Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer
File:                     afb3511b-f1b6-44ad-9c36-f6576a5400df.cer (raw, json)
Hash identifier:          v5TKJfEIigA2EaqAAP8K+AoTk7mfPRmBlFWzEW7IOdE=
Subject key identifier:   9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847D8BF28B3B03B10418CA3E000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Nov 2024 18:39:43 +0000
Certificate not after:    Sun 14 Feb 2027 18:39:43 +0000
Subordinate resources:    AS: 399995
                          IP: 199.5.163.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:bf:28:b3:b0:3b:10:41:8c:a3:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 11 18:39:43 2024 GMT
            Not After : Feb 14 18:39:43 2027 GMT
        Subject: CN=afb3511b-f1b6-44ad-9c36-f6576a5400df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:e6:a8:22:b8:f8:2c:af:5c:4e:c3:79:ef:
                    1e:ed:2d:c8:b0:13:3a:a6:60:95:49:bf:1d:52:ac:
                    02:32:78:c9:e9:eb:cf:63:26:e9:9a:c8:e7:ca:54:
                    b6:67:42:50:0c:a9:9b:aa:7c:5c:5f:5f:df:21:c2:
                    56:14:56:aa:ca:76:f3:71:5d:b7:4a:62:93:8d:8c:
                    13:b3:d2:01:07:0a:9d:7d:0e:fb:41:8e:28:fe:f0:
                    3a:40:51:ce:b7:49:17:10:85:22:c2:2f:3d:09:f1:
                    6a:c3:43:c2:18:bc:46:4f:b7:4f:50:ed:05:ec:1e:
                    58:4e:af:71:55:23:da:cb:eb:17:c0:88:27:ec:e6:
                    8a:17:ee:72:db:20:a5:d2:36:3f:81:82:de:f8:66:
                    d4:be:dd:5d:e2:21:01:de:f0:89:d4:49:96:28:3e:
                    3e:3e:d5:37:e5:6f:4d:e7:ee:74:dc:e5:48:0e:5d:
                    38:ab:05:a8:e2:8b:72:78:e5:44:f3:d1:2c:d9:ef:
                    18:7e:f2:63:b2:0b:44:e0:c2:ee:94:31:bc:08:96:
                    8d:3e:56:5d:fc:c2:8d:0f:ff:28:11:0d:67:af:de:
                    21:9b:99:1d:f0:2d:ff:06:be:6c:80:c0:7c:75:16:
                    f1:71:df:65:ec:5c:91:dc:1a:01:5e:a1:09:70:e3:
                    e7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.163.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399995

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:69:a6:98:ee:04:58:f4:1d:1a:84:66:7a:3f:22:ba:fa:5f:
         70:e9:97:1b:82:76:b8:62:76:e3:24:b5:2f:61:39:3f:2e:d1:
         b2:54:73:91:cb:9e:a9:a6:52:ab:e7:7e:7d:80:d0:74:e4:68:
         fc:eb:32:32:dc:2a:c8:be:56:cc:6f:df:a7:45:cd:44:bd:09:
         0a:3f:0f:02:23:a4:0d:31:0b:bf:6b:41:bb:15:00:3f:e9:3b:
         38:45:e5:9d:4a:67:34:ac:a9:d8:cf:8b:8c:1a:73:62:dc:fd:
         8d:da:52:80:4f:dd:c4:bd:bc:73:2b:29:fd:77:f0:ae:70:34:
         06:2b:e6:61:d5:21:10:9b:aa:7a:40:33:66:f4:ef:88:fe:58:
         97:0c:29:97:35:c0:f4:fa:0b:d4:3e:34:24:4f:d3:18:9c:9f:
         83:57:a8:e6:48:32:ff:98:f9:1d:df:eb:7b:36:5a:26:34:53:
         ac:d2:15:aa:5e:ad:b1:d0:d1:2e:af:2b:1d:72:f0:e1:50:67:
         4f:a2:49:63:b8:28:58:67:82:bd:50:e7:02:a8:46:4f:51:17:
         fa:9e:86:91:9d:93:03:53:e3:58:25:fb:a0:a1:4b:50:6b:87:
         81:76:ca:a3:bf:27:4d:9d:a1:61:99:59:88:ec:09:36:9a:7d:
         14:35:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----