Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer
File:                     bae37f5b-cfe2-4aed-8616-9997d3f2f0af.cer (raw, json)
Hash identifier:          1/I57uhsCc8hn9GFlo83bf77GU7eu4cbtSvPIwR1VoQ=
Subject key identifier:   EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847F7E2B7FA54F2F3F244589650
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 22 Nov 2024 22:21:25 +0000
Certificate not after:    Thu 25 Feb 2027 14:34:10 +0000
Subordinate resources:    AS: 401507
                          IP: 23.129.212.0/24
                          IP: 2602:f78a::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f7:e2:b7:fa:54:f2:f3:f2:44:58:96:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 22 22:21:25 2024 GMT
            Not After : Feb 25 14:34:10 2027 GMT
        Subject: CN=bae37f5b-cfe2-4aed-8616-9997d3f2f0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:af:86:cd:d9:49:bd:bb:3f:27:3f:a0:ac:fc:
                    f5:75:1c:64:06:7d:cb:bc:af:6b:ea:74:3e:c1:e5:
                    7b:be:f2:70:b9:97:62:22:dd:39:f1:ce:18:c4:05:
                    ef:b5:52:40:4b:76:d4:25:e5:d9:30:92:15:4b:f9:
                    cd:2f:d8:63:e3:cb:52:2a:a0:6b:ab:f7:e3:a5:d4:
                    f5:76:ba:03:9f:1d:2c:97:e7:94:e8:81:94:44:d8:
                    79:37:b8:59:3c:b5:ea:d8:46:2a:ff:0d:c7:de:16:
                    58:53:85:32:6d:1a:f7:81:d2:e6:ea:43:04:f5:9c:
                    d5:b4:e2:c6:ae:0f:28:d9:97:9a:bb:d2:2d:4a:78:
                    c6:c7:d9:de:c0:e7:ba:33:73:30:20:c6:64:2e:f2:
                    bd:ce:d3:7b:14:b5:94:f6:62:19:8f:d5:a1:cd:14:
                    92:26:1b:32:12:26:58:59:73:b4:4c:6b:75:e0:b6:
                    08:0e:92:f0:f5:12:00:21:15:25:b5:bb:8b:6f:7b:
                    ba:ba:a0:e7:c9:0e:5f:61:a4:2d:7b:b4:2b:e5:ef:
                    d6:a7:5b:09:e6:7e:35:52:bb:74:3a:aa:d2:a8:0e:
                    56:48:4e:d5:e9:c3:1d:2d:a2:a3:6b:d4:a0:80:67:
                    17:01:1a:a1:f3:59:ee:89:1c:76:97:63:71:55:34:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5F:90:B6:60:D6:08:E7:BA:F3:3C:A5:93:E0:A2:7A:43:CB:E7:2B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bae37f5b-cfe2-4aed-8616-9997d3f2f0af/bae37f5b-cfe2-4aed-8616-9997d3f2f0af.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.212.0/24
                IPv6:
                  2602:f78a::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401507

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:19:aa:b7:3b:5f:20:97:d1:19:77:05:96:97:0f:a4:6f:09:
         c5:5c:43:20:16:2d:1f:29:3d:ba:1f:64:be:3f:94:28:2d:75:
         a6:6d:d2:40:f4:53:ff:c7:7a:21:82:14:3a:24:25:85:bb:25:
         6b:6e:74:d6:6a:7d:5b:ae:ea:96:06:1b:7a:b1:41:e4:65:e9:
         bb:d9:a1:c8:94:98:ca:4a:8d:67:f3:76:00:94:fd:4b:8d:7e:
         a1:ad:61:02:ef:3e:88:a0:2d:3e:c3:7c:88:c4:0a:24:41:ce:
         fa:bf:d7:25:e5:ce:1a:93:b9:db:d5:b0:77:d5:70:cc:f2:58:
         70:c3:73:18:cf:4a:af:1d:f1:12:4e:2d:5d:12:5e:d0:6b:95:
         18:6b:07:40:ca:5a:ac:c7:5c:7a:7d:bb:56:69:1e:65:83:1f:
         14:2c:1d:34:42:9a:3d:80:8a:64:59:22:ab:1c:31:55:b6:1d:
         bd:4e:7b:36:d6:4b:83:ae:d0:4c:90:75:66:3d:0e:db:4b:b2:
         33:0f:8a:99:a7:c1:f0:33:96:32:ee:1b:05:37:d8:d6:23:11:
         95:82:54:e7:7b:3b:f8:15:48:b5:ee:1c:a8:1c:d8:fc:44:52:
         1b:f1:c0:b1:c1:e8:a6:a0:97:91:02:94:ec:8e:26:17:90:32:
         11:61:fa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----