Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
File:                     c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer (raw, json)
Hash identifier:          8quajcz2RIvalSfaeFcY2ksefnyvJ4NY7uEokzZ9eso=
Subject key identifier:   67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858477C92ADAB9435B2A1FA7232A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 09 Oct 2024 18:15:43 +0000
Certificate not after:    Tue 12 Jan 2027 19:15:43 +0000
Subordinate resources:    AS: 54070
                          IP: 2620:dc:8000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:92:ad:ab:94:35:b2:a1:fa:72:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  9 18:15:43 2024 GMT
            Not After : Jan 12 19:15:43 2027 GMT
        Subject: CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:2f:d2:a0:a2:b4:fa:26:23:d9:ab:f3:39:
                    94:c9:3e:48:13:cb:d5:9c:ff:74:c4:d7:e6:14:b7:
                    73:76:20:b9:12:2a:b1:44:b5:5f:6c:22:fa:7e:14:
                    e9:99:6b:19:18:f8:0d:f8:b2:9b:9c:d6:8a:b9:9f:
                    7d:18:3b:83:a9:87:29:01:ab:04:44:52:9d:93:a3:
                    fe:9d:8a:54:fb:f4:c5:52:7a:c7:2b:47:39:63:a3:
                    4a:6e:b7:2d:0e:3c:cf:a3:9e:d1:c9:df:74:a5:9e:
                    21:56:11:f5:e4:54:ba:6d:10:cc:c6:fa:6d:c1:cd:
                    91:37:68:8b:e9:00:9c:3e:cc:9e:0f:32:9e:5c:89:
                    62:32:b6:54:cb:1d:26:ea:02:75:cb:a2:e9:18:ee:
                    a8:56:c3:be:60:7f:f5:f0:b1:ff:7d:33:55:2a:ad:
                    c2:5a:4c:97:7a:9b:ba:12:c3:d0:3f:69:03:4b:e6:
                    e9:89:6e:6d:db:c5:80:1a:85:8a:e3:14:a1:f0:38:
                    66:89:cf:2d:32:7f:86:ec:cb:0e:10:9b:49:63:2f:
                    d1:96:71:4c:f3:3f:cf:4c:1a:7c:2f:0a:0e:f1:bc:
                    3f:f4:2e:5d:96:76:63:10:d8:59:68:6a:1d:cc:8d:
                    b9:23:df:d2:47:d4:4a:42:78:1c:91:37:6d:ae:09:
                    36:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:dc:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54070

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4b:44:c2:72:71:e9:1b:c2:fd:e2:54:e5:e2:c3:bf:70:cb:
         24:3b:65:c5:80:2a:49:2a:50:60:8e:bd:03:0b:d1:0d:ab:f0:
         c8:1d:f7:32:0b:93:f8:0d:1e:1d:ee:f1:30:71:f7:c8:ec:4f:
         86:66:16:ea:0e:07:3a:27:7f:7b:bb:62:7c:87:74:33:7e:ad:
         b8:f0:08:c1:0a:30:36:95:5f:97:df:a3:38:bf:49:73:e1:ae:
         4d:49:d8:50:ad:26:bc:29:60:e4:43:49:19:b5:93:14:ae:24:
         95:8d:31:b6:49:60:73:4e:ed:63:e4:b3:0e:db:11:a3:60:ff:
         6b:df:20:42:a8:ed:75:7f:be:3f:b9:76:ea:5d:91:44:4e:fe:
         64:b7:6a:97:4a:10:24:96:28:96:05:d4:4c:f8:7b:46:42:39:
         a1:40:04:06:60:a8:0b:c7:f8:e3:89:f4:da:b4:bc:23:a1:74:
         76:fc:1a:1c:25:3c:66:5d:94:59:e5:91:43:96:ce:31:62:b3:
         98:de:45:91:21:5b:5d:2c:60:90:4d:15:87:52:8c:68:0b:c9:
         7f:e4:4e:25:9f:c1:d8:06:2d:e1:0d:89:2d:9d:6c:11:5a:e8:
         54:64:ff:2c:bc:f5:b4:28:ed:65:e5:25:1f:f9:67:52:5c:62:
         67:1b:c4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----