Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c.cer
File:                     6fda6c5c-9c11-4f77-8128-71e07d46806c.cer (raw, json)
Hash identifier:          c3sa674Kgb/6QH4lyT4O+erDBslvFE8TPJ2+arLu1bM=
Subject key identifier:   34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285845A85120C46F7D106A2D185FC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 25 Apr 2024 00:45:20 +0000
Certificate not after:    Wed 29 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 62700
                          IP: 192.210.16.0/20
                          IP: 2620:44:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a8:51:20:c4:6f:7d:10:6a:2d:18:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Apr 25 00:45:20 2024 GMT
            Not After : Jul 29 00:45:20 2026 GMT
        Subject: CN=6fda6c5c-9c11-4f77-8128-71e07d46806c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:2a:f5:b5:43:d8:56:0c:ef:2f:6c:cc:af:
                    bb:bd:c7:79:fa:c0:15:4d:be:96:d6:f6:1b:4e:0d:
                    2a:03:3e:4e:45:8b:10:4a:98:d8:d9:21:ea:1c:66:
                    07:f0:76:4c:1c:6f:e4:c3:5f:50:eb:dc:da:63:e1:
                    25:9b:99:e6:01:8c:2d:c4:c0:0f:5e:e0:a4:eb:3b:
                    ef:62:07:5b:51:c1:25:60:c5:2a:bb:b2:52:16:35:
                    fb:ad:65:5c:f8:49:3f:ee:fd:65:7d:d4:17:47:e6:
                    97:66:60:5f:4d:45:48:42:e7:76:f8:26:f6:20:ea:
                    aa:4c:33:3a:db:12:d9:a6:a9:19:ca:7a:d1:21:9a:
                    d6:77:b0:a8:04:4e:6b:af:87:0e:24:5d:c6:40:ed:
                    d8:82:7e:33:be:3a:8b:77:55:e0:88:f8:ce:7e:3a:
                    46:39:5f:19:3a:1b:cf:3e:01:a3:41:3a:06:21:1b:
                    a2:f2:29:6a:00:d1:c4:c9:68:59:4d:0d:28:d2:6f:
                    61:f5:4c:18:8c:a0:bf:0c:69:c6:39:25:ff:43:f8:
                    db:df:dc:00:db:c5:0d:75:c4:43:0f:3d:6d:65:a7:
                    35:ce:62:fb:c6:ed:99:40:0c:3c:96:c1:a2:92:df:
                    be:e6:ea:7f:47:cb:ca:05:20:7e:06:8e:7f:9c:5b:
                    60:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:52:EC:75:65:9C:71:A0:F7:4D:93:FD:8A:BB:05:7F:63:F1:AC:D9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6fda6c5c-9c11-4f77-8128-71e07d46806c/6fda6c5c-9c11-4f77-8128-71e07d46806c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.210.16.0/20
                IPv6:
                  2620:44:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62700

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:50:f8:b9:bb:60:5a:fc:75:69:50:87:b5:f6:a2:00:36:4f:
         e4:27:d5:4c:18:b0:8b:9c:40:14:20:2c:23:de:e5:33:d6:04:
         54:96:7c:31:19:84:9a:5f:17:26:c5:73:d8:d5:11:e8:0e:6c:
         f2:3d:5e:a4:c8:a2:e8:b7:57:dd:4c:d6:0c:0a:88:ea:74:12:
         6e:95:5c:c0:74:70:6c:8e:6d:d3:14:40:8f:a1:71:13:3a:64:
         bb:79:32:27:9c:2d:13:fc:07:97:64:89:ef:5b:3e:64:03:c4:
         9f:93:62:a4:d2:97:2e:2d:cd:fa:1f:6f:05:97:ab:8b:ad:8e:
         67:74:57:e0:18:70:3a:8c:7f:91:d8:4a:c9:c5:1e:dc:f9:a8:
         97:54:e5:67:42:12:ea:b2:fd:3c:a5:aa:17:c7:05:a1:7b:dd:
         34:b7:01:7e:88:4d:4e:71:52:cb:dc:16:7b:db:33:dc:97:9d:
         61:e8:45:dc:5a:e5:59:be:d0:b8:87:69:07:84:d0:d7:bb:02:
         00:aa:65:7d:fa:c9:b0:85:b1:b8:d9:a3:a0:bf:68:df:27:da:
         96:a3:80:4e:d8:f9:5e:d5:08:58:45:f9:2c:30:85:f9:ef:f5:
         77:07:b3:19:ff:4b:f7:c5:e2:da:6f:2e:8d:6e:ca:02:e0:0f:
         aa:2a:b6:13
-----BEGIN CERTIFICATE-----
MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEWoUSDEb30Qai0YX8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI0MDQyNTAwNDUyMFoXDTI2MDcyOTAwNDUyMFowLzEtMCsGA1UEAxMk
NmZkYTZjNWMtOWMxMS00Zjc3LTgxMjgtNzFlMDdkNDY4MDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZAq9bVD2FYM7y9szK+7vcd5+sAVTb6W1vYb
Tg0qAz5ORYsQSpjY2SHqHGYH8HZMHG/kw19Q69zaY+Elm5nmAYwtxMAPXuCk6zvv
YgdbUcElYMUqu7JSFjX7rWVc+Ek/7v1lfdQXR+aXZmBfTUVIQud2+Cb2IOqqTDM6
2xLZpqkZynrRIZrWd7CoBE5rr4cOJF3GQO3Ygn4zvjqLd1XgiPjOfjpGOV8ZOhvP
PgGjQToGIRui8ilqANHEyWhZTQ0o0m9h9UwYjKC/DGnGOSX/Q/jb39wA28UNdcRD
Dz1tZac1zmL7xu2ZQAw8lsGikt++5up/R8vKBSB+Bo5/nFtgRQIDAQABo4IELDCC
BCgwHQYDVR0OBBYEFDRS7HVlnHGg902T/Yq7BX9j8azZMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82
ZmRhNmM1Yy05YzExLTRmNzctODEyOC03MWUwN2Q0NjgwNmMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZmZGE2YzVjLTljMTEtNGY3Ny04
MTI4LTcxZTA3ZDQ2ODA2Yy82ZmRhNmM1Yy05YzExLTRmNzctODEyOC03MWUwN2Q0
NjgwNmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBATA0hAwDwQCAAIwCQMHACYgAERAADAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMA9OwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACVD4ubtgWvx1aVCHtfaiADZP
5CfVTBiwi5xAFCAsI97lM9YEVJZ8MRmEml8XJsVz2NUR6A5s8j1epMii6LdX3UzW
DAqI6nQSbpVcwHRwbI5t0xRAj6FxEzpku3kyJ5wtE/wHl2SJ71s+ZAPEn5NipNKX
Li3N+h9vBZeri62OZ3RX4BhwOox/kdhKycUe3Pmol1TlZ0IS6rL9PKWqF8cFoXvd
NLcBfohNTnFSy9wWe9sz3JedYehF3FrlWb7QuIdpB4TQ17sCAKplffrJsIWxuNmj
oL9o3yfalqOATtj5XtUIWEX5LDCF+e/1dwezGf9L98Xi2m8ujW7KAuAPqiq2Ew==
-----END CERTIFICATE-----