Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.cer
File:                     cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.cer (raw, json)
Hash identifier:          hSIZIvsIv1HBs4ZHxexvhP3iI9d4aTqD8dLlSCRm2qQ=
Subject key identifier:   AE:FE:3F:1F:93:EA:39:58:6E:45:50:10:E7:00:77:6E:7A:D6:29:F2
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F4328584498A37E0CC9F5CF2F43D3C180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Jan 2024 17:11:25 +0000
Certificate not after:    Wed 22 Apr 2026 16:11:25 +0000
Subordinate resources:    AS: 14220
                          IP: 208.94.208.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:98:a3:7e:0c:c9:f5:cf:2f:43:d3:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 18 17:11:25 2024 GMT
            Not After : Apr 22 16:11:25 2026 GMT
        Subject: CN=cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:a3:ae:86:31:39:53:a5:a2:02:ba:8e:4c:
                    14:8b:78:00:0b:86:5e:44:63:a5:1a:c7:59:84:dc:
                    3c:30:e7:79:e4:93:e3:0c:9b:dd:aa:0b:02:25:30:
                    8c:d6:8b:d8:51:05:0f:0f:4e:91:44:00:b4:1e:f3:
                    b0:bd:42:e4:a9:7d:59:e0:b0:7c:f6:96:9d:2d:3c:
                    e0:07:15:cc:e4:9a:98:0c:e0:b2:fe:a5:1d:6a:b6:
                    37:52:51:e2:8b:54:bd:5c:86:56:c1:d4:d9:25:9e:
                    82:06:e6:5a:71:43:72:87:92:f2:fa:a4:00:1f:a4:
                    d5:71:70:50:9a:e2:bf:6a:2a:af:c5:ba:28:a0:e2:
                    de:74:f6:86:fa:90:47:a1:e1:23:a9:c0:cc:14:2f:
                    3f:21:c3:b9:00:8b:9e:5f:c1:ef:99:2e:47:b4:88:
                    61:b7:be:0a:cf:c2:fa:39:1e:57:0a:8c:2f:a0:39:
                    fe:aa:cc:50:be:8d:53:21:0a:f4:eb:b5:f3:96:15:
                    4c:8c:28:14:67:31:a0:36:ee:48:d8:91:f8:d0:9e:
                    28:b6:9f:e3:f6:55:c0:2b:ba:6a:a2:1c:39:fc:87:
                    7c:60:c3:e1:02:11:02:57:3b:75:fb:1d:c4:6b:1f:
                    21:2b:82:e9:fc:05:20:3f:e4:da:29:5d:96:59:07:
                    ce:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FE:3F:1F:93:EA:39:58:6E:45:50:10:E7:00:77:6E:7A:D6:29:F2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0/cf60d33d-adb0-4b6a-a12c-3d4b22ea84c0.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.208.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14220

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:cc:83:47:10:1d:f7:4c:f8:6a:03:87:7e:91:e3:d9:0b:f8:
         62:c1:75:a7:4a:53:ca:d2:59:60:3b:9d:31:2f:93:dc:9f:44:
         49:09:5b:92:c9:61:5e:5b:9b:df:d6:82:21:86:1e:27:15:85:
         b9:7b:8b:2f:e4:a2:ce:43:cf:78:1c:e8:91:48:cf:c4:92:2b:
         6b:32:40:f6:39:36:31:cf:06:1d:38:f7:97:28:07:12:06:b2:
         88:7f:d7:a7:d0:ae:a7:8d:d4:57:50:53:9c:15:c6:c0:6f:74:
         17:a2:0a:5f:2e:93:18:c4:80:7a:a5:9b:7b:fe:4e:70:d3:7b:
         f8:ae:bc:5e:ff:96:24:e5:58:76:14:c8:09:13:13:c7:12:18:
         c5:a5:3d:df:0f:c9:78:07:8c:68:0d:5f:34:a7:61:f2:3f:6a:
         8f:0b:51:c3:a3:78:5a:73:d1:40:b0:d5:79:3a:51:36:dd:00:
         80:b6:0e:d3:9e:f5:64:f5:2c:2b:c5:35:b0:82:10:37:65:3f:
         85:a0:ab:71:b3:9b:0d:bb:c4:93:6c:b3:7f:aa:85:70:33:31:
         db:b0:d8:85:5e:dd:a6:47:f9:09:5c:bc:04:35:da:74:75:43:
         8a:a1:91:9a:d0:9c:bb:e0:1d:52:a3:95:f5:54:91:42:53:5b:
         66:34:60:70
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWESYo34MyfXPL0PTwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDExODE3MTEyNVoXDTI2MDQyMjE2MTEyNVowLzEtMCsGA1UEAxMk
Y2Y2MGQzM2QtYWRiMC00YjZhLWExMmMtM2Q0YjIyZWE4NGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKCjroYxOVOlogK6jkwUi3gAC4ZeRGOlGsdZ
hNw8MOd55JPjDJvdqgsCJTCM1ovYUQUPD06RRAC0HvOwvULkqX1Z4LB89padLTzg
BxXM5JqYDOCy/qUdarY3UlHii1S9XIZWwdTZJZ6CBuZacUNyh5Ly+qQAH6TVcXBQ
muK/aiqvxboooOLedPaG+pBHoeEjqcDMFC8/IcO5AIueX8HvmS5HtIhht74Kz8L6
OR5XCowvoDn+qsxQvo1TIQr067XzlhVMjCgUZzGgNu5I2JH40J4otp/j9lXAK7pq
ohw5/Id8YMPhAhECVzt1+x3Eax8hK4Lp/AUgP+TaKV2WWQfOvwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFK7+Px+T6jlYbkVQEOcAd2561inyMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j
ZjYwZDMzZC1hZGIwLTRiNmEtYTEyYy0zZDRiMjJlYTg0YzAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2NmNjBkMzNkLWFkYjAtNGI2YS1h
MTJjLTNkNGIyMmVhODRjMC9jZjYwZDMzZC1hZGIwLTRiNmEtYTEyYy0zZDRiMjJl
YTg0YzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPQXtAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
N4wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAF8yDRxAd90z4agOHfpHj2Qv4YsF1p0pTytJZYDudMS+T3J9E
SQlbkslhXlub39aCIYYeJxWFuXuLL+SizkPPeBzokUjPxJIrazJA9jk2Mc8GHTj3
lygHEgayiH/Xp9Cup43UV1BTnBXGwG90F6IKXy6TGMSAeqWbe/5OcNN7+K68Xv+W
JOVYdhTICRMTxxIYxaU93w/JeAeMaA1fNKdh8j9qjwtRw6N4WnPRQLDVeTpRNt0A
gLYO0571ZPUsK8U1sIIQN2U/haCrcbObDbvEk2yzf6qFcDMx27DYhV7dpkf5CVy8
BDXadHVDiqGRmtCcu+AdUqOV9VSRQlNbZjRgcA==
-----END CERTIFICATE-----