Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer
File:                     3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer (raw, json)
Hash identifier:          CQ63o5LzTWGH0iLnN2d2Y2XAjcsmFR37GecoX2SG3dc=
Subject key identifier:   0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844D614F4AD7739CB0237E97780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 09 Feb 2024 17:24:21 +0000
Certificate not after:    Thu 14 May 2026 16:24:21 +0000
Subordinate resources:    AS: 30691
                          IP: 65.111.240.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d6:14:f4:ad:77:39:cb:02:37:e9:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb  9 17:24:21 2024 GMT
            Not After : May 14 16:24:21 2026 GMT
        Subject: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:9c:60:09:eb:32:3f:bf:87:dc:26:28:4d:
                    f0:3a:10:a0:07:6f:d8:a7:fa:56:8b:d1:f5:8d:24:
                    f9:2f:59:42:53:0e:62:a0:ae:97:92:11:e4:1f:50:
                    9a:19:2a:6d:cf:10:53:4b:da:e6:54:0e:de:bf:14:
                    10:e7:da:27:c0:67:eb:d4:01:e9:25:8e:8e:40:91:
                    da:a5:7c:a8:25:38:4c:a9:a5:a0:47:c4:b9:fa:38:
                    af:51:18:fc:52:24:1c:45:28:95:86:de:73:24:49:
                    e1:04:04:6c:02:76:26:3b:a4:eb:39:ae:88:01:1d:
                    f7:f1:47:4c:26:4a:24:39:6a:35:56:74:0e:13:9d:
                    7e:27:8b:e3:b4:45:de:16:1f:97:f3:c2:48:0e:a2:
                    5b:77:c5:e6:d3:d4:21:e7:61:3d:a0:9b:f1:e7:47:
                    f2:a4:6a:c5:d1:10:63:23:ae:fb:c9:7d:fa:6b:38:
                    c5:74:b8:ab:90:73:66:34:e6:3b:9e:05:4f:c5:c7:
                    db:5d:da:fc:a8:e6:8d:29:7c:85:9d:a6:f8:96:f9:
                    2a:fb:8c:43:95:e4:b8:7f:1f:30:78:cb:78:45:81:
                    d0:3c:58:27:6c:7b:85:ab:2c:8e:e4:55:a8:82:40:
                    09:0b:24:6d:44:2b:33:21:b8:1d:6d:fa:1f:28:7c:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.111.240.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30691

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:69:21:d3:f6:5d:9b:ac:20:3b:69:8f:e3:4a:7f:da:9e:
         0a:23:34:8a:9f:f8:b2:94:3e:3c:ad:d4:e7:8e:0d:d7:72:e4:
         4d:2c:f9:91:59:67:bc:cf:1b:0e:f3:09:e5:2a:ba:8e:cc:18:
         fd:4a:85:cd:58:02:62:03:eb:3d:63:35:dd:de:61:76:5a:3e:
         5b:cb:37:43:26:14:8b:fc:84:bc:3a:20:3d:84:50:d1:d1:aa:
         91:fd:8b:0a:fe:8a:44:a7:88:13:15:7a:6b:04:74:46:be:1e:
         6e:ab:76:19:46:55:05:a3:80:16:de:ee:02:7b:e1:84:50:b0:
         eb:84:35:e7:09:0f:f8:ce:61:02:59:a0:66:c0:60:ed:ab:df:
         1b:58:18:ed:d8:3e:73:0a:c4:ed:8d:90:60:61:88:37:bb:3b:
         61:d9:a5:ed:e8:b7:46:20:df:7c:13:d0:17:5e:04:47:d2:8d:
         62:9b:6b:1c:40:cd:3b:11:d4:c0:24:18:a0:40:ea:07:0a:e9:
         4f:5e:5c:e8:2f:2d:df:b1:f1:ad:9c:22:29:df:bf:d1:18:09:
         ca:62:66:7f:15:37:82:2b:82:e4:b1:4d:20:71:6f:28:ce:63:
         af:98:ce:f3:48:0b:7b:01:f2:23:01:ef:75:fd:55:bb:e7:68:
         21:a7:14:90
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWETWFPStdznLAjfpd4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDIwOTE3MjQyMVoXDTI2MDUxNDE2MjQyMVowLzEtMCsGA1UEAxMk
M2YyZDM3OGQtMjBlMS00YjVmLTg1YjktZThjNGNiYTVkNWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJqcYAnrMj+/h9wmKE3wOhCgB2/Yp/pWi9H1
jST5L1lCUw5ioK6XkhHkH1CaGSptzxBTS9rmVA7evxQQ59onwGfr1AHpJY6OQJHa
pXyoJThMqaWgR8S5+jivURj8UiQcRSiVht5zJEnhBARsAnYmO6TrOa6IAR338UdM
JkokOWo1VnQOE51+J4vjtEXeFh+X88JIDqJbd8Xm09Qh52E9oJvx50fypGrF0RBj
I677yX36azjFdLirkHNmNOY7ngVPxcfbXdr8qOaNKXyFnab4lvkq+4xDleS4fx8w
eMt4RYHQPFgnbHuFqyyO5FWogkAJCyRtRCszIbgdbfofKHyuGQIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFAqqkggzDwrOyA45aX/hhWPRSUpQMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8z
ZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2JhNWQ1ZDcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzNmMmQzNzhkLTIwZTEtNGI1Zi04
NWI5LWU4YzRjYmE1ZDVkNy8zZjJkMzc4ZC0yMGUxLTRiNWYtODViOS1lOGM0Y2Jh
NWQ1ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBARBb/AwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
d+MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAbTppIdP2XZusIDtpj+NKf9qeCiM0ip/4spQ+PK3U544N13Lk
TSz5kVlnvM8bDvMJ5Sq6jswY/UqFzVgCYgPrPWM13d5hdlo+W8s3QyYUi/yEvDog
PYRQ0dGqkf2LCv6KRKeIExV6awR0Rr4ebqt2GUZVBaOAFt7uAnvhhFCw64Q15wkP
+M5hAlmgZsBg7avfG1gY7dg+cwrE7Y2QYGGIN7s7Ydml7ei3RiDffBPQF14ER9KN
YptrHEDNOxHUwCQYoEDqBwrpT15c6C8t37HxrZwiKd+/0RgJymJmfxU3giuC5LFN
IHFvKM5jr5jO80gLewHyIwHvdf1Vu+doIacUkA==
-----END CERTIFICATE-----