Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer
File:                     2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer (raw, json)
Hash identifier:          MBDbBzLENTIk/Oaoyw/HJolaLV8hJmb4LFJ8fnZPwVo=
Subject key identifier:   C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858476DD410B02C462054691AB9B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 04 Oct 2024 11:30:21 +0000
Certificate not after:    Thu 24 Dec 2026 15:23:32 +0000
Subordinate resources:    AS: 396500
                          AS: 401368 -- 401371
                          IP: 23.187.152.0/24
                          IP: 2602:f82d::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6d:d4:10:b0:2c:46:20:54:69:1a:b9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  4 11:30:21 2024 GMT
            Not After : Dec 24 15:23:32 2026 GMT
        Subject: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e4:e0:38:a6:4c:cb:9d:e3:6d:f1:94:66:5c:
                    70:ee:47:e9:92:84:50:85:25:ea:9e:ee:d0:48:9a:
                    c1:5f:09:36:44:cd:e6:2a:8d:62:04:60:7b:1d:b5:
                    68:2e:71:1a:45:24:33:43:69:33:dc:9d:0a:c2:5d:
                    f8:8b:bb:2d:ad:17:ec:e5:ad:d4:13:c0:09:79:e0:
                    31:03:d8:6b:40:95:83:c4:26:fc:9c:af:06:70:c0:
                    1e:d8:20:25:5a:97:17:47:f9:ea:b3:bb:b8:e1:9d:
                    ce:53:5f:50:03:7b:85:cc:18:56:b3:46:4b:16:53:
                    dc:51:be:0c:3a:c9:de:bb:4b:10:46:20:fd:a3:0d:
                    66:a5:e9:30:d3:5b:8c:83:ed:16:24:ef:6c:09:04:
                    4a:68:de:88:11:c2:79:51:ed:de:d4:d8:70:b9:ba:
                    3a:85:70:2d:f5:b8:b2:8a:e2:0d:18:5a:58:a2:b1:
                    bb:0d:f3:89:75:0b:f9:27:27:ea:7b:6f:2b:92:2b:
                    af:fb:23:60:7d:e2:fd:6e:a0:d4:e9:cc:74:f2:43:
                    61:e4:19:9f:9c:b0:91:28:f2:c1:0f:1a:6c:8f:bb:
                    9a:c7:c0:ef:b4:7c:71:93:71:bb:56:ae:08:27:b7:
                    13:1e:18:b2:46:5a:4a:e3:d5:a7:48:2b:6b:43:e7:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.152.0/24
                IPv6:
                  2602:f82d::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396500
                  401368-401371

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1e:fd:bc:77:3b:b0:b4:d1:84:29:e0:e6:31:97:d5:81:64:
         0c:aa:3f:e4:83:6b:94:b5:c8:2b:87:b3:d6:a5:9f:21:4c:c3:
         06:ad:41:8c:98:1e:b7:59:9e:f6:e7:39:ea:b2:64:22:93:2d:
         1a:47:9c:45:1e:d7:a8:0f:ca:62:28:4e:67:7f:91:68:f4:d0:
         f5:01:f8:67:98:df:47:33:96:40:5e:60:3b:0b:ea:a2:4d:8a:
         da:96:3e:6f:de:6b:8d:6e:45:9b:73:bd:68:15:82:42:60:4d:
         62:e7:b0:db:d2:f6:e1:4d:76:2a:10:e7:1b:1f:b2:7d:5a:50:
         a4:69:5d:a2:fc:14:bb:00:06:67:59:f8:03:64:ac:7c:5e:9b:
         ca:50:af:03:eb:61:de:c9:37:e8:27:52:c1:03:99:8e:40:af:
         f6:8c:1b:62:37:07:33:ce:d1:c1:61:5d:4a:36:71:b1:98:98:
         15:31:7d:a6:2f:95:4e:83:ab:13:11:68:fb:0d:26:fa:84:ec:
         7f:54:f3:07:2b:db:84:9c:e2:74:bc:c6:c0:a8:26:57:5b:52:
         2d:c0:75:f8:13:39:a5:10:0b:a8:eb:b7:71:3a:8d:32:a8:3c:
         b8:55:cf:e5:da:22:a5:b5:85:43:35:aa:d9:4a:a1:1d:a9:2b:
         ed:f9:17:e4
-----BEGIN CERTIFICATE-----
MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEdt1BCwLEYgVGkaubAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTAwNDExMzAyMVoXDTI2MTIyNDE1MjMzMlowLzEtMCsGA1UEAxMk
MmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3NWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+TgOKZMy53jbfGUZlxw7kfpkoRQhSXqnu7Q
SJrBXwk2RM3mKo1iBGB7HbVoLnEaRSQzQ2kz3J0Kwl34i7strRfs5a3UE8AJeeAx
A9hrQJWDxCb8nK8GcMAe2CAlWpcXR/nqs7u44Z3OU19QA3uFzBhWs0ZLFlPcUb4M
Osneu0sQRiD9ow1mpekw01uMg+0WJO9sCQRKaN6IEcJ5Ue3e1Nhwubo6hXAt9biy
iuINGFpYorG7DfOJdQv5Jyfqe28rkiuv+yNgfeL9bqDU6cx08kNh5BmfnLCRKPLB
Dxpsj7uax8DvtHxxk3G7Vq4IJ7cTHhiyRlpK49WnSCtrQ+e6XQIDAQABo4IENzCC
BDMwHQYDVR0OBBYEFMi+8u7YIZ541K5VoAeNIXAvj1HcMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8y
ZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzJmZjg1ZTc5LTE3NGMtNDZmNi04
YTYyLWE5MmMyYzk4NzViOC8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5
ODc1YjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXu5gwDgQCAAIwCAMGBCYC+C0AMCYGCCsGAQUF
BwEIAQH/BBcwFaATMBECAwYM1DAKAgMGH9gCAwYf2zBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3Hv28dzuw
tNGEKeDmMZfVgWQMqj/kg2uUtcgrh7PWpZ8hTMMGrUGMmB63WZ725znqsmQiky0a
R5xFHteoD8piKE5nf5Fo9ND1AfhnmN9HM5ZAXmA7C+qiTYralj5v3muNbkWbc71o
FYJCYE1i57Db0vbhTXYqEOcbH7J9WlCkaV2i/BS7AAZnWfgDZKx8XpvKUK8D62He
yTfoJ1LBA5mOQK/2jBtiNwczztHBYV1KNnGxmJgVMX2mL5VOg6sTEWj7DSb6hOx/
VPMHK9uEnOJ0vMbAqCZXW1ItwHX4EzmlEAuo67dxOo0yqDy4Vc/l2iKltYVDNarZ
SqEdqSvt+Rfk
-----END CERTIFICATE-----