Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0.cer
File:                     b6a80224-d488-4712-8f22-4b27aaeb45a0.cer (raw, json)
Hash identifier:          GjasUVJodVgzjlZvj2KTQsi7pGxt/rhehWE8eMsG/q0=
Subject key identifier:   44:B2:40:AB:A9:63:62:93:C3:F6:D2:9B:B8:A4:02:CF:30:12:B5:4A
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584707E0765FFC609E04E23A9E40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/b6a80224-d488-4712-8f22-4b27aaeb45a0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 28 Aug 2024 23:02:52 +0000
Certificate not after:    Wed 02 Dec 2026 00:02:52 +0000
Subordinate resources:    AS: 33419
                          IP: 204.11.108.0/22
                          IP: 2620:100:d000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:07:e0:76:5f:fc:60:9e:04:e2:3a:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 28 23:02:52 2024 GMT
            Not After : Dec  2 00:02:52 2026 GMT
        Subject: CN=b6a80224-d488-4712-8f22-4b27aaeb45a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:12:1c:26:ef:08:09:6d:3e:1b:c0:f6:39:5b:
                    84:de:92:1d:8c:55:bb:27:66:23:be:68:1f:a2:51:
                    5a:26:f9:c3:46:a2:c1:b9:e2:24:b1:74:cd:d9:aa:
                    f4:7c:1e:53:59:0f:6a:d2:1a:0f:8e:2f:fa:c6:54:
                    61:80:51:fb:fe:d1:73:30:e0:41:53:41:02:da:cd:
                    a0:ab:46:a2:6e:d6:a3:da:63:fc:89:91:48:3a:21:
                    28:d7:bf:57:76:8a:fe:c3:ac:fe:ee:59:22:eb:cf:
                    70:a7:80:d7:6e:db:3a:8a:8a:b6:97:e4:d0:eb:4b:
                    eb:45:a3:ac:e5:43:d4:5c:b2:74:e8:77:02:cb:b7:
                    f2:ac:0c:cf:96:6e:05:6d:9d:c0:5d:3a:ea:0c:96:
                    cb:fe:ea:32:55:7e:52:88:e1:b3:3e:93:2b:e5:29:
                    9e:4e:a7:f6:06:fe:fe:4b:df:62:a6:c9:e8:8e:35:
                    58:9c:70:db:0a:93:cb:ed:84:53:ff:14:81:21:cb:
                    2b:48:c2:11:be:e0:33:15:6a:17:a7:0c:e8:90:65:
                    3a:72:95:be:7b:67:21:91:49:ef:ab:4d:48:87:69:
                    a8:0e:bb:9a:6f:a0:ce:75:47:2e:e8:a7:76:7f:62:
                    f9:35:d7:11:b8:b7:e0:01:71:6c:db:00:63:15:e1:
                    f1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B2:40:AB:A9:63:62:93:C3:F6:D2:9B:B8:A4:02:CF:30:12:B5:4A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b6a80224-d488-4712-8f22-4b27aaeb45a0/b6a80224-d488-4712-8f22-4b27aaeb45a0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.108.0/22
                IPv6:
                  2620:100:d000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33419

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:43:46:13:3f:88:6b:02:f9:04:11:78:26:52:97:e0:21:1c:
         8c:5c:bf:d5:4b:d4:06:aa:56:f7:8b:26:66:26:f5:90:43:f1:
         d9:37:09:4c:94:36:be:f7:41:d6:97:e2:af:74:03:34:b6:73:
         81:e3:b1:13:4c:ac:bf:4a:6c:66:cc:31:a6:b1:ce:5d:1d:b6:
         2a:59:c0:fa:84:19:a3:61:14:60:f3:4b:2a:0b:fe:b3:db:1e:
         09:34:0c:6d:57:4e:61:00:69:b1:12:c0:d9:5c:48:09:da:b1:
         cc:09:52:45:c9:b1:a6:b6:c1:61:bf:a3:ed:30:38:4c:7a:73:
         cc:72:56:88:38:0c:71:b1:e8:7a:4d:d6:10:9b:d4:40:61:ca:
         03:66:42:5a:d6:f6:6a:60:da:e1:4b:86:16:2d:b3:8b:91:c8:
         9e:03:1d:2b:13:7d:c0:9d:b2:c6:bf:13:cf:e3:10:c3:d2:07:
         4e:b5:b6:87:02:47:ac:2c:84:99:86:98:cb:0c:31:4d:98:75:
         fa:6a:7a:b6:0d:8b:fb:73:6f:bc:9a:70:f0:f1:09:84:b1:c1:
         60:46:65:59:3f:18:35:47:41:37:77:5a:cd:f3:11:30:e2:45:
         75:67:94:88:50:07:2d:2d:4a:92:36:90:fb:00:70:6b:c9:08:
         07:7e:47:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----