Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer
File:                     985592b9-8e7b-4ccb-87dc-e1de2e98bd81.cer (raw, json)
Hash identifier:          KJKSoAk41eiWWnZ8Z4pzAEL/OamP+5sKx7fmDivJjsU=
Subject key identifier:   CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858434A82B4CA369B2DC3BE1ED000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Sep 2023 00:45:22 +0000
Certificate not after:    Wed 24 Dec 2025 01:45:22 +0000
Subordinate resources:    AS: 62668
                          IP: 23.160.224.0/24
                          IP: 104.167.248.0/22
                          IP: 2605:c40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:4a:82:b4:ca:36:9b:2d:c3:be:1e:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Sep 21 00:45:22 2023 GMT
            Not After : Dec 24 01:45:22 2025 GMT
        Subject: CN=985592b9-8e7b-4ccb-87dc-e1de2e98bd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:40:6c:7d:9a:8d:e9:24:a0:4a:b9:43:2d:cb:
                    b5:78:f9:e1:14:bb:bf:5b:d9:ab:fc:54:70:db:21:
                    ea:57:98:b0:11:8f:33:90:9c:44:03:44:ac:17:3b:
                    33:ae:6c:7d:9c:2f:82:36:aa:09:57:ca:12:99:f1:
                    a9:13:45:2e:6a:53:20:43:0a:08:ac:2b:8b:30:39:
                    3f:5c:fb:69:d6:b4:67:2c:58:c6:61:60:e4:ca:12:
                    f0:b8:a1:28:50:0a:2c:f9:ef:1b:3e:94:82:4c:d6:
                    d4:05:5d:20:a8:46:d6:06:9e:0c:3d:f1:40:c5:e8:
                    c6:99:3f:67:5b:1c:33:f7:b8:75:66:96:61:c4:12:
                    91:ea:8c:de:4a:78:c2:7a:8c:13:1b:4a:88:ba:ad:
                    dd:25:4c:8a:3f:6e:b3:be:3b:2f:78:eb:14:98:00:
                    09:b8:fd:f1:bc:6e:b2:72:90:9d:50:f2:61:fc:ec:
                    a3:dc:9b:78:4a:7a:d9:39:91:86:66:7f:98:e9:85:
                    f4:77:49:41:21:ef:c8:91:46:f0:79:6c:72:2c:f9:
                    19:45:e4:3c:bf:0c:91:c9:f1:3f:61:13:e4:8f:55:
                    87:9a:35:d5:9d:61:01:57:5d:70:72:48:2b:0a:98:
                    90:c4:91:a2:56:ff:8b:e2:9e:42:d0:f9:db:9b:b5:
                    e3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:40:36:C1:CA:DF:FE:8A:89:4B:F4:4B:3D:84:0B:4D:86:7F:DB:16
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/985592b9-8e7b-4ccb-87dc-e1de2e98bd81/985592b9-8e7b-4ccb-87dc-e1de2e98bd81.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.224.0/24
                  104.167.248.0/22
                IPv6:
                  2605:c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62668

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c1:98:ea:d5:b5:71:2e:2d:dd:68:5d:71:ab:ac:4a:3c:50:
         a9:c0:c9:38:3b:5f:6a:04:30:d2:59:0c:ce:14:70:ea:1f:d1:
         92:69:de:b6:7d:c4:e4:87:31:8b:fc:49:f1:00:9e:ed:f5:1a:
         3d:a6:18:2b:6a:3b:0d:12:d7:c6:bd:db:a3:66:8b:60:ab:33:
         f1:a9:32:58:ae:fb:23:68:81:86:7f:02:60:1d:59:36:6c:42:
         4c:72:c2:17:4d:67:18:72:d2:16:1b:a8:71:95:86:5b:ec:fc:
         b4:a5:5e:76:90:ae:71:02:36:71:dc:51:52:e7:82:d7:d8:5c:
         fd:77:d1:09:68:10:f4:df:32:a9:81:0f:27:06:01:b8:d4:45:
         5a:e8:3a:26:d4:b9:fb:1c:eb:dc:9f:4a:11:25:82:15:18:c7:
         30:da:ef:e4:05:c7:26:2d:00:46:82:db:a7:6e:2d:1d:4d:20:
         f5:d1:6c:81:14:34:02:72:0e:db:60:26:74:87:b2:12:a8:26:
         09:fc:91:b1:17:0c:63:f8:57:f1:1e:1f:61:a1:7e:f6:99:f5:
         b2:e1:16:50:7d:03:28:69:aa:b8:64:45:29:1b:78:10:c0:8c:
         e7:0f:24:0b:c5:94:57:99:07:fe:1d:03:0b:fd:2e:d4:d9:84:
         98:6e:b7:2e
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWENKgrTKNpstw74e0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTIzMDkyMTAwNDUyMloXDTI1MTIyNDAxNDUyMlowLzEtMCsGA1UEAxMk
OTg1NTkyYjktOGU3Yi00Y2NiLTg3ZGMtZTFkZTJlOThiZDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkBsfZqN6SSgSrlDLcu1ePnhFLu/W9mr/FRw
2yHqV5iwEY8zkJxEA0SsFzszrmx9nC+CNqoJV8oSmfGpE0UualMgQwoIrCuLMDk/
XPtp1rRnLFjGYWDkyhLwuKEoUAos+e8bPpSCTNbUBV0gqEbWBp4MPfFAxejGmT9n
Wxwz97h1ZpZhxBKR6ozeSnjCeowTG0qIuq3dJUyKP26zvjsveOsUmAAJuP3xvG6y
cpCdUPJh/Oyj3Jt4SnrZOZGGZn+Y6YX0d0lBIe/IkUbweWxyLPkZReQ8vwyRyfE/
YRPkj1WHmjXVnWEBV11wckgrCpiQxJGiVv+L4p5C0Pnbm7XjawIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFMtANsHK3/6KiUv0Sz2EC02Gf9sWMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85
ODU1OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRlMmU5OGJkODEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzk4NTU5MmI5LThlN2ItNGNjYi04
N2RjLWUxZGUyZTk4YmQ4MS85ODU1OTJiOS04ZTdiLTRjY2ItODdkYy1lMWRlMmU5
OGJkODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAAXoOADBAJop/gwDQQCAAIwBwMFACYFDEAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDAPTMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADjBmOrVtXEuLd1oXXGr
rEo8UKnAyTg7X2oEMNJZDM4UcOof0ZJp3rZ9xOSHMYv8SfEAnu31Gj2mGCtqOw0S
18a926Nmi2CrM/GpMliu+yNogYZ/AmAdWTZsQkxywhdNZxhy0hYbqHGVhlvs/LSl
XnaQrnECNnHcUVLngtfYXP130QloEPTfMqmBDycGAbjURVroOibUufsc69yfShEl
ghUYxzDa7+QFxyYtAEaC26duLR1NIPXRbIEUNAJyDttgJnSHshKoJgn8kbEXDGP4
V/EeH2GhfvaZ9bLhFlB9AyhpqrhkRSkbeBDAjOcPJAvFlFeZB/4dAwv9LtTZhJhu
ty4=
-----END CERTIFICATE-----