Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer
File:                     eb3e61fb-eee2-4438-a37d-23139bbc427a.cer (raw, json)
Hash identifier:          xi2f7o3oSQbwwIR5BLIXvShZ5fupStyw8/QIhI6EvDA=
Subject key identifier:   45:03:34:E5:3F:EE:A8:32:0D:29:26:EA:4C:60:57:01:92:7D:46:36
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285846D6C791D427142118251CE880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 11 Aug 2024 08:58:06 +0000
Certificate not after:    Sat 14 Nov 2026 09:58:06 +0000
Subordinate resources:    AS: 400992
                          IP: 23.177.184.0/24
                          IP: 2602:f909::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d6:c7:91:d4:27:14:21:18:25:1c:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 11 08:58:06 2024 GMT
            Not After : Nov 14 09:58:06 2026 GMT
        Subject: CN=eb3e61fb-eee2-4438-a37d-23139bbc427a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:dc:c2:bb:77:e0:41:3b:76:f8:f5:12:97:
                    9d:38:20:bc:14:18:a7:08:7b:b2:0c:c3:3b:91:aa:
                    8b:b4:a6:04:4a:91:16:11:9d:e9:27:c1:3d:ff:a7:
                    15:98:7d:66:47:1c:04:52:7e:ea:9f:43:eb:ee:44:
                    61:bf:e2:6c:d0:d9:0c:8c:bd:8f:96:5c:7a:14:9d:
                    3e:32:dc:c4:15:48:49:ad:b9:d0:c9:62:f1:64:0c:
                    3e:e1:51:b4:ac:6f:b3:ac:a3:68:f8:3a:17:79:b1:
                    9d:eb:ba:18:75:8c:45:f1:07:90:c5:38:d0:db:27:
                    f0:32:6c:15:cb:b7:30:22:3e:0b:e2:26:8f:9b:61:
                    a5:63:8b:76:04:08:af:54:4f:1e:ad:3b:3c:e9:a1:
                    16:cc:9d:32:73:0c:57:6e:d9:60:17:4a:96:4c:12:
                    fa:91:24:0d:21:e4:9e:d7:62:59:1c:63:e7:6d:7d:
                    95:71:1d:0e:ef:4d:a5:1a:c4:96:e1:3d:24:fc:81:
                    d3:3b:de:86:37:5d:94:f9:3f:21:95:ac:9f:59:72:
                    09:0c:39:2b:a3:bf:34:bb:78:f7:f5:75:df:14:eb:
                    25:2e:c4:a0:1f:a4:e9:96:fa:ad:0d:f5:f9:d7:16:
                    3f:74:72:98:90:65:3c:e5:0b:49:5b:5d:db:13:55:
                    6c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:03:34:E5:3F:EE:A8:32:0D:29:26:EA:4C:60:57:01:92:7D:46:36
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.184.0/24
                IPv6:
                  2602:f909::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400992

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:01:fe:45:8b:76:fc:d6:07:90:c6:0a:3d:0e:bf:fa:28:8b:
         70:3f:80:19:c4:13:68:1b:16:35:fb:ad:ec:bc:bd:a5:85:3d:
         8b:4d:65:98:b1:35:0c:af:d5:0d:37:2c:7f:ea:71:4f:0d:22:
         6a:d3:18:d0:02:2b:c3:0f:89:99:43:13:84:f8:25:aa:16:9c:
         53:ff:20:10:49:9a:be:fa:23:cc:9e:aa:53:d1:64:a9:81:2e:
         d9:22:c2:4d:2a:c2:1e:ca:29:60:39:88:a3:f0:78:79:45:ae:
         b8:09:3c:43:46:f7:cc:3e:66:6e:88:f5:0e:1b:a0:6d:1e:e4:
         68:e8:2c:10:e1:3d:a4:94:95:5f:89:e4:bb:d3:97:0c:10:2b:
         7b:38:42:fe:0b:82:e6:71:96:2a:0e:89:6b:07:08:f9:8b:f4:
         17:90:9b:25:a0:76:82:f0:c5:a0:70:19:cf:78:6d:e5:e6:bf:
         07:d2:2d:28:77:da:74:2b:c5:b8:d0:17:91:42:96:c3:92:bd:
         70:ec:46:62:69:54:38:69:61:72:ed:82:2e:e0:fe:a2:59:2b:
         38:ed:14:4b:6d:25:e1:37:c7:d7:b0:72:ad:8f:10:36:42:25:
         7e:69:f7:13:82:71:de:15:7c:e0:22:76:d5:87:99:7b:0b:69:
         0e:28:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----