Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer
File:                     dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.cer (raw, json)
Hash identifier:          LvhDKR6slZrGRazZfQ8th76iYnqjJyz+4amQIBwpb50=
Subject key identifier:   D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858478F8A4A2ACA46F0FA55779360
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 16 Oct 2024 13:19:11 +0000
Certificate not after:    Tue 19 Jan 2027 14:19:11 +0000
Subordinate resources:    AS: 399861
                          IP: 23.191.248.0/24
                          IP: 2602:f7d6::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:8a:4a:2a:ca:46:f0:fa:55:77:93:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 16 13:19:11 2024 GMT
            Not After : Jan 19 14:19:11 2027 GMT
        Subject: CN=dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ad:51:52:01:ab:c3:2c:9d:7a:09:0e:1a:4e:
                    f5:9d:42:33:8b:c6:75:ae:d0:2b:b8:bc:55:3f:bd:
                    34:dc:bc:fe:5f:7f:5b:5c:42:b0:da:8c:ac:b5:dc:
                    38:da:8b:30:01:2d:d6:4e:0e:3f:42:a8:0e:b3:9a:
                    67:37:ae:62:e7:9f:75:bb:bf:a5:75:24:30:3b:47:
                    c3:f7:59:b3:4b:19:6b:ef:92:ca:42:2a:ef:30:11:
                    28:f7:fb:96:b6:76:4c:69:b8:0c:2c:7e:cf:31:1a:
                    02:3f:ed:79:9d:fb:1c:95:97:ae:98:13:30:82:32:
                    90:6e:a6:f0:e6:c9:3c:5c:aa:7a:a4:4e:df:f6:f7:
                    3f:c1:cc:f8:4d:fb:f8:90:67:0b:dc:9c:8e:d3:4f:
                    97:75:f4:92:ec:0a:d6:7a:78:f7:55:0b:20:da:7b:
                    28:39:ea:0a:d7:43:80:a7:ac:1e:09:22:03:26:0e:
                    c0:df:ca:36:14:0d:f8:28:bc:92:c9:75:c5:0b:75:
                    b2:ef:4a:3e:b4:06:3d:c9:21:0a:d6:8d:f2:d8:bb:
                    f0:08:f8:29:68:cd:b2:bd:34:28:be:2f:7f:7f:79:
                    f7:d0:30:59:c7:2e:89:38:28:3d:c6:1f:2c:51:4d:
                    ff:b5:89:9f:c7:5a:d1:41:8e:42:cb:25:2f:86:69:
                    74:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BA:62:8C:6C:6D:EB:E5:BF:15:35:E1:6C:06:4D:B0:26:70:6F:1C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a/dc8f32e0-fc2d-40f7-860e-b06d1ede5d4a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.248.0/24
                IPv6:
                  2602:f7d6::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399861

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:d1:f9:9a:48:51:c1:80:99:9e:8c:47:8d:21:ae:5c:e0:
         16:86:1f:cb:71:9b:24:00:0b:9d:63:ca:a0:fb:2f:18:d1:4f:
         7e:51:b6:49:66:e9:99:fa:41:73:66:c9:6d:e1:4e:ae:07:d1:
         27:f0:48:be:81:36:7e:3c:ac:38:71:98:9a:35:9c:7d:34:dc:
         c6:4e:db:84:c1:14:f0:36:99:f0:fc:05:72:b3:c7:fd:5f:0c:
         c4:60:3d:3a:15:3e:be:2b:fd:9e:3b:a1:9e:5d:53:68:c0:f9:
         c5:97:08:39:ab:8c:0d:94:39:a9:e3:f3:bc:38:d8:13:2c:0f:
         ab:be:84:90:74:2e:f8:74:d7:05:ff:ac:21:57:31:61:1e:0f:
         95:1c:e6:53:75:9c:26:75:3f:3c:48:dd:f0:e8:ce:09:cc:f1:
         dc:65:93:dd:9b:8d:1c:5a:83:76:a5:6f:af:28:f5:44:e3:84:
         b0:37:75:7e:ef:71:9e:4e:5e:47:f3:a4:e2:7f:24:ee:37:7d:
         a7:56:6b:1c:fe:8f:b4:36:95:27:93:9b:58:e0:55:bb:12:4c:
         e6:23:5c:39:a8:ea:fa:14:41:fc:c3:28:b6:4d:66:bd:ff:28:
         a6:d9:ab:54:c6:d3:0e:41:0e:ce:b3:54:c0:6c:66:b2:1a:a7:
         0b:c4:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----