Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857.cer
File:                     e268af9f-122d-49b0-8f39-22b20b9bb857.cer (raw, json)
Hash identifier:          X7TMCJmP37mrZrtqSXrgsXxl7bDYbo1j3vcY1K4zQYc=
Subject key identifier:   9F:5B:48:75:C6:2B:82:8A:BA:1E:57:CE:2D:6C:D9:E6:99:13:F5:5A
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847EE8B92FE3EBD6FACE254F510
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 19 Nov 2024 14:03:34 +0000
Certificate not after:    Mon 22 Feb 2027 14:03:34 +0000
Subordinate resources:    AS: 54975
                          IP: 199.66.222.0/23
                          IP: 2602:f847::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:8b:92:fe:3e:bd:6f:ac:e2:54:f5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 19 14:03:34 2024 GMT
            Not After : Feb 22 14:03:34 2027 GMT
        Subject: CN=e268af9f-122d-49b0-8f39-22b20b9bb857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8b:22:a2:cd:cf:d8:f6:d6:3d:0e:ba:2f:b3:
                    c7:a0:bd:16:7c:7f:09:e7:f7:01:3e:3d:e3:67:e5:
                    41:81:f1:e1:17:26:ca:21:f8:16:17:81:da:ce:3f:
                    8c:42:75:f4:4a:e0:62:df:b7:2d:7d:af:ce:b8:c9:
                    81:88:7d:c3:ba:c4:4c:5f:ec:26:9e:56:84:ca:cd:
                    69:c7:1a:f9:d9:96:61:8a:bb:ae:4b:f4:da:92:98:
                    1c:5c:da:04:fd:38:67:15:b7:dd:ef:37:7b:c1:7f:
                    92:35:b4:ed:db:46:cd:df:43:65:02:18:40:57:01:
                    0c:bb:ca:e2:3a:35:84:b6:d6:9a:fb:ba:16:2c:4e:
                    7e:1d:9f:75:b1:01:8e:be:24:78:a1:0e:06:9d:ae:
                    9b:ae:97:76:db:fd:d2:d4:d8:50:22:0c:1a:05:e9:
                    87:ef:ac:ce:df:78:bf:36:00:a9:cb:8e:2c:21:e0:
                    b7:a2:db:a5:10:b8:a1:8b:f1:e0:c5:0e:12:79:81:
                    70:93:2b:f6:b3:e8:17:e3:10:00:fc:5a:02:d9:da:
                    d7:e2:97:ec:4c:2f:64:0d:23:33:69:69:c7:de:bd:
                    85:b4:08:0c:20:a5:ae:1c:47:75:55:98:1c:07:68:
                    33:37:99:23:4e:ba:ca:a6:17:e1:8e:f0:3f:3c:29:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:48:75:C6:2B:82:8A:BA:1E:57:CE:2D:6C:D9:E6:99:13:F5:5A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e268af9f-122d-49b0-8f39-22b20b9bb857/e268af9f-122d-49b0-8f39-22b20b9bb857.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.222.0/23
                IPv6:
                  2602:f847::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54975

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:04:0b:41:8e:45:93:26:bd:88:ed:c7:a3:f0:af:ff:ab:3a:
         6e:42:e8:f7:e9:b3:fd:ee:ff:9f:ce:4e:d0:e9:29:d9:83:17:
         ff:c1:b1:91:de:91:67:3a:55:60:c4:c9:13:07:dd:53:f3:7a:
         0e:3b:bc:ff:c4:0b:0a:4b:f6:78:c0:37:78:df:3d:61:67:4a:
         b2:9e:a4:be:a5:05:f1:05:b9:86:fa:c0:7d:82:e3:95:19:33:
         35:1c:45:c5:91:bc:34:5b:c1:7e:59:5f:c1:90:90:29:e1:78:
         36:52:8c:36:e8:1b:4a:02:01:b7:59:fe:ef:4b:86:a6:72:c5:
         48:72:97:be:1a:da:e9:84:64:46:fc:d5:52:0e:44:ec:5b:3a:
         9e:05:e0:7c:7e:b8:98:9d:96:7e:46:c2:1a:d4:0a:71:de:a7:
         59:61:90:2b:08:02:a2:58:df:9d:62:fc:1d:76:86:26:09:02:
         a9:ca:2b:c5:3b:57:d4:f6:6b:cf:53:1c:28:67:69:b3:ae:5d:
         2a:04:4b:15:74:85:ef:4b:ee:cf:37:2b:3b:11:72:cc:f0:17:
         4f:7d:ff:b2:ee:c0:05:41:9b:1d:f2:d5:a5:7d:d5:77:ab:54:
         f8:38:c8:9f:03:0a:b2:74:88:50:46:45:31:1f:49:ee:ef:50:
         95:3f:3a:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----