Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b930abf5-ab9b-4d87-84da-f717f266630e.cer
File:                     b930abf5-ab9b-4d87-84da-f717f266630e.cer (raw, json)
Hash identifier:          LSNeyZuebIIWTOSGBUlAJX6XojOS8TcB5+QBnkFBc+M=
Subject key identifier:   64:D6:2D:2F:9E:F0:30:24:35:D6:D8:1E:2C:54:4D:89:D8:3C:03:62
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858475C7B9CE24818BD4AB9E38C80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b930abf5-ab9b-4d87-84da-f717f266630e/b930abf5-ab9b-4d87-84da-f717f266630e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b930abf5-ab9b-4d87-84da-f717f266630e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 28 Sep 2024 06:23:23 +0000
Certificate not after:    Fri 01 Jan 2027 07:23:23 +0000
Subordinate resources:    AS: 30668
                          IP: 198.176.192.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5c:7b:9c:e2:48:18:bd:4a:b9:e3:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 28 06:23:23 2024 GMT
            Not After : Jan  1 07:23:23 2027 GMT
        Subject: CN=b930abf5-ab9b-4d87-84da-f717f266630e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:44:1e:f3:7c:31:36:80:6f:cc:59:e8:72:
                    2c:e0:7a:ad:ce:05:63:d8:9a:89:e2:7c:6e:ce:76:
                    23:ae:59:c5:4d:83:53:65:40:0c:9e:e9:71:3b:e0:
                    ae:a4:43:08:d4:39:1e:7b:a6:e7:7e:a5:ae:ef:b1:
                    a5:c9:1d:f1:5d:11:70:da:86:b3:36:aa:cb:d1:bc:
                    40:3e:94:ce:8a:35:55:b9:f4:a8:9d:5a:cc:50:6c:
                    15:4e:85:d3:82:67:0e:5e:e3:a7:b3:13:2e:17:ab:
                    99:1c:9f:ad:85:12:be:2a:63:8e:63:19:cc:96:4e:
                    01:56:a8:16:3f:d8:85:1e:f6:92:e0:4e:0d:5f:c5:
                    99:af:e3:b6:58:cf:eb:7e:ef:9a:94:58:fd:80:2d:
                    67:f6:5a:04:37:85:21:3c:8c:3d:13:c0:26:22:18:
                    37:75:c0:c6:7f:68:74:10:e0:63:f0:d7:1a:32:e3:
                    de:71:d0:0f:47:74:d9:54:47:eb:35:e4:e0:01:bb:
                    f8:f9:e1:4c:f5:52:74:cb:8b:cf:71:29:fa:b4:7d:
                    59:55:1f:10:77:9e:d8:a2:9c:8b:4c:3a:7e:22:1d:
                    5a:bb:a2:b3:24:52:1b:e0:da:c2:df:32:1b:61:c1:
                    e5:00:de:90:a9:1e:64:b1:a8:1e:2b:4e:90:be:70:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D6:2D:2F:9E:F0:30:24:35:D6:D8:1E:2C:54:4D:89:D8:3C:03:62
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b930abf5-ab9b-4d87-84da-f717f266630e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b930abf5-ab9b-4d87-84da-f717f266630e/b930abf5-ab9b-4d87-84da-f717f266630e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.192.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30668

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:58:1d:20:e3:15:46:69:31:48:10:ed:46:11:5e:19:7d:b3:
         65:f8:b9:7b:13:6d:e8:e2:05:84:22:ae:bc:64:6e:a4:db:31:
         3b:86:81:b7:9b:bc:d3:69:69:89:46:f1:c9:e2:b7:eb:f7:d1:
         04:01:c8:c7:41:fb:47:0c:36:05:0d:bb:0f:5a:15:93:dd:3d:
         e5:31:0e:8c:a6:4e:fd:9a:3b:3e:07:0d:90:cc:d3:42:8d:64:
         42:52:7a:c7:1f:14:03:6f:a7:4a:8d:e9:80:f1:2c:f5:b4:d0:
         71:07:f0:1b:b0:76:56:75:84:e2:80:51:8d:5d:9a:13:8c:ce:
         d6:85:0a:38:e3:38:af:9e:da:d8:63:d3:19:63:c0:7e:e2:8b:
         3d:fe:07:38:94:0a:9d:91:9f:d0:4a:23:d2:ef:77:3f:4d:9d:
         17:9a:30:52:e0:d2:3f:84:2c:76:f9:9a:aa:0a:2e:44:3f:66:
         d6:f9:08:ec:ee:46:07:27:75:16:1c:62:94:26:ba:a6:ae:41:
         8d:d3:26:35:ff:9f:e8:84:28:58:57:76:87:ac:f4:aa:7c:f3:
         46:dc:7f:89:68:63:9a:47:19:cf:4b:96:54:43:6a:1e:77:d4:
         4b:96:bd:4f:88:e5:58:94:68:f9:b0:06:51:a1:39:56:a0:4d:
         70:94:ec:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----