Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9.cer
File:                     bcb20664-51b2-4919-9c78-27ce58e571d9.cer (raw, json)
Hash identifier:          0bnKgPsT/gSrHgvVYSNElYkZb1skisytF3RbLBO3gjo=
Subject key identifier:   22:02:C5:3C:A1:BA:E9:97:2F:1D:BD:D2:19:05:40:C5:7C:AC:A2:DF
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847F78E21E08D41E605D2506180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/bcb20664-51b2-4919-9c78-27ce58e571d9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 22 Nov 2024 19:30:59 +0000
Certificate not after:    Thu 25 Feb 2027 19:30:59 +0000
Subordinate resources:    AS: 394462
                          IP: 204.69.221.0/24
                          IP: 2602:f970::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f7:8e:21:e0:8d:41:e6:05:d2:50:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 22 19:30:59 2024 GMT
            Not After : Feb 25 19:30:59 2027 GMT
        Subject: CN=bcb20664-51b2-4919-9c78-27ce58e571d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:f8:8b:df:99:b4:36:aa:d9:ee:73:06:4d:
                    c4:0c:aa:3d:10:f3:d0:2f:9a:51:6e:80:87:a9:51:
                    1d:53:71:6e:c2:fa:d9:26:df:0e:cd:fb:9a:74:ef:
                    1b:da:48:6b:34:84:a1:77:91:64:a0:af:39:43:ac:
                    f2:4a:cf:fe:cc:0c:14:a1:90:2f:c3:1e:2c:2f:61:
                    e3:42:60:a7:66:f8:ca:7e:74:e8:7b:73:0a:14:e3:
                    22:53:47:ed:fc:b8:b7:94:b7:0e:38:20:aa:98:99:
                    6c:6a:c2:51:10:e2:d2:fe:35:12:32:68:d5:94:10:
                    ad:05:8c:1f:76:30:fa:47:53:45:ff:69:67:33:f0:
                    53:70:93:eb:ec:01:a4:50:4d:81:9b:bb:d7:10:df:
                    c3:f5:de:2d:48:47:83:cd:30:95:a6:aa:a8:36:bc:
                    99:9d:2a:17:fb:c4:d2:9b:b4:38:de:f0:19:af:3b:
                    a4:47:96:4b:00:09:5a:4e:36:35:45:49:c3:7e:2b:
                    df:91:95:4f:d7:a1:82:e0:40:01:a9:f7:12:41:16:
                    1d:93:a7:17:18:8c:30:7c:64:bd:d3:cc:cb:ee:7c:
                    2b:bb:29:d6:08:5c:e9:03:0d:a7:9a:8d:da:89:77:
                    c5:10:b4:04:ca:e5:24:de:6b:35:f2:9c:cb:94:88:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:02:C5:3C:A1:BA:E9:97:2F:1D:BD:D2:19:05:40:C5:7C:AC:A2:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bcb20664-51b2-4919-9c78-27ce58e571d9/bcb20664-51b2-4919-9c78-27ce58e571d9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.221.0/24
                IPv6:
                  2602:f970::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394462

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:1c:ed:cb:ce:7f:c1:54:76:58:0f:e2:4d:35:0d:8a:a0:36:
         e2:52:75:42:66:c4:78:08:b2:6b:00:79:54:4f:70:22:12:8b:
         db:19:ea:44:95:ab:79:60:f6:4e:33:19:6d:53:9d:2a:6c:ec:
         73:7e:74:04:9d:98:ec:8d:c3:66:a5:92:23:d1:d0:9d:d8:c1:
         eb:f7:17:74:78:da:55:fa:65:eb:88:65:2e:d2:3a:9b:e0:e5:
         12:59:ca:48:49:01:82:67:fb:35:c4:f1:bc:3f:83:32:c8:f1:
         b6:e4:89:91:3c:7c:48:3d:03:f3:ba:bc:37:d0:37:3e:97:47:
         f5:86:e6:d9:d2:91:f3:79:3e:12:22:46:0a:27:9d:44:f6:a3:
         d6:45:41:13:63:cc:fb:3a:4e:49:fc:c2:ed:a9:04:e4:fe:8a:
         54:cd:4d:12:2f:90:df:64:e6:14:75:b0:4e:e7:3b:b6:9a:79:
         1a:39:98:20:df:ff:8e:d1:05:9a:49:30:6b:82:c7:de:81:ac:
         1a:88:a0:78:cb:80:76:ed:dd:28:a1:5c:34:b9:2f:7a:06:15:
         85:fa:8a:f9:40:ce:b7:0e:26:74:93:01:e3:82:f4:31:bf:6e:
         8d:2a:9a:20:3f:39:56:1b:ce:ac:44:7d:69:72:67:7a:6f:03:
         13:91:77:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----