Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794.cer
File:                     8912efe9-9a7a-4e99-821c-82dc2da25794.cer (raw, json)
Hash identifier:          /oD7/RBJcnhLXgF2ugbLGQhw7kpfblWeK6VMmM8cTT4=
Subject key identifier:   78:CD:25:62:0C:01:47:AC:52:84:E5:26:FA:A2:B4:28:53:B4:E3:94
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F432858470627CE336B8A9DF349764CF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/8912efe9-9a7a-4e99-821c-82dc2da25794.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 28 Aug 2024 08:15:00 +0000
Certificate not after:    Tue 01 Dec 2026 09:15:00 +0000
Subordinate resources:    AS: 20208
                          IP: 23.165.0.0/24
                          IP: 2607:b080::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Sep 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:06:27:ce:33:6b:8a:9d:f3:49:76:4c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Aug 28 08:15:00 2024 GMT
            Not After : Dec  1 09:15:00 2026 GMT
        Subject: CN=8912efe9-9a7a-4e99-821c-82dc2da25794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:3e:31:d8:9a:bc:b5:ed:1f:f1:41:d7:51:
                    0c:ab:30:cf:b9:b2:e0:90:4d:82:d0:fe:e0:c7:93:
                    a8:5d:f8:fa:80:87:dc:d5:17:40:81:95:44:f6:26:
                    b8:d9:05:bb:32:df:57:fc:a2:23:2f:01:c4:8c:48:
                    bf:f8:af:ec:95:44:34:a1:45:99:bf:e0:4d:9c:27:
                    e7:a8:c9:08:0d:75:34:e1:08:4c:da:53:3e:5f:aa:
                    69:aa:5a:af:57:d5:a6:fa:08:80:e8:cb:fb:d0:3e:
                    cb:8a:04:e0:99:24:f7:f9:b2:16:7e:35:b1:02:1c:
                    78:8b:0d:56:f6:57:61:65:f0:f7:01:d1:93:9c:0d:
                    34:10:4a:63:25:42:60:90:0d:d7:98:b7:ba:c7:13:
                    d5:6a:30:ab:55:8b:b3:a1:ac:59:1a:f5:a2:2c:ee:
                    2a:56:2a:8a:b2:16:17:8f:6d:a6:59:93:e8:77:42:
                    bf:b6:d1:29:fb:99:10:98:50:f6:e4:cd:b8:f0:31:
                    31:96:0a:06:b3:d2:94:e0:c0:8f:51:50:fa:6b:5c:
                    13:1b:3f:73:f7:a4:c5:d7:4e:3a:56:84:ba:26:0b:
                    e4:2e:2b:6b:c5:f2:c2:4b:96:82:71:26:86:05:56:
                    c5:42:f1:85:1a:09:2f:b3:c0:dc:9d:63:9b:da:91:
                    e3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CD:25:62:0C:01:47:AC:52:84:E5:26:FA:A2:B4:28:53:B4:E3:94
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8912efe9-9a7a-4e99-821c-82dc2da25794/8912efe9-9a7a-4e99-821c-82dc2da25794.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.0.0/24
                IPv6:
                  2607:b080::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20208

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:c6:6c:ea:0d:5f:26:b2:bd:29:9e:f9:9c:e7:0d:f6:8b:2b:
         2a:82:c2:5d:e6:93:11:91:bc:f1:a6:9a:d2:d8:ea:f0:41:a9:
         ec:a3:cf:e7:df:16:45:2e:2d:88:1d:63:f4:da:d1:1d:ef:a9:
         a5:d7:9d:8d:05:2d:b2:0f:ad:06:4e:28:a1:db:c6:4e:bf:84:
         f4:7e:c9:5c:d0:02:66:99:63:0f:8b:7e:f5:e6:5e:24:d9:12:
         79:14:de:e1:7a:4e:37:55:b0:f3:8e:03:f1:5a:20:bb:37:b9:
         45:74:c6:68:0f:ff:ca:60:d0:35:ab:ff:b7:31:cb:ea:e0:b1:
         fd:fd:30:49:cd:ed:61:ef:65:73:e8:16:d9:87:32:95:01:23:
         fd:b6:b2:8c:8d:d6:6d:5c:2a:5c:88:94:96:50:0a:7b:4c:ef:
         c1:0f:47:f2:97:10:38:41:ad:bd:1c:42:57:be:55:66:9d:31:
         a6:26:a1:98:4e:ae:13:dd:72:06:32:cc:bc:f6:75:cf:5c:af:
         5b:74:c1:42:cc:f4:35:d4:8c:8f:65:a0:f5:1d:f9:80:de:02:
         b4:bf:97:43:04:8b:2f:81:f8:de:36:4d:dc:57:28:f3:88:8e:
         80:5f:04:70:39:30:e0:15:00:bc:fa:0a:36:48:f2:59:93:80:
         02:c9:c6:dc
-----BEGIN CERTIFICATE-----
MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEcGJ84za4qd80l2TPAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MDgyODA4MTUwMFoXDTI2MTIwMTA5MTUwMFowLzEtMCsGA1UEAxMk
ODkxMmVmZTktOWE3YS00ZTk5LTgyMWMtODJkYzJkYTI1Nzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx4+MdiavLXtH/FB11EMqzDPubLgkE2C0P7g
x5OoXfj6gIfc1RdAgZVE9ia42QW7Mt9X/KIjLwHEjEi/+K/slUQ0oUWZv+BNnCfn
qMkIDXU04QhM2lM+X6ppqlqvV9Wm+giA6Mv70D7LigTgmST3+bIWfjWxAhx4iw1W
9ldhZfD3AdGTnA00EEpjJUJgkA3XmLe6xxPVajCrVYuzoaxZGvWiLO4qViqKshYX
j22mWZPod0K/ttEp+5kQmFD25M248DExlgoGs9KU4MCPUVD6a1wTGz9z96TF1046
VoS6JgvkLitrxfLCS5aCcSaGBVbFQvGFGgkvs8DcnWOb2pHjlQIDAQABo4IEKTCC
BCUwHQYDVR0OBBYEFHjNJWIMAUesUoTlJvqitChTtOOUMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84
OTEyZWZlOS05YTdhLTRlOTktODIxYy04MmRjMmRhMjU3OTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1Lzg5MTJlZmU5LTlhN2EtNGU5OS04
MjFjLTgyZGMyZGEyNTc5NC84OTEyZWZlOS05YTdhLTRlOTktODIxYy04MmRjMmRh
MjU3OTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAAXpQAwDQQCAAIwBwMFACYHsIAwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICTvAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgcZs6g1fJrK9KZ75nOcN9osrKoLC
XeaTEZG88aaa0tjq8EGp7KPP598WRS4tiB1j9NrRHe+ppdedjQUtsg+tBk4oodvG
Tr+E9H7JXNACZpljD4t+9eZeJNkSeRTe4XpON1Ww844D8Voguze5RXTGaA//ymDQ
Nav/tzHL6uCx/f0wSc3tYe9lc+gW2YcylQEj/bayjI3WbVwqXIiUllAKe0zvwQ9H
8pcQOEGtvRxCV75VZp0xpiahmE6uE91yBjLMvPZ1z1yvW3TBQsz0NdSMj2Wg9R35
gN4CtL+XQwSLL4H43jZN3Fco84iOgF8EcDkw4BUAvPoKNkjyWZOAAsnG3A==
-----END CERTIFICATE-----