Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f.cer
File:                     0b99ce08-7f33-418e-bae3-01cb3673c06f.cer (raw, json)
Hash identifier:          eYa71PLgBNTcTBH3NjIbDf9KCO7LrrBBSw6TFooVxSQ=
Subject key identifier:   C2:BA:EB:1E:1F:85:D7:8F:EF:91:B7:67:E8:16:74:97:1A:3F:1B:71
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858479E1B50FDEE30EE9F15762DC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/0b99ce08-7f33-418e-bae3-01cb3673c06f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 21 Oct 2024 18:32:42 +0000
Certificate not after:    Sun 24 Jan 2027 19:32:42 +0000
Subordinate resources:    AS: 26649
                          IP: 192.136.15.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9e:1b:50:fd:ee:30:ee:9f:15:76:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct 21 18:32:42 2024 GMT
            Not After : Jan 24 19:32:42 2027 GMT
        Subject: CN=0b99ce08-7f33-418e-bae3-01cb3673c06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d2:3f:e7:fc:cf:6e:97:5b:2b:a7:92:43:db:
                    db:d2:2c:1c:2f:fc:9f:18:42:1a:1c:50:73:9e:48:
                    07:cb:3f:95:e5:85:38:a8:25:59:d9:28:94:12:61:
                    67:5b:57:8d:11:f7:b5:7e:03:d3:f9:1f:5f:3e:9f:
                    64:15:3b:40:4b:33:8b:ab:ae:a2:52:27:2a:40:59:
                    a6:43:30:b2:b8:8f:c0:96:10:30:05:3e:5e:d5:f9:
                    34:fe:a7:5b:d3:0f:50:2b:09:e4:35:e6:d0:61:c6:
                    45:83:59:e9:14:be:b1:c5:e2:9a:47:9f:da:2b:2e:
                    ee:83:32:02:44:c3:b7:c5:92:69:43:95:c8:3b:68:
                    d7:cd:34:46:6f:fd:dc:bf:e3:71:01:0a:65:7f:e4:
                    b4:b0:81:5c:2f:6b:71:0c:37:30:2e:c0:04:b3:4d:
                    ed:bd:4e:84:9e:e0:23:bb:49:6c:dc:89:88:cc:6e:
                    0e:41:4a:e1:90:3b:ec:e7:18:f0:5d:dc:91:6e:d1:
                    35:5d:f0:11:0c:e2:6d:ca:cf:e5:f8:f1:ff:75:ec:
                    5c:cb:8c:0e:46:9c:36:d4:cc:58:d8:4a:0e:a2:04:
                    99:74:e6:1a:cd:0d:26:b9:09:50:d0:ac:df:5f:b6:
                    3f:6b:7e:e9:12:05:b0:6f:98:70:40:b8:fd:34:31:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BA:EB:1E:1F:85:D7:8F:EF:91:B7:67:E8:16:74:97:1A:3F:1B:71
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b99ce08-7f33-418e-bae3-01cb3673c06f/0b99ce08-7f33-418e-bae3-01cb3673c06f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.15.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26649

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a6:e1:a1:d8:d2:e4:59:b7:12:cf:29:98:cf:2e:5c:61:7b:
         6e:39:cf:ce:b4:5d:99:27:67:ee:6b:01:68:a5:b1:fd:79:30:
         9e:aa:39:3e:da:10:66:d2:23:a5:eb:eb:f7:34:ec:6f:fa:88:
         54:7d:b6:04:59:76:63:6c:71:39:2a:c5:54:a6:f8:46:41:04:
         18:cf:27:50:e8:aa:c8:43:6e:42:37:5b:16:c2:60:f1:2b:ab:
         6e:5f:01:39:35:bb:e3:d3:c5:32:d1:8e:56:7a:ed:86:4f:3f:
         7c:18:b4:b7:e6:aa:d7:65:65:4d:3a:07:ca:27:53:04:4b:35:
         d1:07:e9:45:1d:41:cb:98:1b:78:ea:ca:de:53:00:27:99:ef:
         c5:c6:e9:57:a9:78:a8:67:e1:43:72:17:b1:af:d3:05:36:5a:
         17:99:3d:c9:30:e6:e5:25:60:78:6a:51:a2:f0:97:fe:8c:16:
         e6:46:a1:9a:54:43:43:98:83:e8:b4:af:92:a1:41:1f:dc:36:
         81:ed:57:e3:53:c7:55:94:c9:ad:53:8a:22:50:bf:a4:cf:e5:
         13:ac:71:b4:a7:ca:ce:98:f1:a9:c1:c1:35:b5:bf:80:df:47:
         a5:ac:55:bd:ad:32:96:8b:b6:74:37:cd:d3:15:fb:fb:d8:06:
         f7:1b:02:7f
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEeeG1D97jDunxV2LcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTAyMTE4MzI0MloXDTI3MDEyNDE5MzI0MlowLzEtMCsGA1UEAxMk
MGI5OWNlMDgtN2YzMy00MThlLWJhZTMtMDFjYjM2NzNjMDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtI/5/zPbpdbK6eSQ9vb0iwcL/yfGEIaHFBz
nkgHyz+V5YU4qCVZ2SiUEmFnW1eNEfe1fgPT+R9fPp9kFTtASzOLq66iUicqQFmm
QzCyuI/AlhAwBT5e1fk0/qdb0w9QKwnkNebQYcZFg1npFL6xxeKaR5/aKy7ugzIC
RMO3xZJpQ5XIO2jXzTRGb/3cv+NxAQplf+S0sIFcL2txDDcwLsAEs03tvU6EnuAj
u0ls3ImIzG4OQUrhkDvs5xjwXdyRbtE1XfARDOJtys/l+PH/dexcy4wORpw21MxY
2EoOogSZdOYazQ0muQlQ0KzfX7Y/a37pEgWwb5hwQLj9NDE1ywIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFMK66x4fhdeP75G3Z+gWdJcaPxtxMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8w
Yjk5Y2UwOC03ZjMzLTQxOGUtYmFlMy0wMWNiMzY3M2MwNmYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzBiOTljZTA4LTdmMzMtNDE4ZS1i
YWUzLTAxY2IzNjczYzA2Zi8wYjk5Y2UwOC03ZjMzLTQxOGUtYmFlMy0wMWNiMzY3
M2MwNmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAiA8wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
aBkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAlqbhodjS5Fm3Es8pmM8uXGF7bjnPzrRdmSdn7msBaKWx/Xkw
nqo5PtoQZtIjpevr9zTsb/qIVH22BFl2Y2xxOSrFVKb4RkEEGM8nUOiqyENuQjdb
FsJg8Surbl8BOTW749PFMtGOVnrthk8/fBi0t+aq12VlTToHyidTBEs10QfpRR1B
y5gbeOrK3lMAJ5nvxcbpV6l4qGfhQ3IXsa/TBTZaF5k9yTDm5SVgeGpRovCX/owW
5kahmlRDQ5iD6LSvkqFBH9w2ge1X41PHVZTJrVOKIlC/pM/lE6xxtKfKzpjxqcHB
NbW/gN9HpaxVva0ylou2dDfN0xX7+9gG9xsCfw==
-----END CERTIFICATE-----