Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
File:                     cf96d190-5b35-4b24-ac78-599aa0e50405.cer (raw, json)
Hash identifier:          XfJkGrL1esLktw3Lz1hiVHc8GdCHKbFZh6ZeGTrt5VM=
Subject key identifier:   56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858478D6092DB35A7950571AC9880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 15 Oct 2024 18:43:31 +0000
Certificate not after:    Mon 18 Jan 2027 19:43:31 +0000
Subordinate resources:    AS: 400655
                          IP: 23.191.184.0/24
                          IP: 2602:f7e4::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8d:60:92:db:35:a7:95:05:71:ac:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 15 18:43:31 2024 GMT
            Not After : Jan 18 19:43:31 2027 GMT
        Subject: CN=cf96d190-5b35-4b24-ac78-599aa0e50405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:66:a9:b6:dc:26:73:30:f7:3b:f1:14:a1:
                    a3:20:8c:b6:d5:5b:13:30:73:16:3c:d7:7f:6b:b5:
                    39:6e:36:39:fa:ab:2a:28:09:8f:b8:a3:20:e3:2e:
                    6d:91:29:58:ba:ed:c0:e2:e5:c7:80:a7:25:6a:79:
                    86:f4:e2:75:ca:9e:ae:6e:4d:7d:d6:29:98:6a:c2:
                    29:59:f9:05:8c:27:64:ff:a6:94:2d:e4:32:9b:fc:
                    c0:0e:83:b3:38:20:05:65:b3:af:be:9c:08:a8:f6:
                    4f:41:cd:d9:fd:0c:0d:35:56:c8:c6:7a:87:a8:bc:
                    bb:e3:eb:8f:f8:e1:53:dc:3f:7f:dc:3a:e9:55:d8:
                    67:de:d4:b3:5c:c5:8d:c0:7e:4e:c2:81:0a:a2:24:
                    0e:62:2a:19:2c:be:47:44:17:c1:3e:fb:00:46:33:
                    3c:6d:cc:31:61:c2:1d:8b:6a:20:95:65:a4:94:f5:
                    89:ed:07:a6:11:ed:75:93:9d:e4:3f:b4:f7:a2:36:
                    b9:67:a1:d7:48:5d:a9:2c:b3:b5:26:49:ff:1c:38:
                    3a:0a:fb:87:78:7c:1b:fc:3e:4f:58:6d:8d:c0:42:
                    c1:64:8a:5a:17:7d:ed:14:18:7e:82:71:d8:25:7f:
                    bb:75:7b:7f:2a:3b:32:74:be:a2:79:75:e3:d0:ec:
                    3c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.184.0/24
                IPv6:
                  2602:f7e4::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400655

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:bf:e1:cd:f7:13:49:a6:48:77:0a:61:5a:a8:b0:14:a2:74:
         81:c6:e1:0f:38:98:c0:57:7a:b5:19:07:65:35:96:f7:75:cb:
         b6:99:59:a5:fb:fa:d3:ba:d7:5b:bb:38:a1:21:80:c6:66:19:
         c2:56:83:8e:49:fc:d3:e5:db:18:a5:99:ec:df:89:1b:19:95:
         95:76:ce:ef:1a:1e:1e:14:b7:99:c5:d0:22:83:9d:4b:b1:b8:
         90:c5:48:4b:7a:02:c0:95:ec:a4:28:e0:64:4a:ff:17:b4:45:
         62:72:f3:14:3b:4b:0d:dd:33:7d:2a:7a:ce:e0:7b:5f:e7:22:
         b8:fc:47:f2:3c:91:b9:40:0b:ea:dc:72:ca:4f:8c:a0:a8:37:
         ab:5a:a2:ad:b8:15:2a:ea:41:23:73:ee:a0:3f:a2:d0:cb:24:
         52:d3:29:32:10:81:e0:c1:7f:df:08:8a:ce:cc:47:85:a1:4a:
         f2:9a:b9:48:9e:ee:17:7a:bd:d0:8e:14:e3:11:99:b6:13:c9:
         06:27:e5:79:ce:f9:ef:e4:fd:8b:a3:b7:94:86:0a:51:78:79:
         44:c6:41:3e:a5:d0:7b:59:46:55:d6:d4:3d:08:75:52:ad:05:
         92:a7:6f:2f:b5:e4:78:94:c1:7d:b5:db:6c:cb:9a:1e:05:89:
         f8:96:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----