Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91.cer
File:                     47b47588-3e08-42bd-8292-d5cf9cbddd91.cer (raw, json)
Hash identifier:          NMuDQ3HRap0aXb94wBN1eCfNB9tN7T6haG+KoV5JLGQ=
Subject key identifier:   C4:3B:50:68:E5:B9:8D:F1:EE:E9:9B:B4:DD:10:05:E7:E3:4A:94:22
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858477CBFFBFB75099E52D75885B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/47b47588-3e08-42bd-8292-d5cf9cbddd91.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 09 Oct 2024 19:47:01 +0000
Certificate not after:    Tue 12 Jan 2027 20:47:01 +0000
Subordinate resources:    AS: 396168
                          IP: 2605:f7c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:bf:fb:fb:75:09:9e:52:d7:58:85:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  9 19:47:01 2024 GMT
            Not After : Jan 12 20:47:01 2027 GMT
        Subject: CN=47b47588-3e08-42bd-8292-d5cf9cbddd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b0:bc:76:c0:17:0e:00:e9:77:cc:89:7f:ca:
                    62:7a:6a:97:1d:4e:5c:e2:7a:e1:60:eb:70:6e:ab:
                    ad:d8:5d:84:51:a9:ef:6c:1f:69:4a:9c:7d:ad:ca:
                    cd:bd:a2:d2:93:8b:6c:19:2c:bb:c5:b6:ac:17:6d:
                    23:82:a6:d2:a9:4f:d1:6c:60:39:12:04:86:2d:b6:
                    86:f3:40:29:d1:4a:a3:37:58:c2:2c:3a:94:3f:b9:
                    77:35:76:67:a6:3e:af:4b:54:9f:02:55:43:11:dd:
                    61:a1:00:74:b4:ce:f8:5c:2f:3b:11:0d:92:f4:0e:
                    65:71:cc:56:8d:b5:ea:be:ca:22:94:0e:c7:ad:4f:
                    30:01:46:04:89:9d:63:18:e0:0e:ef:5c:60:21:bd:
                    14:3d:c6:5b:26:04:cd:c3:2d:a7:a3:40:f0:c1:85:
                    e4:86:96:ad:09:f0:52:3b:c2:e0:f4:a5:a0:1f:3c:
                    fe:ec:98:62:f4:03:cb:63:6b:8d:33:2e:19:cd:a8:
                    cd:d2:ff:e7:71:37:a5:7e:db:28:0a:92:eb:b6:4b:
                    85:43:1b:11:9c:e8:e1:37:be:0e:9c:2e:fb:aa:5a:
                    69:11:ec:e1:e0:9e:f7:5d:46:19:48:48:fd:99:1b:
                    44:8b:15:8a:14:44:a5:5c:b6:ba:81:cf:1a:f9:ec:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3B:50:68:E5:B9:8D:F1:EE:E9:9B:B4:DD:10:05:E7:E3:4A:94:22
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/47b47588-3e08-42bd-8292-d5cf9cbddd91/47b47588-3e08-42bd-8292-d5cf9cbddd91.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396168

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:2a:77:60:4c:a5:10:c7:30:f3:09:76:e2:8c:47:26:bd:fb:
         b1:41:ca:24:e8:a9:68:38:ae:70:49:90:7d:b1:07:4e:95:6f:
         e1:50:b0:a2:60:ad:f3:1d:3f:54:01:80:58:be:5b:20:18:ff:
         b8:59:68:5c:08:f1:cb:8b:76:a5:35:2a:4a:58:db:39:2c:c4:
         a3:55:54:92:27:7b:74:a5:2f:c9:f2:21:62:48:05:40:86:03:
         d8:ad:48:eb:1c:f2:cf:4a:72:ae:b7:f2:af:d2:cd:a1:55:6a:
         12:ef:06:33:84:ab:53:53:47:b7:62:11:9f:41:7c:0d:8f:a8:
         9f:c1:8a:9a:7d:43:9b:01:30:d9:31:ae:09:32:4b:c5:a3:d9:
         68:40:a4:38:84:c5:76:3f:8d:77:94:32:52:db:fe:07:55:80:
         b2:ee:fe:7f:63:c5:73:a5:e6:e3:7c:02:18:cb:0b:c1:cd:14:
         8f:6e:b8:03:55:ea:c8:35:2e:22:a5:a6:47:78:db:42:7b:b9:
         d7:c6:c8:9d:86:2a:d1:65:15:45:86:d0:c7:d2:62:62:d7:de:
         41:61:d2:7a:8c:32:9c:d8:a1:30:c7:6c:ed:ae:ef:e2:89:54:
         7a:a9:f3:e0:03:1e:cd:1d:ab:ab:47:f4:ea:5f:a3:10:5e:fa:
         2f:70:6c:a3
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEd8v/v7dQmeUtdYhbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTAwOTE5NDcwMVoXDTI3MDExMjIwNDcwMVowLzEtMCsGA1UEAxMk
NDdiNDc1ODgtM2UwOC00MmJkLTgyOTItZDVjZjljYmRkZDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbC8dsAXDgDpd8yJf8piemqXHU5c4nrhYOtw
bqut2F2EUanvbB9pSpx9rcrNvaLSk4tsGSy7xbasF20jgqbSqU/RbGA5EgSGLbaG
80Ap0UqjN1jCLDqUP7l3NXZnpj6vS1SfAlVDEd1hoQB0tM74XC87EQ2S9A5lccxW
jbXqvsoilA7HrU8wAUYEiZ1jGOAO71xgIb0UPcZbJgTNwy2no0DwwYXkhpatCfBS
O8Lg9KWgHzz+7Jhi9APLY2uNMy4ZzajN0v/ncTelftsoCpLrtkuFQxsRnOjhN74O
nC77qlppEezh4J73XUYZSEj9mRtEixWKFESlXLa6gc8a+eyeyQIDAQABo4IEHDCC
BBgwHQYDVR0OBBYEFMQ7UGjluY3x7umbtN0QBefjSpQiMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80
N2I0NzU4OC0zZTA4LTQyYmQtODI5Mi1kNWNmOWNiZGRkOTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzQ3YjQ3NTg4LTNlMDgtNDJiZC04
MjkyLWQ1Y2Y5Y2JkZGQ5MS80N2I0NzU4OC0zZTA4LTQyYmQtODI5Mi1kNWNmOWNi
ZGRkOTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAmBffAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwYLiDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQAHKndgTKUQxzDzCXbijEcmvfuxQcok6KloOK5wSZB9sQdO
lW/hULCiYK3zHT9UAYBYvlsgGP+4WWhcCPHLi3alNSpKWNs5LMSjVVSSJ3t0pS/J
8iFiSAVAhgPYrUjrHPLPSnKut/Kv0s2hVWoS7wYzhKtTU0e3YhGfQXwNj6ifwYqa
fUObATDZMa4JMkvFo9loQKQ4hMV2P413lDJS2/4HVYCy7v5/Y8VzpebjfAIYywvB
zRSPbrgDVerINS4ipaZHeNtCe7nXxsidhirRZRVFhtDH0mJi195BYdJ6jDKc2KEw
x2ztru/iiVR6qfPgAx7NHaurR/TqX6MQXvovcGyj
-----END CERTIFICATE-----