Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer
File:                     dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer (raw, json)
Hash identifier:          lYCsiT2gdpoX1SswlQ9qH21NwXOndLTarGmR3naOJjg=
Subject key identifier:   6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847A48A453FB58C7667481E24C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 24 Oct 2024 01:51:07 +0000
Certificate not after:    Wed 27 Jan 2027 02:51:07 +0000
Subordinate resources:    AS: 20417
                          IP: 23.128.28.0/24
                          IP: 2602:f7d1::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:8a:45:3f:b5:8c:76:67:48:1e:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 24 01:51:07 2024 GMT
            Not After : Jan 27 02:51:07 2027 GMT
        Subject: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6c:92:bb:4c:94:22:1b:05:98:1f:cf:9c:3d:
                    68:ac:bb:0f:d7:66:c7:02:07:49:6d:aa:f6:81:a3:
                    50:3f:0d:54:20:51:3f:05:17:27:5b:09:cc:31:b2:
                    d8:1f:bc:a3:b1:12:62:0f:9c:b0:49:84:6c:87:b8:
                    44:a2:d7:31:ed:27:f3:90:fe:46:50:23:c2:5c:38:
                    b4:0f:97:6c:d9:98:17:cd:a9:0a:66:1c:22:d5:f1:
                    92:35:5f:ca:60:17:57:79:e1:50:b5:9c:f2:64:12:
                    30:2c:86:54:0e:fb:56:05:dc:db:1e:0c:ae:34:af:
                    c9:cf:7f:0b:2d:02:3d:57:d6:ca:da:bf:01:f5:c8:
                    8a:bf:27:e3:f6:be:ee:d7:c0:dc:b8:98:cc:3d:6f:
                    e8:f7:50:36:ae:6e:20:4e:20:c9:43:82:56:6c:1e:
                    ee:e3:da:82:ef:60:7e:2f:52:a6:06:02:d3:91:6f:
                    9e:2d:47:54:f4:09:37:2b:8d:93:2c:3f:36:f9:19:
                    ba:36:5b:3b:03:47:81:1a:ee:e0:95:17:61:11:b7:
                    43:18:08:18:fe:5e:9f:32:7b:50:56:68:8c:60:65:
                    62:20:6c:f7:5b:92:6f:61:3a:13:3a:02:00:19:20:
                    56:67:a5:7e:4b:c8:a6:64:97:90:96:5f:33:03:40:
                    c0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.28.0/24
                IPv6:
                  2602:f7d1::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20417

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7f:54:fd:cb:44:ed:74:af:41:71:46:6c:e3:38:16:0d:31:
         09:0e:2b:38:5a:1f:de:b0:67:43:79:81:8e:4c:ac:1b:5b:c2:
         e4:c8:5c:33:11:b1:b3:5d:47:e0:84:4c:f9:e4:1b:43:b4:b0:
         c8:13:ee:70:a9:a9:e6:83:b4:7d:db:aa:04:48:f5:03:0f:c4:
         e3:da:e3:50:58:b2:50:aa:79:30:8e:29:c6:41:0a:80:96:f9:
         1e:10:fb:82:3d:a6:61:c7:28:e6:a7:e0:18:f3:d5:6d:a5:19:
         f3:7a:3e:3b:46:90:7e:fb:21:3e:8e:df:be:d7:a1:1d:85:6b:
         c1:fe:aa:4e:6f:71:f4:0b:c1:ab:92:3e:e1:66:90:7e:14:80:
         c2:23:3c:b2:e4:5e:74:58:7c:8e:68:ce:13:d1:42:cd:fd:d3:
         2e:44:fa:c6:3a:f7:66:69:8a:a2:82:f3:4f:3a:61:21:36:77:
         59:ac:25:ba:0f:4d:c9:29:3e:98:ff:b3:69:af:f8:5d:de:63:
         c7:ee:ef:38:5b:af:8a:2d:72:37:f8:39:71:68:76:60:61:fb:
         c8:b6:4d:51:38:0c:d3:39:64:3a:1d:65:c9:58:07:c4:d5:c6:
         05:7d:aa:4a:c0:34:bb:5d:f7:61:ce:2e:90:aa:2c:49:ac:02:
         69:a1:90:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----