Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105.cer
File:                     00c081d9-ab0e-4270-b0f1-227e8a595105.cer (raw, json)
Hash identifier:          uZQF08WYhIiHuzUQZsN/jOGBUQIY9RmJawq88PApfYM=
Subject key identifier:   EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584728E86B626FF850A4892D80A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Sep 2024 19:00:35 +0000
Certificate not after:    Sun 13 Dec 2026 06:25:25 +0000
Subordinate resources:    AS: 401315
                          IP: 2620:cd:6000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:28:e8:6b:62:6f:f8:50:a4:89:2d:80:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep  9 19:00:35 2024 GMT
            Not After : Dec 13 06:25:25 2026 GMT
        Subject: CN=00c081d9-ab0e-4270-b0f1-227e8a595105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ff:95:f0:25:aa:42:f8:f9:0f:62:18:2c:c7:
                    55:2e:7d:c6:34:f2:e6:86:97:99:95:66:42:37:bf:
                    b4:2b:5e:62:06:7b:5b:4d:59:5a:29:30:2b:58:b0:
                    32:0c:a0:58:d0:5d:04:3d:bb:58:79:a8:dd:eb:1e:
                    ba:72:bb:1e:55:be:2d:bb:d8:92:62:2f:c9:ef:28:
                    e7:17:9c:ca:d5:0e:fa:e9:8a:cd:39:3b:e9:9f:dd:
                    33:e9:01:72:84:d5:55:f0:5c:c1:2c:e4:3d:a9:89:
                    7e:41:ba:21:9d:54:c3:31:8e:e0:2e:7c:2b:16:3b:
                    11:21:05:e8:d6:e3:69:57:d4:3c:0c:69:b3:7d:7d:
                    3f:17:f1:4b:57:61:ff:6d:b8:be:24:8a:49:51:6c:
                    a4:c3:0c:b6:a6:f5:d7:73:40:c9:a0:d0:8b:cc:5f:
                    9d:ac:53:c8:9b:f8:58:22:ed:6e:da:e0:c2:21:f3:
                    34:7a:bc:de:36:b8:42:25:e4:45:4a:3a:b8:f0:fe:
                    2e:a3:12:fc:e8:a0:07:11:66:1e:b4:c2:f6:42:c1:
                    f5:ac:bc:73:05:c4:0a:ca:69:39:30:d4:b5:68:2b:
                    8f:e0:c5:bc:cb:79:f7:2e:59:91:c8:58:49:c5:20:
                    01:0d:08:16:10:21:aa:0f:16:57:7b:57:ea:c0:4e:
                    50:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:48:EC:B7:EB:93:60:67:48:8F:44:83:B5:5D:CE:31:5C:A4:7C:A8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/00c081d9-ab0e-4270-b0f1-227e8a595105/00c081d9-ab0e-4270-b0f1-227e8a595105.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:cd:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401315

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:13:bf:8a:f9:23:fd:39:05:a6:0f:28:ac:d1:ed:8a:79:23:
         25:91:a9:c5:8a:77:4f:89:04:14:c8:38:46:b5:15:75:0f:57:
         77:0c:2b:cd:37:1e:71:28:f8:5f:05:03:4d:98:8c:17:e4:ac:
         84:8b:9e:c9:3e:f5:2c:8e:84:d3:26:5a:0c:4e:2b:9b:89:0f:
         11:a7:51:cb:0b:53:f8:e5:af:2a:30:fc:1e:a9:93:44:89:d5:
         18:47:ce:a8:b2:25:45:ca:33:37:e5:a1:93:6c:5a:74:32:68:
         1c:7b:1f:2d:95:90:db:62:13:b3:75:4a:b0:f0:63:b8:7e:26:
         b9:41:f6:e4:7a:b8:e6:5b:6b:07:41:fe:87:f1:a1:66:09:3f:
         72:db:4f:0b:f0:28:23:22:82:b7:a1:9e:32:69:db:1e:b7:93:
         3c:53:b9:b8:af:f0:93:a7:ee:c9:1f:7c:80:92:fc:39:26:24:
         fb:96:6b:6f:01:be:6f:32:b8:0e:db:52:af:af:cb:55:2f:56:
         97:2b:ba:48:bc:56:98:83:2f:cd:dc:22:bf:b9:b0:e0:8f:b9:
         84:77:d6:10:b0:dc:0f:9c:3b:43:82:e2:f2:c4:d0:b7:d6:03:
         e8:26:d2:fb:68:f4:11:31:b7:25:d6:ce:2c:5a:f7:db:0e:0c:
         a5:6b:ea:d6
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEco6Gtib/hQpIktgKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MDkwOTE5MDAzNVoXDTI2MTIxMzA2MjUyNVowLzEtMCsGA1UEAxMk
MDBjMDgxZDktYWIwZS00MjcwLWIwZjEtMjI3ZThhNTk1MTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv+V8CWqQvj5D2IYLMdVLn3GNPLmhpeZlWZC
N7+0K15iBntbTVlaKTArWLAyDKBY0F0EPbtYeajd6x66crseVb4tu9iSYi/J7yjn
F5zK1Q766YrNOTvpn90z6QFyhNVV8FzBLOQ9qYl+QbohnVTDMY7gLnwrFjsRIQXo
1uNpV9Q8DGmzfX0/F/FLV2H/bbi+JIpJUWykwwy2pvXXc0DJoNCLzF+drFPIm/hY
Iu1u2uDCIfM0erzeNrhCJeRFSjq48P4uoxL86KAHEWYetML2QsH1rLxzBcQKymk5
MNS1aCuP4MW8y3n3LlmRyFhJxSABDQgWECGqDxZXe1fqwE5Q3wIDAQABo4IEHjCC
BBowHQYDVR0OBBYEFOtI7Lfrk2BnSI9Eg7VdzjFcpHyoMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8w
MGMwODFkOS1hYjBlLTQyNzAtYjBmMS0yMjdlOGE1OTUxMDUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzAwYzA4MWQ5LWFiMGUtNDI3MC1i
MGYxLTIyN2U4YTU5NTEwNS8wMGMwODFkOS1hYjBlLTQyNzAtYjBmMS0yMjdlOGE1
OTUxMDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmIADNYAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw
BQIDBh+jMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBADATv4r5I/05BaYPKKzR7Yp5IyWRqcWKd0+JBBTIOEa1
FXUPV3cMK803HnEo+F8FA02YjBfkrISLnsk+9SyOhNMmWgxOK5uJDxGnUcsLU/jl
ryow/B6pk0SJ1RhHzqiyJUXKMzfloZNsWnQyaBx7Hy2VkNtiE7N1SrDwY7h+JrlB
9uR6uOZbawdB/ofxoWYJP3LbTwvwKCMigrehnjJp2x63kzxTubiv8JOn7skffICS
/DkmJPuWa28Bvm8yuA7bUq+vy1UvVpcruki8VpiDL83cIr+5sOCPuYR31hCw3A+c
O0OC4vLE0LfWA+gm0vto9BExtyXWzixa99sODKVr6tY=
-----END CERTIFICATE-----