Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer
File:                     e608a4ff-c170-41ea-a454-bf0ecd40f83d.cer (raw, json)
Hash identifier:          aOU3Xs0Tc1Ic9OkciwDIx/OY5kgO2krBkVTc9c97TRM=
Subject key identifier:   65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858478D07418D2125D43AD19A3400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 15 Oct 2024 15:43:33 +0000
Certificate not after:    Mon 18 Jan 2027 16:43:33 +0000
Subordinate resources:    IP: 205.207.203.0/24
                          IP: 2620:0:160::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8d:07:41:8d:21:25:d4:3a:d1:9a:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 15 15:43:33 2024 GMT
            Not After : Jan 18 16:43:33 2027 GMT
        Subject: CN=e608a4ff-c170-41ea-a454-bf0ecd40f83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:65:2a:c3:d8:e5:17:6f:c7:3e:70:a7:03:d2:
                    f3:35:1b:c7:46:e2:71:49:6b:22:80:b7:c4:21:17:
                    46:79:c4:0e:cc:62:83:f3:90:de:f3:64:4f:88:f4:
                    00:6e:37:9a:9b:6e:52:40:5c:89:84:6b:ac:0e:09:
                    ab:d0:ad:f5:ab:03:1e:8c:aa:55:d3:f9:24:2c:86:
                    da:46:35:e3:41:24:87:15:dd:33:78:2c:59:46:01:
                    09:09:88:c1:ce:40:74:6e:78:e3:da:23:72:7c:11:
                    d8:26:d2:00:34:fb:b5:28:29:f6:47:8c:84:db:37:
                    a7:75:67:21:82:79:e9:3c:c5:dc:a4:ad:ca:4b:70:
                    d0:18:48:c2:1f:55:c6:7d:ed:7d:92:1a:67:50:fc:
                    3a:01:fd:c0:bc:0e:c8:ff:7a:5a:39:8d:57:25:12:
                    70:ad:dc:a6:8b:b4:4b:b5:d7:a5:ef:d2:bb:2e:61:
                    59:56:2c:23:b1:ff:53:aa:c5:d2:aa:bb:b9:8c:8c:
                    41:c6:89:e2:a8:37:35:d6:96:4d:24:6c:27:f6:c6:
                    87:93:fc:ab:e1:47:35:f6:ef:88:db:99:f8:62:f3:
                    ba:f1:8f:7c:9f:a6:6f:0c:5c:46:de:0d:07:2a:44:
                    61:78:0e:3e:59:f4:25:f8:b0:b0:68:bf:ad:0c:1d:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BB:53:74:68:07:8D:59:FD:64:C5:0A:81:82:B9:31:28:15:3A:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e608a4ff-c170-41ea-a454-bf0ecd40f83d/e608a4ff-c170-41ea-a454-bf0ecd40f83d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.203.0/24
                IPv6:
                  2620:0:160::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a4:78:d1:e0:3b:1a:5e:0c:5f:3a:45:32:ed:0c:2e:2e:ee:
         81:ad:3e:65:f0:22:0a:7a:7d:cf:94:9e:e7:fe:4b:40:b6:bf:
         bb:b7:de:cd:4c:bc:fe:46:1e:50:91:4a:bb:8d:5b:c5:d1:eb:
         f9:66:0f:ed:2c:ae:5e:82:6d:3e:2e:47:2f:95:cc:47:5c:42:
         16:eb:42:48:59:01:13:a7:a9:f0:83:32:b3:2c:4f:4a:97:81:
         9b:51:77:33:a3:8a:f5:40:c2:0f:7f:ed:a5:36:14:34:f7:e3:
         9a:85:b6:35:95:0c:ce:14:31:3e:ce:97:75:06:7a:d1:d5:cf:
         08:ad:e1:28:7d:40:0c:eb:49:1e:1e:d0:50:ff:6c:52:3c:69:
         e8:3d:32:16:66:26:86:88:51:7d:83:f4:9a:f3:09:2d:a9:18:
         75:50:bb:68:d8:0c:f2:1b:aa:78:bd:42:29:32:62:4f:af:d8:
         e7:88:b7:ee:ea:04:1b:25:5f:f8:3c:d4:c9:1c:81:96:12:06:
         df:51:e3:34:e8:58:d7:f8:42:61:83:bc:a0:b1:0a:3c:eb:70:
         95:b4:52:95:4a:67:15:32:1e:79:70:31:f1:cb:81:f9:c7:80:
         26:75:59:73:9e:9d:9c:0f:ad:f5:9f:de:3b:fd:ee:38:44:7f:
         19:bf:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----