Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc.cer
File:                     50de7142-1147-4734-8a6c-9f603bd048cc.cer (raw, json)
Hash identifier:          6aIJe4bTinodDKt12Vlxl7vUA4MoCsNxMTseMr2NNx4=
Subject key identifier:   D2:77:26:5D:18:58:4B:D9:CF:D4:6A:91:6B:A0:9E:97:D0:2D:CC:6C
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844CF0EAC3F1A9407AF56D57C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/50de7142-1147-4734-8a6c-9f603bd048cc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 07 Feb 2024 05:01:02 +0000
Certificate not after:    Tue 12 May 2026 04:01:02 +0000
Subordinate resources:    AS: 40138
                          IP: 2620:95:4000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:cf:0e:ac:3f:1a:94:07:af:56:d5:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb  7 05:01:02 2024 GMT
            Not After : May 12 04:01:02 2026 GMT
        Subject: CN=50de7142-1147-4734-8a6c-9f603bd048cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:5b:d1:94:27:e1:f7:1b:b6:e7:60:c2:67:
                    fc:56:8c:83:fe:0a:c8:ac:19:c9:7d:b1:14:aa:c0:
                    80:7e:dc:ab:ff:aa:de:8f:ae:79:b8:d9:0e:1b:d4:
                    e2:77:8d:9f:27:f3:56:33:5d:25:9d:b3:91:70:f6:
                    69:15:be:34:5d:73:fb:c5:5b:e4:58:8b:f6:b1:27:
                    56:d6:59:46:2f:7d:52:35:f2:01:b8:78:06:52:84:
                    cd:91:7e:48:94:f0:ea:92:88:e4:3c:f1:f5:08:6f:
                    c9:47:29:58:09:d0:b2:0f:51:cc:66:5e:8e:d5:a0:
                    9d:39:43:5e:0e:50:aa:dd:ef:be:30:d5:17:e3:3c:
                    07:11:d9:9d:b2:6f:a6:11:d5:18:1f:d6:7c:0b:6d:
                    88:61:cc:33:f8:6c:b7:4c:0a:04:80:5f:cc:b1:a5:
                    3c:8f:f7:ec:a3:6b:2f:43:17:d7:ae:05:c9:c7:c2:
                    3f:9d:8b:48:09:54:05:25:87:18:9a:a6:fb:d0:6a:
                    90:fe:b2:5b:a6:28:55:51:22:d3:b0:19:f6:a9:14:
                    31:a9:d4:28:c5:3e:6d:c9:fc:c8:c6:73:d8:a9:3d:
                    46:82:bb:5a:71:eb:8e:a0:9c:a0:a3:78:f5:56:da:
                    a5:8b:ac:48:21:99:31:ff:b2:12:6a:f4:43:b6:e1:
                    a5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:77:26:5D:18:58:4B:D9:CF:D4:6A:91:6B:A0:9E:97:D0:2D:CC:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/50de7142-1147-4734-8a6c-9f603bd048cc/50de7142-1147-4734-8a6c-9f603bd048cc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:95:4000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40138

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:60:3e:3b:b4:03:4f:45:1d:5b:b8:17:2d:78:c3:17:04:b1:
         c8:f8:d1:1f:f3:aa:0a:04:40:3b:fc:59:51:81:14:5e:65:22:
         49:64:7a:f4:d6:0c:e4:f4:33:77:e7:86:88:24:39:f4:d7:a6:
         11:4a:77:c0:d6:1b:82:db:9c:d7:ad:39:d8:44:39:de:d0:d1:
         62:92:77:94:1b:f8:b2:ca:c3:3b:73:59:c3:03:55:5c:80:0c:
         94:9e:d4:23:6b:c0:94:ac:c3:7a:af:c2:b4:dc:25:ff:ef:a3:
         e3:eb:c2:10:d8:ad:79:6e:ad:ef:00:7c:b3:c0:c6:93:81:fd:
         4e:52:2d:83:ee:11:d3:d5:f8:34:92:ad:21:74:8c:0b:4c:80:
         dc:25:ee:37:ae:2d:7d:7b:1a:3e:4f:50:c5:8d:67:a7:ce:08:
         4f:7a:a9:82:5c:54:26:12:6d:e8:2d:d9:b3:22:2b:a2:63:2c:
         da:55:52:b1:a3:c6:71:0d:50:37:3a:3b:0f:42:6d:f2:ea:7b:
         11:0b:26:88:ec:e7:97:9f:c4:a7:4d:e6:35:8c:a7:5f:73:02:
         30:38:69:a2:59:e0:be:a2:ba:ea:15:8b:7e:c2:e3:49:5e:cc:
         4c:21:61:74:95:d3:ad:45:83:9e:06:82:2d:42:b1:04:aa:b3:
         31:a4:bc:f6
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWETPDqw/GpQHr1bVfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDIwNzA1MDEwMloXDTI2MDUxMjA0MDEwMlowLzEtMCsGA1UEAxMk
NTBkZTcxNDItMTE0Ny00NzM0LThhNmMtOWY2MDNiZDA0OGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5Vb0ZQn4fcbtudgwmf8VoyD/grIrBnJfbEU
qsCAftyr/6rej655uNkOG9Tid42fJ/NWM10lnbORcPZpFb40XXP7xVvkWIv2sSdW
1llGL31SNfIBuHgGUoTNkX5IlPDqkojkPPH1CG/JRylYCdCyD1HMZl6O1aCdOUNe
DlCq3e++MNUX4zwHEdmdsm+mEdUYH9Z8C22IYcwz+Gy3TAoEgF/MsaU8j/fso2sv
QxfXrgXJx8I/nYtICVQFJYcYmqb70GqQ/rJbpihVUSLTsBn2qRQxqdQoxT5tyfzI
xnPYqT1GgrtaceuOoJygo3j1Vtqli6xIIZkx/7ISavRDtuGlEQIDAQABo4IEHjCC
BBowHQYDVR0OBBYEFNJ3Jl0YWEvZz9RqkWugnpfQLcxsMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81
MGRlNzE0Mi0xMTQ3LTQ3MzQtOGE2Yy05ZjYwM2JkMDQ4Y2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzUwZGU3MTQyLTExNDctNDczNC04
YTZjLTlmNjAzYmQwNDhjYy81MGRlNzE0Mi0xMTQ3LTQ3MzQtOGE2Yy05ZjYwM2Jk
MDQ4Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQmIACVQAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw
BQIDAJzKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBABxgPju0A09FHVu4Fy14wxcEscj40R/zqgoEQDv8WVGB
FF5lIklkevTWDOT0M3fnhogkOfTXphFKd8DWG4LbnNetOdhEOd7Q0WKSd5Qb+LLK
wztzWcMDVVyADJSe1CNrwJSsw3qvwrTcJf/vo+PrwhDYrXlure8AfLPAxpOB/U5S
LYPuEdPV+DSSrSF0jAtMgNwl7jeuLX17Gj5PUMWNZ6fOCE96qYJcVCYSbegt2bMi
K6JjLNpVUrGjxnENUDc6Ow9CbfLqexELJojs55efxKdN5jWMp19zAjA4aaJZ4L6i
uuoVi37C40lezEwhYXSV061Fg54Ggi1CsQSqszGkvPY=
-----END CERTIFICATE-----