Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008.cer
File:                     793e03f9-65aa-4b5c-975f-f3bfc8509008.cer (raw, json)
Hash identifier:          yCiSGLXqyKTT7J0BUpiEu74qLzEhKpGccFAJGu+XhTE=
Subject key identifier:   87:4B:B1:D3:D6:67:35:F8:75:2B:36:3F:F8:BA:DD:34:61:B9:54:D4
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584548F6CDB68B2F56D20B96E200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008/793e03f9-65aa-4b5c-975f-f3bfc8509008.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Mar 2024 21:01:33 +0000
Certificate not after:    Wed 24 Jun 2026 21:01:33 +0000
Subordinate resources:    AS: 395987
                          IP: 192.108.16.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:f6:cd:b6:8b:2f:56:d2:0b:96:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Mar 21 21:01:33 2024 GMT
            Not After : Jun 24 21:01:33 2026 GMT
        Subject: CN=793e03f9-65aa-4b5c-975f-f3bfc8509008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:84:ef:d9:f7:3b:0b:32:3e:03:ff:b6:3b:d2:
                    05:c0:5c:00:b2:01:15:8e:f7:32:87:8d:a7:c4:4c:
                    9c:ee:7d:a7:f3:a9:84:74:27:49:29:41:04:53:82:
                    49:95:74:81:27:f4:31:d9:45:12:9f:40:0e:9b:77:
                    9a:dd:88:cb:00:18:e5:23:ea:e3:bd:f1:fa:54:57:
                    a5:09:e4:0a:83:6d:4a:91:e2:c3:8f:0a:92:81:22:
                    23:75:6a:f1:01:e8:6b:4e:db:45:3a:da:4f:19:37:
                    05:a0:42:b3:b0:cf:cd:3e:0e:6b:dc:65:ac:a4:97:
                    05:84:9b:de:9b:ba:04:ff:01:45:5f:68:6f:d6:d3:
                    5c:94:9c:30:49:01:90:cf:e1:57:c4:18:d4:34:6e:
                    91:88:8e:92:50:d7:50:91:59:81:9e:16:1f:38:7a:
                    c0:b9:c7:1a:2c:06:99:d7:58:e3:b1:46:0b:da:a1:
                    f3:c9:84:ea:69:fb:ab:d9:a7:12:ed:c5:25:93:ad:
                    49:5e:79:7e:37:5f:3c:8b:47:1d:20:1b:fb:bf:31:
                    11:45:0e:d2:2f:c4:b7:a4:13:08:fc:e3:2f:d4:74:
                    f8:d9:f1:f2:1e:e5:bb:42:57:b2:ae:27:82:ea:90:
                    bd:7e:de:61:3e:f3:59:4b:6a:87:9d:a2:71:84:e9:
                    9d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4B:B1:D3:D6:67:35:F8:75:2B:36:3F:F8:BA:DD:34:61:B9:54:D4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/793e03f9-65aa-4b5c-975f-f3bfc8509008/793e03f9-65aa-4b5c-975f-f3bfc8509008.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.108.16.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395987

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:11:9e:c2:cb:6d:2c:6d:84:2e:ca:43:f7:59:fa:ba:1a:b4:
         05:05:d3:fd:1e:65:bb:02:97:69:16:89:e8:46:77:8a:fe:43:
         69:ff:e4:e1:d3:4b:1d:be:b9:d8:d2:be:b7:8a:86:2c:05:57:
         24:06:af:6d:c0:e5:03:59:1d:c7:b0:c4:44:03:6c:2c:86:ba:
         fd:58:46:77:81:ff:05:d6:ce:09:36:ee:38:40:6b:c0:c2:67:
         93:75:94:81:31:f3:7b:93:b4:81:ab:a5:db:a7:23:e8:34:21:
         0a:80:3d:dc:57:34:00:be:43:41:29:5d:e8:c4:0f:9a:ef:0b:
         f5:da:6b:4c:da:fb:b1:dc:5d:1b:06:0c:ef:6a:a3:da:c0:6a:
         1e:d7:17:de:be:f7:b5:1e:d8:96:a4:62:86:11:4e:ad:a1:3f:
         52:ae:7e:b1:8c:5f:3c:eb:89:25:dc:9e:6d:aa:ab:b6:80:c5:
         d7:a2:59:51:18:8f:27:5a:6b:1c:e0:f5:66:21:eb:48:2e:1b:
         ec:43:0a:6d:57:87:41:0a:ac:32:fc:20:31:66:19:2b:f9:91:
         d0:ba:0a:1a:64:2a:fa:8a:b2:0a:21:c5:66:81:8f:d1:ff:fa:
         4f:85:76:8e:f3:1e:59:8f:b5:91:0a:79:e1:18:a2:9a:6f:91:
         95:12:57:0f
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEVI9s22iy9W0guW4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDMyMTIxMDEzM1oXDTI2MDYyNDIxMDEzM1owLzEtMCsGA1UEAxMk
NzkzZTAzZjktNjVhYS00YjVjLTk3NWYtZjNiZmM4NTA5MDA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ITv2fc7CzI+A/+2O9IFwFwAsgEVjvcyh42n
xEyc7n2n86mEdCdJKUEEU4JJlXSBJ/Qx2UUSn0AOm3ea3YjLABjlI+rjvfH6VFel
CeQKg21KkeLDjwqSgSIjdWrxAehrTttFOtpPGTcFoEKzsM/NPg5r3GWspJcFhJve
m7oE/wFFX2hv1tNclJwwSQGQz+FXxBjUNG6RiI6SUNdQkVmBnhYfOHrAuccaLAaZ
11jjsUYL2qHzyYTqafur2acS7cUlk61JXnl+N188i0cdIBv7vzERRQ7SL8S3pBMI
/OMv1HT42fHyHuW7QleyrieC6pC9ft5hPvNZS2qHnaJxhOmdjQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFIdLsdPWZzX4dSs2P/i63TRhuVTUMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83
OTNlMDNmOS02NWFhLTRiNWMtOTc1Zi1mM2JmYzg1MDkwMDgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzc5M2UwM2Y5LTY1YWEtNGI1Yy05
NzVmLWYzYmZjODUwOTAwOC83OTNlMDNmOS02NWFhLTRiNWMtOTc1Zi1mM2JmYzg1
MDkwMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAbBAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BgrTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADQRnsLLbSxthC7KQ/dZ+roatAUF0/0eZbsCl2kWiehGd4r+
Q2n/5OHTSx2+udjSvreKhiwFVyQGr23A5QNZHcewxEQDbCyGuv1YRneB/wXWzgk2
7jhAa8DCZ5N1lIEx83uTtIGrpdunI+g0IQqAPdxXNAC+Q0EpXejED5rvC/Xaa0za
+7HcXRsGDO9qo9rAah7XF96+97Ue2JakYoYRTq2hP1KufrGMXzzriSXcnm2qq7aA
xdeiWVEYjydaaxzg9WYh60guG+xDCm1Xh0EKrDL8IDFmGSv5kdC6ChpkKvqKsgoh
xWaBj9H/+k+Fdo7zHlmPtZEKeeEYoppvkZUSVw8=
-----END CERTIFICATE-----