Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258.cer
File:                     bf23e246-3039-40e8-b878-ea33708da258.cer (raw, json)
Hash identifier:          8bMX88PpQl0yEhZQQMsgAMV5jLGFzoNS8XkHRm60MGM=
Subject key identifier:   90:2F:04:A5:F9:B8:C4:E2:08:CD:15:55:48:55:39:78:61:8D:D8:70
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858470916ACBC10032BF4CAF64080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 29 Aug 2024 09:27:55 +0000
Certificate not after:    Wed 02 Dec 2026 10:27:55 +0000
Subordinate resources:    IP: 66.179.105.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:09:16:ac:bc:10:03:2b:f4:ca:f6:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 29 09:27:55 2024 GMT
            Not After : Dec  2 10:27:55 2026 GMT
        Subject: CN=bf23e246-3039-40e8-b878-ea33708da258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:e1:83:39:51:21:7f:83:30:39:4e:f4:14:
                    3c:c1:53:85:b3:a2:50:75:d9:80:d9:b9:75:e6:53:
                    12:38:de:ce:cc:0c:30:ab:ae:29:7f:f6:34:53:51:
                    41:f5:77:71:ea:62:c8:39:b3:11:ea:cd:0a:6e:a5:
                    0f:93:3e:e7:e7:2e:66:50:59:27:52:cf:3a:5b:bc:
                    83:ae:16:e3:f8:83:75:22:bf:fe:38:76:e4:1b:16:
                    6c:9f:c1:85:40:14:c6:ca:81:c1:24:ec:d2:0b:2c:
                    ba:4f:7b:a7:bc:4f:ce:56:e7:6a:2e:31:e7:fd:48:
                    85:89:6c:67:69:b4:fb:19:2b:e7:d2:8b:42:ed:f3:
                    95:29:09:45:0f:07:76:f2:e6:40:91:88:6d:64:35:
                    af:b0:b0:4c:f7:c3:c2:74:90:12:08:2c:83:2b:d5:
                    49:b7:9e:66:60:80:45:6d:48:8c:d5:88:ca:a6:dc:
                    fe:1f:4c:bc:fe:ca:11:d7:a0:a6:72:1c:15:2e:91:
                    82:fa:e3:63:6f:fb:a9:5a:21:a9:6e:eb:d5:c0:cc:
                    f3:ba:5f:88:af:80:71:4c:9a:9c:05:9c:02:f9:56:
                    10:27:c6:f0:f3:11:32:5c:6f:ca:02:d7:99:0b:df:
                    c6:3a:dc:ed:68:61:42:42:d3:c7:eb:af:11:0e:ed:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2F:04:A5:F9:B8:C4:E2:08:CD:15:55:48:55:39:78:61:8D:D8:70
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bf23e246-3039-40e8-b878-ea33708da258/bf23e246-3039-40e8-b878-ea33708da258.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:d9:1d:6d:9d:e6:11:97:e8:2e:d1:3b:bf:37:69:ec:4b:
         94:53:11:62:b2:45:29:6c:b6:45:9c:4d:49:51:bc:47:b0:2e:
         e1:d4:d6:20:59:b9:26:f3:89:9a:96:36:c3:26:3a:92:fe:f6:
         64:8a:9f:11:a2:08:98:6b:8f:e2:b3:44:0c:00:2b:8d:67:5e:
         46:e4:63:26:7d:f7:f7:cb:a5:f5:b6:75:b2:3d:62:8a:91:6d:
         6d:2b:8c:bb:f3:89:f7:80:c8:ff:a7:d8:0a:d0:92:21:e1:ef:
         35:0a:0d:bd:62:6e:11:53:89:33:50:0b:e1:f3:4d:70:cd:95:
         b8:9f:cf:3d:4f:d3:c7:54:45:f1:82:3c:d3:c9:21:44:f5:1d:
         1a:38:b2:25:a7:9f:b7:8c:77:3a:f3:60:79:2b:8b:12:89:75:
         5f:e2:d0:f0:6b:a0:5b:ea:39:55:a6:ca:af:03:eb:f4:3b:f7:
         b1:bd:75:07:1a:96:73:cb:6e:32:69:3c:53:cd:47:15:37:ab:
         f6:b9:77:18:f9:5c:85:25:3f:2b:32:f0:88:bb:c5:80:23:6c:
         7e:9c:69:63:a4:8d:51:c0:20:36:9e:52:03:63:31:1e:3a:f4:
         14:f7:69:0d:f6:53:60:ce:36:31:9b:ee:44:5b:ae:0b:73:dd:
         a4:27:d4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----