Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer
File:                     6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer (raw, json)
Hash identifier:          MfwodGZBLd11JSiCof/Nwk6zo7xy7me8Fu8roUCtIvs=
Subject key identifier:   D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285844FE232EF9CC23398740697FC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 24 Feb 2024 01:45:20 +0000
Certificate not after:    Fri 29 May 2026 00:45:20 +0000
Subordinate resources:    IP: 74.80.252.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:23:2e:f9:cc:23:39:87:40:69:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb 24 01:45:20 2024 GMT
            Not After : May 29 00:45:20 2026 GMT
        Subject: CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:77:1a:27:0c:83:db:68:41:d2:d9:18:09:59:
                    05:d3:29:3f:c4:54:73:89:97:d1:49:44:80:08:4b:
                    34:f3:2e:00:44:54:57:44:be:2a:00:cb:ae:0e:e2:
                    9e:0c:0f:9b:df:9d:00:5f:56:47:79:6d:2c:c7:fa:
                    f5:f0:17:c5:32:b9:c0:a5:14:44:5d:92:3d:d1:ea:
                    62:81:60:36:b5:d9:1f:72:1b:d2:6f:60:c1:35:30:
                    50:c2:dd:01:9d:74:7c:e7:10:e4:f4:67:d3:f0:9a:
                    11:1d:f1:9c:35:4b:9e:d9:3b:c8:98:86:f6:0b:c6:
                    0b:cd:ce:a6:23:bf:c8:31:a5:04:91:ff:ce:ce:d2:
                    2a:dc:3d:97:f1:24:35:63:6f:f4:9e:5b:c5:07:4f:
                    37:ad:94:9e:28:64:82:07:af:dc:0d:44:6b:d8:42:
                    77:78:ef:e4:cf:ae:df:7d:59:e3:f2:1b:be:a3:e5:
                    b6:0f:75:aa:a3:97:9b:fb:f1:6d:95:7e:f8:76:a8:
                    d6:ed:60:35:50:9c:61:f5:b3:8a:9b:92:5d:64:de:
                    17:08:b1:5a:ce:33:f0:60:a6:69:c2:ce:8d:aa:2c:
                    3e:3a:4c:b3:4b:c3:3b:eb:2b:1c:0f:9c:6b:c4:37:
                    74:c5:5a:e5:7a:8c:3b:64:30:aa:0f:f6:9c:84:ae:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:1a:5a:9c:4a:15:16:2b:b3:bf:c5:79:35:d3:2f:3d:0e:59:
         32:d8:54:26:2d:02:ec:df:08:8e:c3:e6:b6:1b:54:47:f0:80:
         26:b2:0e:e8:47:db:95:83:d4:12:97:61:e0:57:f9:1c:e5:24:
         b4:10:eb:01:b0:81:0c:1a:ec:5a:63:23:36:97:db:37:3f:cc:
         1a:7b:d3:dd:8b:12:a3:c6:4f:14:37:88:eb:32:0a:e7:c1:74:
         a6:e3:e1:e4:b7:3e:34:4a:86:14:8e:ea:9d:57:2e:df:0c:47:
         e3:bb:9c:0b:10:40:ed:7b:17:a8:e1:a0:b8:93:87:71:8e:d9:
         e9:95:34:37:da:48:ab:52:63:50:2f:4f:51:d0:c6:e0:78:e9:
         c9:80:d8:2e:3e:c2:99:f6:24:04:1b:a8:ab:2d:0a:3b:56:d5:
         14:20:99:88:96:c8:60:8d:ef:ec:7b:19:04:06:96:1f:7b:33:
         08:8b:06:c8:9d:b5:53:c2:0d:f4:e4:e7:ac:81:ba:54:2d:c7:
         76:98:57:4b:b2:cd:45:68:73:97:ce:c6:08:4b:1c:e1:26:f4:
         e3:e3:7a:ef:ec:92:26:ff:e7:27:1d:ac:01:cb:d6:38:13:0e:
         4c:da:8c:a8:22:09:54:8e:26:b4:89:1e:34:05:81:8e:e8:e4:
         89:8f:62:43
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWET+Iy75zCM5h0Bpf8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDIyNDAxNDUyMFoXDTI2MDUyOTAwNDUyMFowLzEtMCsGA1UEAxMk
NmIyYzVkNjctYmY1NS00NTUwLWJlNTktYzFhYTVlNjNmZDJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XcaJwyD22hB0tkYCVkF0yk/xFRziZfRSUSA
CEs08y4ARFRXRL4qAMuuDuKeDA+b350AX1ZHeW0sx/r18BfFMrnApRREXZI90epi
gWA2tdkfchvSb2DBNTBQwt0BnXR85xDk9GfT8JoRHfGcNUue2TvImIb2C8YLzc6m
I7/IMaUEkf/OztIq3D2X8SQ1Y2/0nlvFB083rZSeKGSCB6/cDURr2EJ3eO/kz67f
fVnj8hu+o+W2D3Wqo5eb+/FtlX74dqjW7WA1UJxh9bOKm5JdZN4XCLFazjPwYKZp
ws6Nqiw+OkyzS8M76yscD5xrxDd0xVrleow7ZDCqD/achK7DpwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFNEl4Kp6a7jz7MYJj0XlPtC7mrQ8MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82
YjJjNWQ2Ny1iZjU1LTQ1NTAtYmU1OS1jMWFhNWU2M2ZkMmYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZiMmM1ZDY3LWJmNTUtNDU1MC1i
ZTU5LWMxYWE1ZTYzZmQyZi82YjJjNWQ2Ny1iZjU1LTQ1NTAtYmU1OS1jMWFhNWU2
M2ZkMmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAJKUPwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALRpanEoVFiuzv8V5NdMv
PQ5ZMthUJi0C7N8IjsPmthtUR/CAJrIO6EfblYPUEpdh4Ff5HOUktBDrAbCBDBrs
WmMjNpfbNz/MGnvT3YsSo8ZPFDeI6zIK58F0puPh5Lc+NEqGFI7qnVcu3wxH47uc
CxBA7XsXqOGguJOHcY7Z6ZU0N9pIq1JjUC9PUdDG4HjpyYDYLj7CmfYkBBuoqy0K
O1bVFCCZiJbIYI3v7HsZBAaWH3szCIsGyJ21U8IN9OTnrIG6VC3HdphXS7LNRWhz
l87GCEsc4Sb04+N67+ySJv/nJx2sAcvWOBMOTNqMqCIJVI4mtIkeNAWBjujkiY9i
Qw==
-----END CERTIFICATE-----