Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab.cer
File:                     10cf0e64-be53-4add-9414-d9b9f7f83aab.cer (raw, json)
Hash identifier:          yfFHZ6o7w7dCpfE9iU9QUnSalb4HRXZR19hDZRmgFNc=
Subject key identifier:   19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584505AFBF012B9D8FC39881F000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 26 Feb 2024 18:39:13 +0000
Certificate not after:    Wed 27 May 2026 01:49:58 +0000
Subordinate resources:    AS: 398906
                          IP: 203.217.148.0/23
                          IP: 2602:f967::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:af:bf:01:2b:9d:8f:c3:98:81:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb 26 18:39:13 2024 GMT
            Not After : May 27 01:49:58 2026 GMT
        Subject: CN=10cf0e64-be53-4add-9414-d9b9f7f83aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cd:75:ff:19:f5:ec:b3:0a:22:fa:80:51:91:
                    91:02:58:20:b8:29:d7:0c:cf:75:0e:ce:13:04:72:
                    8f:6e:c8:a6:90:d4:5c:36:ac:5e:71:6d:ae:81:23:
                    9c:eb:e0:59:2d:22:75:2d:a7:5e:e5:2a:01:88:d8:
                    ec:49:f1:a9:bf:1e:17:9f:f8:72:fa:62:f7:c0:b7:
                    35:52:b6:0d:b2:ba:33:b6:f0:93:2c:80:07:a9:36:
                    c4:9e:8d:dd:f1:b7:98:39:c6:da:c6:bc:23:49:f8:
                    08:1b:e9:07:30:47:48:26:a7:a1:48:9e:49:2c:de:
                    52:b1:80:34:25:3d:67:ba:94:8c:f2:e5:bb:06:cb:
                    0a:a2:3c:a3:41:be:4a:9e:7a:84:54:6d:52:e3:8e:
                    48:3c:02:f3:2b:9a:55:a8:da:5e:8f:01:ff:40:e7:
                    53:85:bd:f1:39:21:e3:19:89:a6:51:aa:70:28:bb:
                    7a:75:4d:b4:f8:e6:1a:71:0e:0f:c5:51:99:98:49:
                    9c:1f:48:d2:e0:86:e6:18:49:28:7c:d5:58:83:18:
                    cd:d5:f2:12:d1:e9:3f:47:a2:f7:3f:ec:05:f3:06:
                    d0:99:5d:aa:aa:3c:89:14:66:3f:8b:62:d9:78:8a:
                    47:54:bb:5a:b1:c7:d9:dd:3a:04:38:0b:34:ff:30:
                    e9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0A:22:B2:E2:9A:9E:A9:E1:AC:10:78:0E:35:BD:12:AE:0A:58:3F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/10cf0e64-be53-4add-9414-d9b9f7f83aab/10cf0e64-be53-4add-9414-d9b9f7f83aab.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.217.148.0/23
                IPv6:
                  2602:f967::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398906

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c8:ea:ae:1b:83:22:65:3f:83:1e:9b:b2:62:61:9a:c6:42:
         91:8d:48:a8:1d:3b:56:da:9e:39:7d:3f:08:b7:bb:7a:20:0a:
         2a:c3:05:54:e2:c9:b8:48:65:0f:48:0c:ca:27:76:2b:d9:c7:
         78:40:e3:bd:27:ed:a2:bc:e0:3d:1e:b9:51:ac:74:da:67:cf:
         09:29:ca:fe:57:35:65:8d:8a:39:ec:70:d6:50:e9:8a:5e:29:
         bb:49:68:ad:91:7b:05:75:7d:a5:c6:76:a4:e6:28:ab:92:76:
         35:a5:9d:ec:87:62:e6:a8:fc:76:b0:de:f0:81:dd:0d:b4:60:
         9d:46:bc:5b:45:a4:59:fc:96:87:3b:4b:03:7a:85:7f:43:c0:
         bc:a7:de:bb:26:a7:dd:4b:bd:3c:d8:65:07:23:ce:ad:27:84:
         f7:ad:24:82:f9:2c:95:70:94:23:e4:3e:e1:dc:b9:06:8b:54:
         d2:e1:e1:b3:e2:af:fb:71:3c:2b:23:28:fe:58:fe:da:ed:8d:
         e1:14:f3:92:7f:83:b4:ec:50:5d:5a:2a:ea:88:28:ad:eb:02:
         d4:ac:bc:86:13:1b:09:e7:59:06:6a:3a:5e:27:24:f5:51:9f:
         24:da:35:e7:41:12:fd:8e:e0:07:10:14:26:19:e0:51:ef:f2:
         4e:86:89:f7
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEUFr78BK52Pw5iB8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDIyNjE4MzkxM1oXDTI2MDUyNzAxNDk1OFowLzEtMCsGA1UEAxMk
MTBjZjBlNjQtYmU1My00YWRkLTk0MTQtZDliOWY3ZjgzYWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic11/xn17LMKIvqAUZGRAlgguCnXDM91Ds4T
BHKPbsimkNRcNqxecW2ugSOc6+BZLSJ1Lade5SoBiNjsSfGpvx4Xn/hy+mL3wLc1
UrYNsroztvCTLIAHqTbEno3d8beYOcbaxrwjSfgIG+kHMEdIJqehSJ5JLN5SsYA0
JT1nupSM8uW7BssKojyjQb5KnnqEVG1S445IPALzK5pVqNpejwH/QOdThb3xOSHj
GYmmUapwKLt6dU20+OYacQ4PxVGZmEmcH0jS4IbmGEkofNVYgxjN1fIS0ek/R6L3
P+wF8wbQmV2qqjyJFGY/i2LZeIpHVLtascfZ3ToEOAs0/zDpLQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFBkKIrLimp6p4awQeA41vRKuClg/MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x
MGNmMGU2NC1iZTUzLTRhZGQtOTQxNC1kOWI5ZjdmODNhYWIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzEwY2YwZTY0LWJlNTMtNGFkZC05
NDE0LWQ5YjlmN2Y4M2FhYi8xMGNmMGU2NC1iZTUzLTRhZGQtOTQxNC1kOWI5Zjdm
ODNhYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAHL2ZQwDgQCAAIwCAMGACYC+WcAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYWOjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACyOquG4MiZT+DHpuyYmGaxkKR
jUioHTtW2p45fT8It7t6IAoqwwVU4sm4SGUPSAzKJ3Yr2cd4QOO9J+2ivOA9HrlR
rHTaZ88JKcr+VzVljYo57HDWUOmKXim7SWitkXsFdX2lxnak5iirknY1pZ3sh2Lm
qPx2sN7wgd0NtGCdRrxbRaRZ/JaHO0sDeoV/Q8C8p967JqfdS7082GUHI86tJ4T3
rSSC+SyVcJQj5D7h3LkGi1TS4eGz4q/7cTwrIyj+WP7a7Y3hFPOSf4O07FBdWirq
iCit6wLUrLyGExsJ51kGajpeJyT1UZ8k2jXnQRL9juAHEBQmGeBR7/JOhon3
-----END CERTIFICATE-----