Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92ec30c1-fcdd-406b-9459-84cdf8303716.cer
File:                     92ec30c1-fcdd-406b-9459-84cdf8303716.cer (raw, json)
Hash identifier:          MBcuk/FZyQxYl3ZGniEi73rQiTm3KKLSCHUVm7ip3GI=
Subject key identifier:   80:DD:CE:81:DD:A0:DF:F0:48:0B:32:43:75:72:35:DF:06:15:3E:EB
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847775BCBA0A3C51E317595A7A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92ec30c1-fcdd-406b-9459-84cdf8303716/92ec30c1-fcdd-406b-9459-84cdf8303716.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92ec30c1-fcdd-406b-9459-84cdf8303716/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 07 Oct 2024 21:26:06 +0000
Certificate not after:    Sun 10 Jan 2027 22:26:06 +0000
Subordinate resources:    AS: 401379
                          IP: 23.191.56.0/24
                          IP: 2602:f7e6::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:5b:cb:a0:a3:c5:1e:31:75:95:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Oct  7 21:26:06 2024 GMT
            Not After : Jan 10 22:26:06 2027 GMT
        Subject: CN=92ec30c1-fcdd-406b-9459-84cdf8303716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:11:38:81:4b:e6:f9:44:af:8f:f7:17:6c:32:
                    85:a7:6d:5e:c6:6f:14:8f:21:65:49:45:0f:4a:95:
                    78:3e:c7:01:28:aa:39:c4:a9:21:e6:70:ea:67:94:
                    b8:7a:68:e2:27:59:16:90:bf:a8:57:80:9c:c7:bc:
                    fc:fd:3e:c4:a7:9f:44:54:17:de:85:87:f7:c2:5f:
                    3e:dd:21:ae:c3:e3:71:41:16:1f:ef:7b:69:bf:6f:
                    ed:72:fe:e5:41:20:6b:bd:ed:0a:37:e8:2a:d3:41:
                    a8:fb:b6:e5:1e:46:5d:be:ff:50:74:66:71:e2:7a:
                    31:e9:ca:2a:e5:b5:48:8a:71:44:dc:3c:2f:60:6b:
                    33:98:a5:00:65:a3:f1:4d:eb:1b:b0:f6:4d:40:18:
                    b4:6a:b4:7b:54:8e:e8:ea:77:47:ac:d1:22:ad:7f:
                    62:c5:b5:49:64:19:0f:78:59:d2:79:bf:13:55:30:
                    53:55:1e:9a:a9:59:97:66:7a:3e:ce:35:e7:74:ea:
                    cb:a4:4a:47:f7:64:29:18:f6:3f:15:eb:24:df:8a:
                    d9:c0:26:d1:8f:63:e5:32:16:25:71:8a:7d:46:1a:
                    10:e1:ea:bb:80:4c:ce:eb:b0:7e:62:26:0b:d0:34:
                    aa:10:bd:4a:47:a2:c8:59:9d:2a:67:55:0e:6d:20:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DD:CE:81:DD:A0:DF:F0:48:0B:32:43:75:72:35:DF:06:15:3E:EB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92ec30c1-fcdd-406b-9459-84cdf8303716/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92ec30c1-fcdd-406b-9459-84cdf8303716/92ec30c1-fcdd-406b-9459-84cdf8303716.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.56.0/24
                IPv6:
                  2602:f7e6::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401379

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:34:f2:31:ca:b6:f9:6d:79:d1:a3:00:6a:82:79:e9:2f:22:
         7a:c4:d6:49:a7:f8:df:c3:52:75:92:35:c9:9b:f8:c2:f2:f7:
         ad:12:69:06:b0:2a:47:66:8f:00:e4:d5:fa:68:f2:0a:ae:30:
         84:fe:e4:26:0d:2a:19:f6:03:57:fa:98:aa:c3:70:0f:02:9f:
         33:fe:a0:30:47:f2:7a:2e:ba:e4:70:b1:ec:dd:80:9f:1d:b5:
         91:6f:97:76:40:d0:51:fd:6d:6e:1d:7b:38:3e:13:b6:13:cb:
         0a:4b:67:1c:2d:9f:78:cb:c6:5a:14:6b:6f:68:98:88:e6:d4:
         6e:c7:2c:01:ed:cb:6f:6c:6e:d3:6e:81:51:82:c6:f5:de:1c:
         07:be:32:97:bf:10:f1:9c:3e:f0:2c:4b:93:cd:55:3e:5b:9a:
         1b:0b:af:4e:d5:45:7d:fa:29:2d:5f:64:08:ba:cc:5d:29:52:
         f6:38:c0:48:f0:c4:61:50:e2:48:a5:92:09:ad:fb:ef:cc:03:
         16:fd:96:01:3c:b3:a9:72:5c:61:48:63:5a:b5:fb:a7:54:bf:
         a3:55:9b:60:33:3c:db:21:7d:3f:c7:cd:7d:84:2c:29:60:b7:
         d9:fe:62:b8:c8:69:e0:0e:64:3b:de:d1:1f:34:1b:f2:76:9d:
         55:5d:f0:ae
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEd3W8ugo8UeMXWVp6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTAwNzIxMjYwNloXDTI3MDExMDIyMjYwNlowLzEtMCsGA1UEAxMk
OTJlYzMwYzEtZmNkZC00MDZiLTk0NTktODRjZGY4MzAzNzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxE4gUvm+USvj/cXbDKFp21exm8UjyFlSUUP
SpV4PscBKKo5xKkh5nDqZ5S4emjiJ1kWkL+oV4Ccx7z8/T7Ep59EVBfehYf3wl8+
3SGuw+NxQRYf73tpv2/tcv7lQSBrve0KN+gq00Go+7blHkZdvv9QdGZx4nox6coq
5bVIinFE3DwvYGszmKUAZaPxTesbsPZNQBi0arR7VI7o6ndHrNEirX9ixbVJZBkP
eFnSeb8TVTBTVR6aqVmXZno+zjXndOrLpEpH92QpGPY/Fesk34rZwCbRj2PlMhYl
cYp9RhoQ4eq7gEzO67B+YiYL0DSqEL1KR6LIWZ0qZ1UObSBgsQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFIDdzoHdoN/wSAsyQ3VyNd8GFT7rMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85
MmVjMzBjMS1mY2RkLTQwNmItOTQ1OS04NGNkZjgzMDM3MTYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzkyZWMzMGMxLWZjZGQtNDA2Yi05
NDU5LTg0Y2RmODMwMzcxNi85MmVjMzBjMS1mY2RkLTQwNmItOTQ1OS04NGNkZjgz
MDM3MTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXvzgwDgQCAAIwCAMGBCYC9+YAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYf4zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjNPIxyrb5bXnRowBqgnnpLyJ6
xNZJp/jfw1J1kjXJm/jC8vetEmkGsCpHZo8A5NX6aPIKrjCE/uQmDSoZ9gNX+piq
w3APAp8z/qAwR/J6LrrkcLHs3YCfHbWRb5d2QNBR/W1uHXs4PhO2E8sKS2ccLZ94
y8ZaFGtvaJiI5tRuxywB7ctvbG7TboFRgsb13hwHvjKXvxDxnD7wLEuTzVU+W5ob
C69O1UV9+iktX2QIusxdKVL2OMBI8MRhUOJIpZIJrfvvzAMW/ZYBPLOpclxhSGNa
tfunVL+jVZtgMzzbIX0/x819hCwpYLfZ/mK4yGngDmQ73tEfNBvydp1VXfCu
-----END CERTIFICATE-----