56:da:a0:
                    49:65:71:2a:06:db:02:c1:11:e2:4e:7b:87:ad:54:
                    ca:e2:9e:c2:c0:6f:20:63:49:c0:b7:d2:6d:5a:1f:
                    43:7e:0f:99:f8:2e:ea:86:e5:f5:7c:f1:b2:88:75:
                    a6:b7:bc:7d:e1:ad:6e:f4:93:cf:93:22:ba:44:04:
                    cd:9a:4b:8f:b7:00:e1:a8:81:b5:29:31:2a:15:c8:
                    18:7a:a8:82:a8:f4:f1:64:e7:6d:f8:17:4a:3f:e5:
                    03:db:4b:89:19:34:1f:77:d4:33:65:4e:63:66:69:
                    21:28:f6:8d:3f:17:41:2d:91:69:6c:86:bf:f7:24:
                    ff:f5:7a:d3:12:27:5e:6d:84:a7:b4:bb:fa:03:b1:
                    4e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:09:D9:07:5A:4B:0E:66:CF:34:3D:CC:88:C3:80:97:80:4C:D5:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.136.0/24
                IPv6:
                  2602:f807::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f8:d6:c5:2d:d9:82:a3:fb:b5:73:14:b3:b0:29:96:22:8a:
         67:10:60:d9:88:3a:96:1d:7a:f9:2d:6d:a4:40:e0:88:d4:94:
         93:1a:37:d3:bc:ee:04:77:fc:3f:79:72:85:60:0f:b6:dd:54:
         35:aa:db:ba:1c:08:34:05:ce:b2:8c:19:9b:d3:e9:73:b2:f0:
         2e:a8:f4:fe:be:d9:7f:4b:4e:53:c4:4c:bb:25:88:67:9a:ac:
         cc:db:44:ea:d4:65:15:85:ba:36:ae:98:96:32:cd:fa:c0:f3:
         02:33:62:32:7f:fd:85:a3:2d:4a:0e:73:5a:d1:dc:20:e1:13:
         2f:15:af:db:6e:5a:fe:7c:6a:fb:06:dd:54:fd:93:ad:a5:71:
         04:d4:16:a9:01:88:6d:e7:95:af:a3:69:b7:5f:72:24:5c:b5:
         7e:cf:4e:27:df:59:18:ec:1b:5a:50:b2:28:50:0e:23:65:1c:
         bb:89:d9:b6:2a:ac:62:55:23:56:3a:38:6a:6a:19:26:bf:d6:
         9a:61:28:15:14:40:b2:61:1b:60:f8:7f:37:47:e6:27:3d:e2:
         87:b5:a4:c1:aa:6b:ea:66:16:b8:d1:e7:e7:0f:5a:d7:ef:c6:
         ce:5d:53:62:2a:3d:ca:25:37:5e:f3:08:7b:3d:5c:2c:d4:76:
         45:4b:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----