Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer
File:                     2bd92006-9133-44da-89c6-5e9014a854c9.cer (raw, json)
Hash identifier:          2bJs5Y8Poz3M0x6IlRlzYTANvABhcjYosUMtls4k7j4=
Subject key identifier:   DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584545AB23A7397C2B875288B0D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Mar 2024 16:41:41 +0000
Certificate not after:    Tue 23 Jun 2026 16:41:41 +0000
Subordinate resources:    AS: 27489
                          IP: 160.79.127.0/24
                          IP: 2602:f966::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:ab:23:a7:39:7c:2b:87:52:88:b0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar 20 16:41:41 2024 GMT
            Not After : Jun 23 16:41:41 2026 GMT
        Subject: CN=2bd92006-9133-44da-89c6-5e9014a854c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:08:95:da:c0:d3:d4:ff:e0:8b:55:bf:bc:
                    81:93:d9:e5:76:ba:83:5c:c7:57:b2:1d:64:76:93:
                    97:7e:ee:54:f8:99:b1:e1:68:cb:96:38:19:be:d0:
                    fe:2f:28:56:71:9b:e1:93:4b:f0:13:4b:62:35:1b:
                    b2:e0:b9:25:58:dc:31:78:e9:81:58:8a:c9:8e:35:
                    28:6d:f3:be:8e:14:e7:55:45:49:4c:76:46:11:55:
                    b6:91:ad:7a:4c:8b:1e:b7:fe:fa:a5:a7:fa:ec:3c:
                    6f:93:d6:21:82:1c:c8:d2:71:63:a2:7f:22:c8:ee:
                    d8:f1:62:5f:3c:3e:d0:ec:25:ae:51:5e:09:cd:fc:
                    3b:f2:21:25:02:8f:e2:bc:a9:ff:d4:f4:59:7a:05:
                    e9:e0:a2:33:47:7a:c2:38:34:bc:ff:8a:dc:e5:91:
                    c6:90:57:80:4d:2f:aa:3b:7f:63:84:84:7f:f5:bc:
                    2a:17:22:21:f6:73:69:c9:9d:42:19:1d:a3:55:33:
                    20:78:c3:bb:1c:f2:c9:33:d5:aa:f3:c7:d3:69:44:
                    b0:fa:3c:e4:be:fa:a3:37:fa:38:00:c9:a3:77:1c:
                    2d:3f:52:bb:b8:b3:f3:ad:93:b0:62:ae:b9:b8:d6:
                    1d:3d:d1:02:93:61:63:75:08:9b:65:54:04:09:60:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.127.0/24
                IPv6:
                  2602:f966::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27489

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:c1:1c:4a:4b:f4:a0:ec:13:b5:39:e0:77:0a:23:b9:e5:d7:
         43:7d:9c:ac:1c:22:eb:5a:a4:17:8b:53:74:cd:5a:09:5b:36:
         72:5d:8b:d6:7f:5c:91:9a:03:d2:65:9a:f6:0f:03:e9:33:ec:
         65:43:41:28:5c:35:31:38:dd:3c:00:eb:70:4a:3e:eb:80:4a:
         ea:4b:18:1c:5c:62:52:19:23:91:ce:09:73:46:f8:c4:3c:1b:
         f6:e8:8d:ca:84:c7:42:4d:be:25:45:f7:bb:02:bb:00:a5:58:
         75:7c:22:0f:f6:ae:35:54:e6:41:c9:4a:08:c3:25:c0:23:45:
         c1:f9:d5:15:ec:fc:23:2a:02:7f:bf:5e:4d:44:da:f5:77:df:
         31:31:d7:91:6c:e2:2e:31:5e:92:3c:20:60:18:ba:50:cc:03:
         0f:ae:a3:cb:ff:84:91:d2:d2:d4:5b:d1:b4:fa:75:ac:bc:05:
         06:e4:ae:1e:89:21:fb:94:16:18:68:22:76:d1:85:2a:07:ab:
         01:32:5c:7a:c1:2a:4f:e1:17:1f:2c:95:1c:71:c0:db:47:37:
         6b:02:83:f2:9d:ca:6c:cc:55:e2:6d:7a:c7:12:18:f4:b4:b8:
         17:34:f4:3a:ce:83:c0:48:fe:2b:dd:8b:cc:b1:b8:36:14:b9:
         ee:8a:28:02
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEVFqyOnOXwrh1KIsNQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDMyMDE2NDE0MVoXDTI2MDYyMzE2NDE0MVowLzEtMCsGA1UEAxMk
MmJkOTIwMDYtOTEzMy00NGRhLTg5YzYtNWU5MDE0YTg1NGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2voIldrA09T/4ItVv7yBk9nldrqDXMdXsh1k
dpOXfu5U+Jmx4WjLljgZvtD+LyhWcZvhk0vwE0tiNRuy4LklWNwxeOmBWIrJjjUo
bfO+jhTnVUVJTHZGEVW2ka16TIset/76paf67Dxvk9YhghzI0nFjon8iyO7Y8WJf
PD7Q7CWuUV4Jzfw78iElAo/ivKn/1PRZegXp4KIzR3rCODS8/4rc5ZHGkFeATS+q
O39jhIR/9bwqFyIh9nNpyZ1CGR2jVTMgeMO7HPLJM9Wq88fTaUSw+jzkvvqjN/o4
AMmjdxwtP1K7uLPzrZOwYq65uNYdPdECk2FjdQibZVQECWCp2wIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFNwfvegFjikO+UhVhvceaXoO3nsHMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8y
YmQ5MjAwNi05MTMzLTQ0ZGEtODljNi01ZTkwMTRhODU0YzkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzJiZDkyMDA2LTkxMzMtNDRkYS04
OWM2LTVlOTAxNGE4NTRjOS8yYmQ5MjAwNi05MTMzLTQ0ZGEtODljNi01ZTkwMTRh
ODU0YzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBACgT38wDgQCAAIwCAMGBCYC+WYAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAmthMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE7BHEpL9KDsE7U54HcKI7nl10N9
nKwcIutapBeLU3TNWglbNnJdi9Z/XJGaA9JlmvYPA+kz7GVDQShcNTE43TwA63BK
PuuASupLGBxcYlIZI5HOCXNG+MQ8G/bojcqEx0JNviVF97sCuwClWHV8Ig/2rjVU
5kHJSgjDJcAjRcH51RXs/CMqAn+/Xk1E2vV33zEx15Fs4i4xXpI8IGAYulDMAw+u
o8v/hJHS0tRb0bT6day8BQbkrh6JIfuUFhhoInbRhSoHqwEyXHrBKk/hFx8slRxx
wNtHN2sCg/KdymzMVeJtescSGPS0uBc09DrOg8BI/ivdi8yxuDYUue6KKAI=
-----END CERTIFICATE-----