Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer
File:                     d18a2206-bb2d-48cd-9bd8-7806782e1c46.cer (raw, json)
Hash identifier:          /tRi/wKeQs23yzawr5+mvRp7w/sQ3HMYZlT4mcyPegQ=
Subject key identifier:   41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847282C35DA56987E559095D640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Sep 2024 12:41:22 +0000
Certificate not after:    Sun 13 Dec 2026 13:41:22 +0000
Subordinate resources:    IP: 23.187.104.0/24
                          IP: 2602:f833::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:2c:35:da:56:98:7e:55:90:95:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep  9 12:41:22 2024 GMT
            Not After : Dec 13 13:41:22 2026 GMT
        Subject: CN=d18a2206-bb2d-48cd-9bd8-7806782e1c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:44:21:8b:28:aa:47:dc:43:5a:02:a5:2d:
                    5e:9d:6f:17:aa:b5:74:ea:71:72:1e:84:a6:13:9f:
                    5f:0f:6a:52:0d:7d:ce:aa:e9:ae:be:c6:b8:7d:be:
                    64:f1:d2:73:7e:fc:f1:fd:a8:16:3d:eb:f3:ec:d8:
                    04:44:10:22:d5:80:72:48:61:1d:fe:85:5f:c7:a9:
                    3b:53:77:2b:9d:86:ee:a8:b9:df:c1:3b:06:bc:70:
                    bc:11:18:f1:6a:cb:e8:20:44:a0:5c:16:cb:01:77:
                    68:e2:b7:56:61:e3:e4:eb:16:36:f8:f3:ed:bc:15:
                    32:a3:41:38:3d:4e:24:9e:3e:c9:83:15:31:aa:3b:
                    95:72:3c:85:6f:60:6c:05:59:b0:27:e5:54:49:77:
                    6e:cd:f7:2b:1c:94:79:cf:a4:69:9f:7b:3c:7d:26:
                    1c:c2:9a:36:c6:de:e1:da:ac:0d:8f:19:76:0c:01:
                    46:b5:81:c3:cf:18:95:f2:fc:0f:4a:28:83:b9:5d:
                    54:a8:81:50:a8:f2:86:42:12:6f:4f:67:17:23:e3:
                    87:0f:8f:07:2b:33:3d:a1:2c:af:bb:c3:32:73:7b:
                    34:2b:04:46:e1:b0:db:bf:8a:f5:bc:c1:61:49:73:
                    3d:41:df:9a:a1:08:ad:c6:d9:f3:7a:ed:89:3d:9a:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EF:FF:2B:26:BF:98:8A:AE:B0:5D:44:5A:FC:9E:87:AB:AD:4F:5A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d18a2206-bb2d-48cd-9bd8-7806782e1c46/d18a2206-bb2d-48cd-9bd8-7806782e1c46.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.104.0/24
                IPv6:
                  2602:f833::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:d7:bf:96:c8:18:46:08:62:0c:91:90:01:26:f4:99:db:
         15:53:43:29:9c:20:8d:20:aa:11:54:d1:e4:40:22:03:f5:1a:
         12:79:82:71:cb:5f:37:de:98:4b:8a:3f:1f:4a:b8:02:cc:a0:
         f0:82:19:04:57:72:3d:8c:55:83:21:e8:2a:cf:a2:64:12:fc:
         41:cb:6a:a9:8c:f5:64:ca:8e:11:71:5d:5f:96:4c:77:b5:42:
         ac:13:3d:f5:cd:00:cd:0a:14:dc:68:0d:65:d4:3b:6a:47:3a:
         0d:91:32:18:91:c7:c1:cf:69:c2:85:19:de:68:49:0d:bf:9e:
         26:5b:2d:fd:98:55:3e:70:1a:5a:e2:7d:c3:64:b6:90:cc:38:
         3f:fd:5f:a5:ae:f8:ef:8a:93:a6:5f:0a:c4:8c:ae:6a:19:5d:
         6d:a2:8f:10:25:b8:0b:0e:de:27:0d:cf:99:3b:4f:95:d5:be:
         3c:61:25:e5:70:af:73:46:c2:72:6e:d6:ca:94:4c:ff:1b:2c:
         79:29:a3:bd:cc:06:ed:e1:59:21:46:50:db:e9:a1:09:cf:55:
         2f:43:bf:5c:34:2e:70:05:a1:99:bc:7d:0b:6b:f6:15:04:8d:
         3d:4a:5f:d7:91:b3:3f:7b:ff:03:66:16:2f:47:eb:f1:7a:39:
         03:9c:58:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----