Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
File:                     68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer (raw, json)
Hash identifier:          Ni1liddZMkfgnas1Y1nD8QeEJ9JXdEr5L00tVvP98pk=
Subject key identifier:   16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584634B54DEE86C7B2168638AE40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Jun 2024 07:40:21 +0000
Certificate not after:    Thu 17 Sep 2026 07:40:21 +0000
Subordinate resources:    AS: 401021
                          IP: 23.176.152.0/24
                          IP: 2620:0:8000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:34:b5:4d:ee:86:c7:b2:16:86:38:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 14 07:40:21 2024 GMT
            Not After : Sep 17 07:40:21 2026 GMT
        Subject: CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b1:6c:20:e2:27:b8:d2:94:59:01:b3:12:23:
                    6a:ab:41:b0:23:b3:cf:68:d6:a6:38:ad:f5:c8:e3:
                    0a:d6:72:10:14:fd:ac:a3:77:75:31:f9:30:0c:c6:
                    38:16:28:4b:3b:64:50:74:09:f7:73:9b:ed:09:61:
                    0f:48:eb:de:2e:2e:40:81:d2:1d:c1:19:a4:3a:93:
                    18:52:6b:ee:b7:91:d5:cc:bb:8e:7e:1c:60:ed:d6:
                    28:7a:56:ec:c2:34:9d:32:ae:fe:c7:09:68:01:cb:
                    a1:78:41:b9:71:6f:14:6a:5b:e7:9c:b9:f2:99:1d:
                    75:fc:37:7d:4b:94:bb:27:b6:24:c4:49:3b:fb:33:
                    15:a6:22:31:91:1b:29:6b:44:27:02:7b:3b:9f:1f:
                    6a:d2:63:4b:0e:6a:7d:40:c9:67:4d:e8:2f:da:41:
                    cb:22:26:d4:1f:9a:01:a2:4e:83:f5:76:e5:c8:8e:
                    5f:93:24:01:01:ee:7b:8b:73:7a:31:3e:1a:51:71:
                    f9:31:ad:77:6c:66:59:6c:37:86:a9:32:46:ee:7d:
                    d9:42:9c:aa:df:a9:c8:4e:86:85:8f:b5:5b:2c:74:
                    4a:d5:aa:23:b0:8e:27:32:b3:fb:bc:80:4a:a9:5e:
                    88:e4:f2:06:d3:8c:11:c0:26:36:f7:08:dc:ae:fe:
                    76:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.152.0/24
                IPv6:
                  2620:0:8000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401021

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:56:fc:f4:f8:bc:4d:9c:88:3b:73:27:bb:28:78:8f:6e:20:
         10:f0:d3:63:92:26:f4:1c:c8:c5:e2:fd:ad:0d:69:52:1c:22:
         12:50:07:9a:24:66:4c:f7:73:50:23:58:6b:b7:5d:32:9b:d7:
         02:e1:d9:35:d8:95:3e:75:51:d5:7f:90:f1:df:24:99:1e:a6:
         46:d2:ea:1b:27:1d:8d:a7:23:f0:45:6a:f2:c3:d7:e7:9e:16:
         95:67:f1:af:0a:2b:95:e2:88:4f:51:83:5f:b5:e9:e0:78:18:
         48:0c:f7:f4:19:e5:52:52:e3:34:0f:60:f5:02:80:f9:f9:a3:
         ac:81:03:7b:ed:ed:41:17:c0:95:0d:86:29:66:7a:67:e3:70:
         c6:3c:96:92:c4:25:bc:85:2f:52:c7:28:f3:02:64:0c:95:aa:
         7d:37:60:ab:ce:f0:9e:a4:e9:fd:6a:3e:79:a0:c4:22:a9:ee:
         5f:88:3c:92:94:a9:53:00:e9:bd:2c:01:5b:18:f4:9a:d5:09:
         21:7b:40:9c:31:6c:31:cc:f8:72:fc:8c:19:ad:46:4b:5d:e4:
         dd:8e:0e:c0:2d:c7:a7:13:e3:b2:93:34:43:2e:c8:60:35:39:
         28:cf:86:db:6e:3c:f8:bd:46:ab:70:e3:a2:01:e3:13:7e:64:
         41:9a:b1:0a
-----BEGIN CERTIFICATE-----
MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEY0tU3uhseyFoY4rkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDYxNDA3NDAyMVoXDTI2MDkxNzA3NDAyMVowLzEtMCsGA1UEAxMk
NjhhMzU1NTItNDI3Ny00ZTYyLWE1MWUtNGIzMWFiOGQ0Y2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7FsIOInuNKUWQGzEiNqq0GwI7PPaNamOK31
yOMK1nIQFP2so3d1MfkwDMY4FihLO2RQdAn3c5vtCWEPSOveLi5AgdIdwRmkOpMY
Umvut5HVzLuOfhxg7dYoelbswjSdMq7+xwloAcuheEG5cW8UalvnnLnymR11/Dd9
S5S7J7YkxEk7+zMVpiIxkRspa0QnAns7nx9q0mNLDmp9QMlnTegv2kHLIibUH5oB
ok6D9XblyI5fkyQBAe57i3N6MT4aUXH5Ma13bGZZbDeGqTJG7n3ZQpyq36nIToaF
j7VbLHRK1aojsI4nMrP7vIBKqV6I5PIG04wRwCY29wjcrv52KwIDAQABo4IELDCC
BCgwHQYDVR0OBBYEFBayTa3IMGeulKtmz1ToxirmOlJZMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82
OGEzNTU1Mi00Mjc3LTRlNjItYTUxZS00YjMxYWI4ZDRjYTAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzY4YTM1NTUyLTQyNzctNGU2Mi1h
NTFlLTRiMzFhYjhkNGNhMC82OGEzNTU1Mi00Mjc3LTRlNjItYTUxZS00YjMxYWI4
ZDRjYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAAXsJgwDwQCAAIwCQMHBCYgAACAADAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMGHn0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARFb89Pi8TZyIO3Mnuyh4j24g
EPDTY5Im9BzIxeL9rQ1pUhwiElAHmiRmTPdzUCNYa7ddMpvXAuHZNdiVPnVR1X+Q
8d8kmR6mRtLqGycdjacj8EVq8sPX554WlWfxrworleKIT1GDX7Xp4HgYSAz39Bnl
UlLjNA9g9QKA+fmjrIEDe+3tQRfAlQ2GKWZ6Z+NwxjyWksQlvIUvUsco8wJkDJWq
fTdgq87wnqTp/Wo+eaDEIqnuX4g8kpSpUwDpvSwBWxj0mtUJIXtAnDFsMcz4cvyM
Ga1GS13k3Y4OwC3HpxPjspM0Qy7IYDU5KM+G2248+L1Gq3DjogHjE35kQZqxCg==
-----END CERTIFICATE-----