Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d.cer
File:                     775d20f6-1cfa-483e-be0f-d15eb548f66d.cer (raw, json)
Hash identifier:          NVj5K3TeivJRQ/0QVS67rPnKcGLgE5SnIF111vMleXg=
Subject key identifier:   1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584559278C676FFE8E9D06D9E6B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 27 Mar 2024 16:12:42 +0000
Certificate not after:    Tue 30 Jun 2026 16:12:42 +0000
Subordinate resources:    AS: 1343
                          AS: 32644
                          IP: 2603:5000::/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:59:27:8c:67:6f:fe:8e:9d:06:d9:e6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar 27 16:12:42 2024 GMT
            Not After : Jun 30 16:12:42 2026 GMT
        Subject: CN=775d20f6-1cfa-483e-be0f-d15eb548f66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:76:65:4f:41:04:24:36:e9:b9:9d:40:1c:
                    18:84:04:95:7c:a4:b4:2b:05:d2:3b:c4:c8:a3:40:
                    60:a6:e1:9d:c0:08:65:2f:9f:a0:9f:c7:3b:d3:70:
                    77:a0:09:84:23:93:16:b3:bf:a3:45:25:02:5b:a5:
                    d2:de:b1:eb:70:fb:fb:e4:f0:ec:4c:0f:ce:16:86:
                    f5:16:bb:ab:31:eb:5d:ed:62:50:6d:ef:76:7d:d1:
                    fd:27:e4:db:ee:fb:93:24:61:dc:66:52:22:c4:04:
                    90:62:25:e3:11:05:8f:18:78:72:fe:0f:fc:63:77:
                    88:85:b7:33:25:b4:67:84:57:2e:0c:0f:f1:b5:75:
                    d3:34:9c:39:3f:40:cf:3c:50:11:1e:d9:ad:5f:1d:
                    a5:4c:d5:e3:67:de:5a:39:18:fa:11:22:71:84:0e:
                    71:75:e2:ce:39:c6:9f:a2:5a:4b:80:f2:f9:d1:fe:
                    fb:81:22:ce:00:7b:5e:36:d0:b9:94:4d:5c:e1:da:
                    6d:c0:d7:e1:1c:a8:37:58:08:cc:9d:c3:36:9a:e4:
                    f0:d9:38:f4:eb:c3:07:08:6a:1b:29:83:d3:8d:6c:
                    1d:27:32:ff:2e:e5:05:4b:a9:33:f8:85:fc:a3:d3:
                    11:12:61:ad:f2:52:dc:35:a2:33:6f:53:8a:cb:06:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2D:AA:08:66:16:A6:E1:D8:3F:F1:B7:3B:2D:EC:74:7F:13:23:3E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/775d20f6-1cfa-483e-be0f-d15eb548f66d/775d20f6-1cfa-483e-be0f-d15eb548f66d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:5000::/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1343
                  32644

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:c0:1f:2a:a9:5b:9b:e7:49:cc:77:3b:7c:4e:8d:d4:2f:34:
         45:45:fa:11:c2:63:7b:2e:25:e5:3b:51:0f:d6:f7:96:b0:88:
         5b:67:f1:eb:c0:7d:f7:c7:6c:8f:17:e4:6e:af:31:15:2f:49:
         1e:f5:6b:a0:00:06:70:57:60:bc:d3:34:30:95:42:2e:76:53:
         b2:84:8c:b7:20:e3:72:6c:b7:2e:d6:42:50:72:eb:be:fe:3b:
         43:11:e0:1d:b8:a1:b0:1b:4a:a3:31:82:3d:e5:e6:1e:99:02:
         db:d6:21:32:26:cb:83:31:77:81:5d:0e:1f:3e:d2:06:3f:2e:
         0a:31:d2:7b:ca:6c:ba:6a:b4:6d:0e:e1:4e:ae:fb:0b:fb:81:
         00:6f:3c:36:5f:62:01:8f:ef:32:d7:6e:62:0e:f0:6f:0b:0c:
         bd:15:a1:ab:15:d1:30:0d:42:df:9a:95:22:79:32:48:7e:5b:
         3b:67:fd:86:02:3b:97:0b:99:67:9d:9f:28:04:1b:40:ed:20:
         cd:15:84:61:ab:54:f3:8e:d8:fc:8a:8f:01:e9:87:88:fc:a8:
         8a:aa:61:56:89:07:e8:11:8d:eb:b9:78:85:3f:37:fd:a5:c1:
         33:24:66:fb:72:4b:43:bf:a1:75:7b:7b:39:bb:b8:22:44:58:
         dc:c3:b6:fb
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEVZJ4xnb/6OnQbZ5rAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDMyNzE2MTI0MloXDTI2MDYzMDE2MTI0MlowLzEtMCsGA1UEAxMk
Nzc1ZDIwZjYtMWNmYS00ODNlLWJlMGYtZDE1ZWI1NDhmNjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvt2ZU9BBCQ26bmdQBwYhASVfKS0KwXSO8TI
o0BgpuGdwAhlL5+gn8c703B3oAmEI5MWs7+jRSUCW6XS3rHrcPv75PDsTA/OFob1
FrurMetd7WJQbe92fdH9J+Tb7vuTJGHcZlIixASQYiXjEQWPGHhy/g/8Y3eIhbcz
JbRnhFcuDA/xtXXTNJw5P0DPPFARHtmtXx2lTNXjZ95aORj6ESJxhA5xdeLOOcaf
olpLgPL50f77gSLOAHteNtC5lE1c4dptwNfhHKg3WAjMncM2muTw2Tj068MHCGob
KYPTjWwdJzL/LuUFS6kz+IX8o9MREmGt8lLcNaIzb1OKywb5xQIDAQABo4IEHjCC
BBowHQYDVR0OBBYEFBstqghmFqbh2D/xtzst7HR/EyM+MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83
NzVkMjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVlYjU0OGY2NmQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzc3NWQyMGY2LTFjZmEtNDgzZS1i
ZTBmLWQxNWViNTQ4ZjY2ZC83NzVkMjBmNi0xY2ZhLTQ4M2UtYmUwZi1kMTVlYjU0
OGY2NmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgACMAYDBAAmA1AwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAIC
BT8CAn+EMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBABHAHyqpW5vnScx3O3xOjdQvNEVF+hHCY3suJeU7UQ/W
95awiFtn8evAfffHbI8X5G6vMRUvSR71a6AABnBXYLzTNDCVQi52U7KEjLcg43Js
ty7WQlBy677+O0MR4B24obAbSqMxgj3l5h6ZAtvWITImy4Mxd4FdDh8+0gY/Lgox
0nvKbLpqtG0O4U6u+wv7gQBvPDZfYgGP7zLXbmIO8G8LDL0VoasV0TANQt+alSJ5
Mkh+Wztn/YYCO5cLmWednygEG0DtIM0VhGGrVPOO2PyKjwHph4j8qIqqYVaJB+gR
jeu5eIU/N/2lwTMkZvtyS0O/oXV7ezm7uCJEWNzDtvs=
-----END CERTIFICATE-----