Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63a533d5-d63e-42bb-a464-610ea175159c.cer
File:                     63a533d5-d63e-42bb-a464-610ea175159c.cer (raw, json)
Hash identifier:          2jbtqsdEoNnkakhY0lDOYbgNRRVdeqzPMAcXMFzDTLY=
Subject key identifier:   6E:85:BD:4C:3E:15:36:70:50:52:61:E8:5F:C6:27:EA:6C:B7:87:26
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844AF5BE62D1AD6CB3AB0C871A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63a533d5-d63e-42bb-a464-610ea175159c/63a533d5-d63e-42bb-a464-610ea175159c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63a533d5-d63e-42bb-a464-610ea175159c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 Jan 2024 20:30:46 +0000
Certificate not after:    Thu 30 Apr 2026 19:30:46 +0000
Subordinate resources:    AS: 62936
                          IP: 162.249.24.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:af:5b:e6:2d:1a:d6:cb:3a:b0:c8:71:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 26 20:30:46 2024 GMT
            Not After : Apr 30 19:30:46 2026 GMT
        Subject: CN=63a533d5-d63e-42bb-a464-610ea175159c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5d:82:a3:af:fc:41:33:d1:53:92:79:e7:20:
                    42:cf:4a:45:0f:ce:34:80:f0:53:73:63:75:2e:3b:
                    e2:6f:6b:aa:9c:e6:ee:06:1b:e7:26:83:e7:ad:68:
                    dd:6f:4c:1f:a2:8f:a0:28:7c:54:75:e7:a6:1e:25:
                    bf:6c:e1:46:91:aa:8b:58:11:ca:68:ca:20:89:54:
                    09:6a:44:cf:a8:89:9b:fc:c7:b2:06:bf:88:aa:4e:
                    98:b1:c0:ef:5d:7d:ba:61:6a:37:05:69:3a:8a:96:
                    52:f7:4e:23:83:49:4f:91:b7:d9:ee:bb:db:3a:93:
                    33:83:f0:d1:af:0c:cb:8e:80:f0:64:44:52:27:fc:
                    e5:00:4a:65:e9:30:9d:87:da:d6:be:09:31:58:16:
                    ea:28:57:e8:ab:bd:ff:27:7a:6c:d1:87:3f:c9:e5:
                    eb:35:36:e8:32:fd:0b:85:7d:ea:7f:2b:aa:91:8b:
                    38:8b:19:4e:fd:35:d0:78:8d:17:f9:71:3f:f0:90:
                    23:bb:c1:5a:9c:c0:3c:69:35:38:0c:65:18:61:99:
                    bf:41:bb:49:3d:66:8c:e1:79:d7:f7:e6:93:5b:47:
                    82:55:08:54:3c:86:d6:b2:39:6a:ce:c2:04:51:18:
                    a6:96:16:b8:fe:58:cd:98:df:ae:c7:e7:1d:2a:26:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:85:BD:4C:3E:15:36:70:50:52:61:E8:5F:C6:27:EA:6C:B7:87:26
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63a533d5-d63e-42bb-a464-610ea175159c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/63a533d5-d63e-42bb-a464-610ea175159c/63a533d5-d63e-42bb-a464-610ea175159c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.24.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62936

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1d:92:3e:b0:18:ce:f6:76:98:c7:9b:fe:16:5e:5a:0c:e2:
         81:69:6e:e5:44:cf:64:93:9a:94:98:b2:52:2f:cb:22:68:45:
         2b:bb:e4:e1:3e:10:ea:ab:b8:7b:cc:7e:96:2c:24:8c:02:4f:
         36:90:9c:d5:cf:75:db:84:91:6f:11:68:86:aa:a8:49:c0:11:
         a1:63:09:00:91:c6:6d:36:5e:a3:ef:0f:ae:b9:2f:51:d0:1d:
         41:4e:43:0e:0b:62:ea:de:83:89:7b:df:10:29:28:9b:5e:dd:
         da:d4:18:a0:d3:eb:5c:31:17:f6:e7:ee:b2:b7:0d:58:87:4a:
         fc:c6:9d:1b:6a:6d:9b:a5:e0:09:1a:e9:94:7d:9b:54:d9:f8:
         68:d4:e5:f0:05:a6:d5:04:8f:d7:7a:d5:88:e6:2f:59:03:62:
         c3:c1:a1:98:ea:ee:cd:40:77:f0:65:4f:4a:ef:52:61:f7:ee:
         99:c6:10:3c:8b:8b:3c:e7:e2:37:f5:84:b0:1e:97:bc:6e:3e:
         48:78:c5:11:33:06:4a:19:8c:62:de:b7:ce:b1:b4:6a:f0:de:
         45:c9:b7:9b:1e:b3:01:55:b4:f2:80:0e:b0:20:f0:a9:3c:51:
         69:9d:f8:fb:b7:fb:10:d4:44:60:d7:cb:67:73:f2:07:6b:fd:
         d3:83:f8:98
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWESvW+YtGtbLOrDIcagwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDEyNjIwMzA0NloXDTI2MDQzMDE5MzA0NlowLzEtMCsGA1UEAxMk
NjNhNTMzZDUtZDYzZS00MmJiLWE0NjQtNjEwZWExNzUxNTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml2Co6/8QTPRU5J55yBCz0pFD840gPBTc2N1
Ljvib2uqnObuBhvnJoPnrWjdb0wfoo+gKHxUdeemHiW/bOFGkaqLWBHKaMogiVQJ
akTPqImb/MeyBr+Iqk6YscDvXX26YWo3BWk6ipZS904jg0lPkbfZ7rvbOpMzg/DR
rwzLjoDwZERSJ/zlAEpl6TCdh9rWvgkxWBbqKFfoq73/J3ps0Yc/yeXrNTboMv0L
hX3qfyuqkYs4ixlO/TXQeI0X+XE/8JAju8FanMA8aTU4DGUYYZm/QbtJPWaM4XnX
9+aTW0eCVQhUPIbWsjlqzsIEURimlha4/ljNmN+ux+cdKia2sQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFG6FvUw+FTZwUFJh6F/GJ+pst4cmMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82
M2E1MzNkNS1kNjNlLTQyYmItYTQ2NC02MTBlYTE3NTE1OWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzYzYTUzM2Q1LWQ2M2UtNDJiYi1h
NDY0LTYxMGVhMTc1MTU5Yy82M2E1MzNkNS1kNjNlLTQyYmItYTQ2NC02MTBlYTE3
NTE1OWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKi+RgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
APXYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIcdkj6wGM72dpjHm/4WXloM4oFpbuVEz2STmpSYslIvyyJo
RSu75OE+EOqruHvMfpYsJIwCTzaQnNXPdduEkW8RaIaqqEnAEaFjCQCRxm02XqPv
D665L1HQHUFOQw4LYureg4l73xApKJte3drUGKDT61wxF/bn7rK3DViHSvzGnRtq
bZul4Aka6ZR9m1TZ+GjU5fAFptUEj9d61YjmL1kDYsPBoZjq7s1Ad/BlT0rvUmH3
7pnGEDyLizzn4jf1hLAel7xuPkh4xREzBkoZjGLet86xtGrw3kXJt5seswFVtPKA
DrAg8Kk8UWmd+Pu3+xDURGDXy2dz8gdr/dOD+Jg=
-----END CERTIFICATE-----