Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer
File:                     e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.cer (raw, json)
Hash identifier:          NPBeY2M3y15yq4egeHILk87xgfiuuQADGyHqw6+bKVY=
Subject key identifier:   8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847E465C70D3F958E2826DD9F40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 15 Nov 2024 22:49:19 +0000
Certificate not after:    Thu 18 Feb 2027 22:49:19 +0000
Subordinate resources:    AS: 401427
                          IP: 216.152.112.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e4:65:c7:0d:3f:95:8e:28:26:dd:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 15 22:49:19 2024 GMT
            Not After : Feb 18 22:49:19 2027 GMT
        Subject: CN=e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:95:ba:6d:82:98:5e:5b:41:4b:0f:c8:c9:
                    88:25:ec:3c:df:64:f9:e1:eb:d8:e0:bd:b4:5b:6e:
                    d5:1e:f6:59:f4:2d:87:5b:da:a4:47:42:9a:bd:f6:
                    d2:e7:bb:3c:74:a8:d2:e1:d9:e3:b9:7d:58:5a:6e:
                    b0:22:9c:35:51:8a:8d:f9:9e:90:42:9d:e4:89:cc:
                    2e:27:98:05:4a:cf:6a:0f:fa:2c:2a:d2:34:2a:cb:
                    e8:7b:b9:b2:0b:8b:a7:78:42:9a:78:41:16:41:b7:
                    6c:cc:d2:4d:ea:8b:2f:ac:2e:3b:3d:9c:f0:5b:33:
                    74:d2:85:d4:bf:e2:25:96:1a:84:0d:c4:7a:d5:70:
                    2f:e5:ed:ee:db:bb:61:62:15:74:d7:e9:67:7c:19:
                    21:fa:05:9b:c0:01:2b:ae:dc:9c:de:63:54:a2:54:
                    c9:66:ba:2e:e2:93:38:32:61:31:0c:e9:c9:0b:e8:
                    6a:c4:48:1c:45:38:da:87:89:f2:1c:70:92:e3:58:
                    17:c3:5d:dc:f2:58:d9:78:c6:2a:5a:19:68:58:bd:
                    55:db:0a:07:d5:23:64:01:dd:4d:19:4c:1b:08:40:
                    54:6e:7e:1c:07:d5:3b:29:d7:d7:02:54:ed:55:e9:
                    89:14:43:5f:ab:69:a9:c5:91:ca:c0:84:33:07:22:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:35:F3:58:9D:35:14:02:BD:CB:48:EB:63:39:B8:8F:F5:C2:67:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c/e3e5f8f8-7d6f-4d43-a1ca-477ec90a5a3c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.112.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401427

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:2f:e2:6e:62:e5:bc:9a:3a:29:3c:d0:47:3e:f3:25:2b:
         90:01:fa:91:5a:ff:17:d7:0a:a0:8e:33:ea:27:48:c0:30:d9:
         00:a5:82:ec:86:cf:46:82:ed:3c:8c:f7:47:3e:18:6f:75:b2:
         57:02:f2:f4:d2:dd:ed:50:b8:b6:cd:b6:78:9b:b9:fc:11:f3:
         04:7d:c7:7b:02:a9:82:3f:76:59:b6:db:a6:9c:b4:ec:5b:c7:
         00:17:83:8b:6c:be:b3:7b:43:db:79:f1:be:92:45:42:7f:cb:
         e8:eb:7c:3d:fe:d3:a5:08:f7:5d:ac:87:50:f1:16:f3:96:79:
         99:ac:60:a3:06:45:c7:d1:54:40:96:cb:c0:c4:5c:63:3f:62:
         50:00:4d:ee:7c:df:df:c9:eb:c5:43:73:53:5c:55:b6:86:c0:
         ce:45:95:3b:c6:25:e8:f9:6c:f6:e4:6f:fd:e2:47:b8:b5:c4:
         51:1a:18:07:69:7a:2c:5e:aa:f8:d3:bf:7f:3d:fd:4a:b8:94:
         71:18:1f:e8:24:0a:63:29:b2:0b:66:a8:af:d9:ee:28:8f:90:
         72:a8:8e:ba:20:3a:b7:66:fd:8a:6a:eb:fb:c5:02:b4:0c:8b:
         9e:86:b4:df:98:70:38:57:27:14:e5:9b:4b:c5:dd:29:ca:51:
         f4:0e:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----