Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.cer
File:                     5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.cer (raw, json)
Hash identifier:          cPymxgKwj7M5LXlPiWN7XeBWU9VABDjjCVOjUXKJmD4=
Subject key identifier:   D5:5F:28:4B:7E:2B:3C:C6:97:CF:45:E2:95:D1:58:C1:14:60:FA:EA
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846368183426E690B71BC647180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Jun 2024 23:07:37 +0000
Certificate not after:    Thu 17 Sep 2026 23:07:37 +0000
Subordinate resources:    AS: 400980
                          IP: 23.150.88.0/24
                          IP: 130.51.122.0/24
                          IP: 163.123.197.0/24
                          IP: 2602:2b6::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:36:81:83:42:6e:69:0b:71:bc:64:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 14 23:07:37 2024 GMT
            Not After : Sep 17 23:07:37 2026 GMT
        Subject: CN=5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4b:76:fb:cf:0b:0b:57:3c:91:12:a4:1e:a6:
                    44:f0:46:25:15:9f:74:dc:0c:1a:fd:9b:0b:e1:0a:
                    fa:43:f7:85:6b:02:11:46:49:02:13:91:03:e3:dd:
                    9d:fe:ab:e7:5e:9f:29:b0:8b:43:1f:d6:5f:07:95:
                    c7:48:4b:db:e9:58:bf:21:82:56:1b:d8:ea:3f:8c:
                    45:80:56:f5:81:56:7c:31:99:0e:b1:32:1d:c7:4a:
                    0d:32:3e:91:14:ce:7e:be:c7:ce:fe:6c:26:19:6a:
                    c0:bf:67:b1:78:e9:ed:07:af:0c:3d:04:95:6d:ff:
                    ff:1f:a0:0b:66:5d:53:76:69:a8:3a:f4:ed:24:eb:
                    ac:2a:9b:a2:94:98:5e:e9:73:9a:a6:04:ab:31:ef:
                    38:89:57:85:ae:85:98:5c:4d:bd:ba:6e:c7:4a:74:
                    06:38:d3:7c:4e:62:4e:e6:17:10:b1:3e:56:e9:f9:
                    00:5f:ec:ab:7e:87:6f:49:fd:e3:5d:19:09:ab:19:
                    61:98:52:54:08:c1:98:89:87:c9:82:14:a7:3d:f1:
                    44:62:12:5d:fd:17:63:55:d1:3f:1e:33:b6:4c:db:
                    2c:fc:48:28:b8:3b:e4:2f:1b:97:cc:9a:7e:3f:bc:
                    06:07:e5:e2:e1:c3:3f:90:69:ca:39:77:2d:cd:73:
                    a0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5F:28:4B:7E:2B:3C:C6:97:CF:45:E2:95:D1:58:C1:14:60:FA:EA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.88.0/24
                  130.51.122.0/24
                  163.123.197.0/24
                IPv6:
                  2602:2b6::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400980

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:2f:3f:16:6b:d4:6f:b3:89:57:07:4a:dd:03:54:5f:c2:
         0c:32:32:47:21:42:4e:c4:0e:7c:1c:51:e2:5b:27:8d:44:52:
         18:ad:42:0d:01:f1:e3:73:ee:61:1b:ed:95:84:4a:43:49:1f:
         20:81:98:48:bf:e6:91:dd:4b:87:ec:77:bd:79:48:a7:db:2f:
         28:09:15:60:a9:92:91:b1:80:9f:05:8b:cd:91:64:24:4a:a8:
         e4:67:f0:56:1c:43:cf:f2:96:bf:57:0e:7f:3d:9a:9b:3f:82:
         a7:f7:de:cb:db:96:fd:62:28:24:02:85:f1:07:d2:8b:db:0d:
         c9:e9:fb:49:c8:74:40:ae:25:c8:22:8d:2b:70:96:0e:8e:14:
         9f:ca:0e:3f:25:18:e6:cd:93:98:6e:9b:10:ca:19:ac:78:68:
         56:c9:db:01:e8:bb:3f:54:5a:59:71:1b:e8:fe:1d:fd:8c:20:
         a9:57:28:ba:49:3e:09:a4:32:2a:5f:9a:a4:e4:09:d6:8d:e1:
         38:c4:ba:30:00:5c:15:45:41:65:63:84:49:3b:1c:d1:b1:c5:
         bf:69:74:2c:90:a8:52:54:90:bf:08:9f:c4:51:03:0e:74:a2:
         eb:6f:5d:2d:c7:ee:2d:c3:63:4e:c8:a1:c9:12:6c:9e:47:89:
         f9:b5:0f:1a
-----BEGIN CERTIFICATE-----
MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEY2gYNCbmkLcbxkcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDYxNDIzMDczN1oXDTI2MDkxNzIzMDczN1owLzEtMCsGA1UEAxMk
NWM5ZDJjMWItMGU2Yi00NmFiLWE2YmUtN2VjMWY0MGFmY2IxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUt2+88LC1c8kRKkHqZE8EYlFZ903Awa/ZsL
4Qr6Q/eFawIRRkkCE5ED492d/qvnXp8psItDH9ZfB5XHSEvb6Vi/IYJWG9jqP4xF
gFb1gVZ8MZkOsTIdx0oNMj6RFM5+vsfO/mwmGWrAv2exeOntB68MPQSVbf//H6AL
Zl1TdmmoOvTtJOusKpuilJhe6XOapgSrMe84iVeFroWYXE29um7HSnQGONN8TmJO
5hcQsT5W6fkAX+yrfodvSf3jXRkJqxlhmFJUCMGYiYfJghSnPfFEYhJd/RdjVdE/
HjO2TNss/EgouDvkLxuXzJp+P7wGB+Xi4cM/kGnKOXctzXOgswIDAQABo4IENzCC
BDMwHQYDVR0OBBYEFNVfKEt+KzzGl89F4pXRWMEUYPrqMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81
YzlkMmMxYi0wZTZiLTQ2YWItYTZiZS03ZWMxZjQwYWZjYjEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzVjOWQyYzFiLTBlNmItNDZhYi1h
NmJlLTdlYzFmNDBhZmNiMS81YzlkMmMxYi0wZTZiLTQ2YWItYTZiZS03ZWMxZjQw
YWZjYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwOwYIKwYBBQUH
AQcBAf8ELDAqMBgEAgABMBIDBAAXllgDBACCM3oDBACje8UwDgQCAAIwCAMGBCYC
ArYAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYeVDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsHC8/FmvU
b7OJVwdK3QNUX8IMMjJHIUJOxA58HFHiWyeNRFIYrUINAfHjc+5hG+2VhEpDSR8g
gZhIv+aR3UuH7He9eUin2y8oCRVgqZKRsYCfBYvNkWQkSqjkZ/BWHEPP8pa/Vw5/
PZqbP4Kn997L25b9YigkAoXxB9KL2w3J6ftJyHRAriXIIo0rcJYOjhSfyg4/JRjm
zZOYbpsQyhmseGhWydsB6Ls/VFpZcRvo/h39jCCpVyi6ST4JpDIqX5qk5AnWjeE4
xLowAFwVRUFlY4RJOxzRscW/aXQskKhSVJC/CJ/EUQMOdKLrb10tx+4tw2NOyKHJ
EmyeR4n5tQ8a
-----END CERTIFICATE-----