Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.cer
File:                     1df08146-5ee7-4c5b-9f08-3436e38ab3bc.cer (raw, json)
Hash identifier:          y4r1q679PYPe3xHqX8yxzXCVDmogGLUurbFLJ2UO2HY=
Subject key identifier:   55:71:F3:B6:E8:B2:11:08:B1:95:A4:6D:6D:78:65:76:F7:28:77:33
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285844940D30E829AFD0CE50AA3800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Jan 2024 01:45:21 +0000
Certificate not after:    Tue 21 Apr 2026 00:45:21 +0000
Subordinate resources:    AS: 399619
                          IP: 23.138.24.0/24
                          IP: 2602:fb57::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:94:0d:30:e8:29:af:d0:ce:50:aa:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Jan 17 01:45:21 2024 GMT
            Not After : Apr 21 00:45:21 2026 GMT
        Subject: CN=1df08146-5ee7-4c5b-9f08-3436e38ab3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:bb:d3:0f:bf:65:0c:2b:b6:3c:a5:18:a1:
                    97:b9:56:ee:47:7d:e2:12:f8:a4:26:34:08:7a:91:
                    81:31:e5:f3:56:2d:9d:d7:3e:47:39:50:c6:de:c5:
                    27:84:03:47:1b:ad:02:2e:e2:2c:a4:fe:9d:71:d6:
                    a5:30:da:32:5c:09:76:e9:5a:fc:2d:19:d4:dc:07:
                    62:bd:0a:93:b6:7c:ab:e4:d5:92:35:4c:cc:29:b6:
                    af:b8:9f:e7:05:ff:5a:bd:91:ca:fa:23:d4:68:db:
                    ee:d4:1f:28:cf:1e:dd:b7:77:29:17:95:93:b2:a5:
                    52:29:b2:39:c2:25:c7:e8:e9:4e:3a:eb:8b:47:e7:
                    c1:6a:3d:dd:7d:a8:2d:ef:6d:17:36:86:e0:70:9c:
                    3e:8d:11:d7:24:f6:25:6c:c6:08:43:5a:e4:fb:0c:
                    90:6b:d0:06:30:92:3b:e1:5d:9d:26:91:d0:0d:a0:
                    7e:30:6c:ae:76:d1:61:16:21:1a:10:fd:c4:36:a7:
                    d0:55:03:00:0e:f1:34:e1:19:55:90:63:7c:e0:d4:
                    75:91:33:ab:94:60:68:68:5c:e5:d0:6b:48:92:f5:
                    af:b9:ca:3f:c8:83:ac:52:2c:42:67:de:37:84:36:
                    e7:42:89:84:40:31:a8:6e:dc:92:78:99:0b:cd:43:
                    ef:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:71:F3:B6:E8:B2:11:08:B1:95:A4:6D:6D:78:65:76:F7:28:77:33
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.24.0/24
                IPv6:
                  2602:fb57::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399619

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:9f:6a:d5:cf:a0:a1:ba:f6:5a:3e:ee:af:8b:c8:cc:92:8d:
         73:5f:ea:7f:e9:4f:85:80:dd:5f:bb:49:39:f1:e6:7a:0b:42:
         06:82:0e:50:54:fe:bb:0e:bb:6e:95:90:41:c5:6b:3f:e7:1f:
         b8:d1:3a:2d:52:4f:7b:09:02:37:8f:16:29:fd:76:eb:c4:e3:
         dd:60:63:65:22:9c:1f:51:ac:05:73:82:4c:10:f8:55:c5:e5:
         a7:15:93:01:c3:18:c4:60:60:8d:fc:8e:ba:b4:a4:78:1e:33:
         ce:1e:28:c1:84:ff:96:82:33:07:15:06:96:fc:a7:80:c1:c3:
         e7:14:f7:95:53:84:47:b1:e9:40:3b:74:99:dd:05:78:17:e6:
         e0:67:f9:fe:cd:f2:b7:4c:4a:ec:3c:19:b8:df:aa:88:25:7e:
         d2:d7:c0:30:c5:6f:c3:7e:0d:dc:84:33:98:9f:f7:de:55:26:
         7a:fe:5e:67:05:ee:07:00:8c:17:1c:dc:ae:c6:a8:a5:d4:65:
         fa:a6:01:d3:f9:30:01:98:22:ba:c0:63:45:14:65:ab:8f:f5:
         99:d7:f8:d9:8a:56:f1:af:67:b4:ae:b4:0c:2b:26:8d:4d:4f:
         e8:8a:a9:74:b9:bf:5f:10:ee:04:41:c8:59:60:27:44:26:61:
         b0:9b:c5:53
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWESUDTDoKa/QzlCqOAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI0MDExNzAxNDUyMVoXDTI2MDQyMTAwNDUyMVowLzEtMCsGA1UEAxMk
MWRmMDgxNDYtNWVlNy00YzViLTlmMDgtMzQzNmUzOGFiM2JjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA+70w+/ZQwrtjylGKGXuVbuR33iEvikJjQI
epGBMeXzVi2d1z5HOVDG3sUnhANHG60CLuIspP6dcdalMNoyXAl26Vr8LRnU3Adi
vQqTtnyr5NWSNUzMKbavuJ/nBf9avZHK+iPUaNvu1B8ozx7dt3cpF5WTsqVSKbI5
wiXH6OlOOuuLR+fBaj3dfagt720XNobgcJw+jRHXJPYlbMYIQ1rk+wyQa9AGMJI7
4V2dJpHQDaB+MGyudtFhFiEaEP3ENqfQVQMADvE04RlVkGN84NR1kTOrlGBoaFzl
0GtIkvWvuco/yIOsUixCZ943hDbnQomEQDGobtySeJkLzUPvUwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFFVx87boshEIsZWkbW14ZXb3KHczMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x
ZGYwODE0Ni01ZWU3LTRjNWItOWYwOC0zNDM2ZTM4YWIzYmMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFkZjA4MTQ2LTVlZTctNGM1Yi05
ZjA4LTM0MzZlMzhhYjNiYy8xZGYwODE0Ni01ZWU3LTRjNWItOWYwOC0zNDM2ZTM4
YWIzYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXihgwDgQCAAIwCAMGBCYC+1cAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYZAzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFn2rVz6ChuvZaPu6vi8jMko1z
X+p/6U+FgN1fu0k58eZ6C0IGgg5QVP67DrtulZBBxWs/5x+40TotUk97CQI3jxYp
/XbrxOPdYGNlIpwfUawFc4JMEPhVxeWnFZMBwxjEYGCN/I66tKR4HjPOHijBhP+W
gjMHFQaW/KeAwcPnFPeVU4RHselAO3SZ3QV4F+bgZ/n+zfK3TErsPBm436qIJX7S
18AwxW/Dfg3chDOYn/feVSZ6/l5nBe4HAIwXHNyuxqil1GX6pgHT+TABmCK6wGNF
FGWrj/WZ1/jZilbxr2e0rrQMKyaNTU/oiql0ub9fEO4EQchZYCdEJmGwm8VT
-----END CERTIFICATE-----