Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.cer
File:                     fcda63d6-4746-4a8d-9398-5f81cd3bc46e.cer (raw, json)
Hash identifier:          l9NeAk3a01MzzT8dIvEdZtH64cazC5ArMv8jlnqr82E=
Subject key identifier:   EF:46:59:72:29:1A:89:CE:07:82:4C:54:37:08:B8:A6:36:F1:AC:7D
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858478F672FCB1CF0E9A4F9CEC224
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 16 Oct 2024 12:08:27 +0000
Certificate not after:    Tue 19 Jan 2027 13:08:27 +0000
Subordinate resources:    IP: 140.235.144.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:67:2f:cb:1c:f0:e9:a4:f9:ce:c2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 16 12:08:27 2024 GMT
            Not After : Jan 19 13:08:27 2027 GMT
        Subject: CN=fcda63d6-4746-4a8d-9398-5f81cd3bc46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:79:40:da:e3:f2:1b:12:b4:63:5e:6f:7f:
                    ae:2c:5c:1c:20:09:22:1f:8c:2a:e9:d1:4b:d7:71:
                    1c:34:a8:a6:c6:12:80:4e:77:84:6c:89:6f:fd:6d:
                    c1:f9:c2:e3:dd:76:b3:4d:38:76:a1:e3:06:6a:6d:
                    ec:45:12:b0:0e:9d:54:9e:71:75:61:88:21:31:55:
                    50:fd:2b:eb:ab:10:c7:1b:21:95:d3:ac:0e:c2:fa:
                    92:b8:b9:b5:ab:d5:d5:71:3f:c3:8f:62:c9:f6:61:
                    0e:5b:02:ef:26:fc:99:bf:a4:6c:33:25:35:55:dd:
                    99:5a:c7:41:6a:4d:0a:ca:4f:19:e4:ea:0c:69:f0:
                    ec:0b:fa:74:51:2c:b6:59:7e:bb:fe:02:fb:7a:75:
                    19:6a:5e:f6:40:3a:a5:28:f1:ed:46:44:a7:9d:30:
                    19:45:24:46:23:37:f7:11:88:fa:3e:7b:c7:14:7a:
                    23:3a:47:a6:94:93:81:64:fd:02:3c:cb:ea:28:47:
                    2d:84:64:81:a4:37:0c:46:2c:ee:7c:4a:db:7d:9e:
                    2a:34:7c:c4:a1:8f:89:42:8d:50:9b:a9:6e:f2:49:
                    27:4f:89:7d:c1:b0:af:f8:9f:09:ee:97:53:50:66:
                    0a:6e:d7:39:f2:4b:cc:0c:32:1c:b4:3e:7e:9c:8d:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:46:59:72:29:1A:89:CE:07:82:4C:54:37:08:B8:A6:36:F1:AC:7D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fcda63d6-4746-4a8d-9398-5f81cd3bc46e/fcda63d6-4746-4a8d-9398-5f81cd3bc46e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ba:7a:a7:ce:dc:15:07:5e:9b:e0:9e:e5:f5:7c:54:fb:51:
         68:ff:23:54:f6:65:a9:53:91:29:7c:dd:5c:b7:e2:06:7a:d8:
         2b:1a:d6:05:d0:84:10:0f:5a:cc:13:e8:a7:16:a1:ae:23:40:
         70:b7:23:5e:0a:c8:a8:61:16:6d:36:14:2b:db:e9:0b:5f:6a:
         20:4a:99:77:52:81:ba:32:d9:b1:aa:a7:5f:68:8d:71:fb:f1:
         cc:2e:ba:1b:bd:3c:fe:1d:eb:f3:bb:0c:9f:42:18:b8:84:62:
         69:1b:de:29:f6:4c:56:6d:04:ac:02:4f:41:06:34:6b:5f:76:
         79:01:f7:9f:37:6b:81:1a:38:7b:c0:85:51:59:82:fb:5c:73:
         10:82:cc:50:40:cf:fa:c9:2b:1e:37:20:b1:18:88:b7:69:9c:
         4c:dd:a6:f1:db:13:0f:12:c8:d8:49:f8:17:ed:05:41:ce:47:
         e4:5a:ff:7c:32:f4:5e:f6:15:2e:7d:df:67:07:5f:d3:96:7e:
         e6:0c:86:8c:14:39:21:d0:b1:b2:6f:b7:30:fe:b9:c6:3d:cf:
         d2:b5:62:e2:68:cb:33:5f:f9:03:6e:9c:9d:33:04:62:6d:e7:
         a5:cf:cc:e5:f5:3a:63:a3:2e:1c:ba:e5:9a:b2:f8:49:26:58:
         2e:dc:ff:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----