Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/950d1637-b6ec-46d7-bc59-f5939a48d3f7.cer
File:                     950d1637-b6ec-46d7-bc59-f5939a48d3f7.cer (raw, json)
Hash identifier:          d2N4JEcGV0cBQMSOgmG/cE2vxKGZzplPEmyA13hDRjE=
Subject key identifier:   C6:3F:46:7C:0C:C0:4D:1B:D9:91:38:1B:C1:6E:59:46:07:F6:76:21
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584599A8FAF6135132B87A8A3680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/950d1637-b6ec-46d7-bc59-f5939a48d3f7/950d1637-b6ec-46d7-bc59-f5939a48d3f7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/950d1637-b6ec-46d7-bc59-f5939a48d3f7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Apr 2024 18:45:14 +0000
Certificate not after:    Fri 12 Jun 2026 01:35:11 +0000
Subordinate resources:    AS: 46239
                          IP: 23.175.232.0/24
                          IP: 2602:f942::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:99:a8:fa:f6:13:51:32:b8:7a:8a:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 19 18:45:14 2024 GMT
            Not After : Jun 12 01:35:11 2026 GMT
        Subject: CN=950d1637-b6ec-46d7-bc59-f5939a48d3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:e1:29:e2:27:bf:00:46:d8:38:c3:01:ae:
                    3c:77:df:93:9d:f9:ee:50:b8:04:95:bd:9d:0d:e3:
                    16:c1:eb:7c:2c:65:37:0c:b0:ff:fb:bb:2f:91:bc:
                    4f:86:d9:f9:84:ce:8d:c3:76:48:6f:f7:94:a3:30:
                    42:36:ca:df:74:88:93:40:07:33:bb:a8:8c:8d:9f:
                    48:dc:fd:5b:f6:1b:15:a4:24:21:e3:f9:1b:ac:1b:
                    ea:6e:a6:09:99:e5:ff:29:f1:10:41:62:94:f2:cd:
                    16:3f:e2:f4:b2:d8:d6:a6:60:c4:c4:ef:d3:aa:8a:
                    fc:96:8e:09:aa:ac:5b:23:53:04:ae:4c:1e:cc:8b:
                    e8:4c:79:f8:5f:44:59:50:1f:e3:e0:5a:85:02:92:
                    16:ea:3d:7b:be:be:4d:4f:1c:5a:0c:0a:2e:62:d0:
                    2e:25:70:32:32:07:27:ea:23:bc:6d:9d:15:9b:28:
                    e0:ce:24:6c:3c:85:44:7b:79:fe:da:78:5f:ed:01:
                    48:05:69:a3:dc:17:5f:c6:69:79:58:35:a8:f2:18:
                    dd:c8:de:d6:46:8b:63:13:7c:c0:f9:31:fd:3b:de:
                    a8:89:9c:c4:fe:0b:43:3d:75:28:f9:47:d8:bc:f9:
                    66:fb:ac:04:3b:72:aa:f6:6b:0c:01:a8:71:2a:ca:
                    78:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:3F:46:7C:0C:C0:4D:1B:D9:91:38:1B:C1:6E:59:46:07:F6:76:21
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/950d1637-b6ec-46d7-bc59-f5939a48d3f7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/950d1637-b6ec-46d7-bc59-f5939a48d3f7/950d1637-b6ec-46d7-bc59-f5939a48d3f7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.232.0/24
                IPv6:
                  2602:f942::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46239

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:b3:e7:b1:41:10:ec:72:21:63:2e:48:be:0d:3f:e8:4f:c1:
         41:fb:5b:3d:ca:cc:ed:48:ba:ce:e4:46:f8:c5:dc:15:23:d4:
         e2:7f:c1:88:87:b8:d5:2c:28:4c:ef:a8:fe:cf:5d:8d:de:22:
         5f:e4:27:09:65:89:4d:39:36:f4:45:dc:d5:1c:9a:0a:51:93:
         0a:a2:8a:c4:19:20:e5:eb:1a:6d:65:3c:3f:73:68:9f:40:af:
         17:6d:2b:91:0f:58:e2:5e:87:9f:b8:54:d2:18:ad:e3:ff:25:
         26:c9:d0:a4:70:0c:fd:f0:15:53:62:c0:1c:92:cf:46:f4:27:
         0b:54:75:9b:df:9c:ab:53:32:6a:e7:71:4a:63:67:e5:09:19:
         95:d6:76:22:a1:aa:1f:fc:de:ab:84:09:6a:8c:20:04:a4:64:
         1e:04:c4:18:aa:b5:52:cd:c8:9c:f4:f6:e6:4c:11:31:25:fd:
         0a:6f:2a:df:ce:6e:9b:a3:3d:bc:99:7e:0b:f4:03:ec:1a:eb:
         79:87:b0:ba:24:13:ed:e4:f2:7f:ad:fc:7e:f4:db:ed:f5:49:
         32:24:2f:46:32:ca:8f:51:33:22:66:08:3e:2f:6c:f8:73:08:
         c9:52:64:dd:d5:aa:c2:de:92:ae:67:9a:4d:b8:8a:21:68:d4:
         63:db:74:f9
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEWZqPr2E1EyuHqKNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDQxOTE4NDUxNFoXDTI2MDYxMjAxMzUxMVowLzEtMCsGA1UEAxMk
OTUwZDE2MzctYjZlYy00NmQ3LWJjNTktZjU5MzlhNDhkM2Y3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDnhKeInvwBG2DjDAa48d9+TnfnuULgElb2d
DeMWwet8LGU3DLD/+7svkbxPhtn5hM6Nw3ZIb/eUozBCNsrfdIiTQAczu6iMjZ9I
3P1b9hsVpCQh4/kbrBvqbqYJmeX/KfEQQWKU8s0WP+L0stjWpmDExO/Tqor8lo4J
qqxbI1MErkwezIvoTHn4X0RZUB/j4FqFApIW6j17vr5NTxxaDAouYtAuJXAyMgcn
6iO8bZ0VmyjgziRsPIVEe3n+2nhf7QFIBWmj3Bdfxml5WDWo8hjdyN7WRotjE3zA
+TH9O96oiZzE/gtDPXUo+UfYvPlm+6wEO3Kq9msMAahxKsp4JwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFMY/RnwMwE0b2ZE4G8FuWUYH9nYhMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85
NTBkMTYzNy1iNmVjLTQ2ZDctYmM1OS1mNTkzOWE0OGQzZjcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzk1MGQxNjM3LWI2ZWMtNDZkNy1i
YzU5LWY1OTM5YTQ4ZDNmNy85NTBkMTYzNy1iNmVjLTQ2ZDctYmM1OS1mNTkzOWE0
OGQzZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXr+gwDgQCAAIwCAMGACYC+UIAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC0nzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBs+exQRDsciFjLki+DT/oT8FB
+1s9ysztSLrO5Eb4xdwVI9Tif8GIh7jVLChM76j+z12N3iJf5CcJZYlNOTb0RdzV
HJoKUZMKoorEGSDl6xptZTw/c2ifQK8XbSuRD1jiXoefuFTSGK3j/yUmydCkcAz9
8BVTYsAcks9G9CcLVHWb35yrUzJq53FKY2flCRmV1nYioaof/N6rhAlqjCAEpGQe
BMQYqrVSzcic9PbmTBExJf0Kbyrfzm6boz28mX4L9APsGut5h7C6JBPt5PJ/rfx+
9Nvt9UkyJC9GMsqPUTMiZgg+L2z4cwjJUmTd1arC3pKuZ5pNuIohaNRj23T5
-----END CERTIFICATE-----