Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer
File:                     da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer (raw, json)
Hash identifier:          8dklHMRu+dJfL+JWPL86L9P45eJ3XOlvrnuqqnspWiQ=
Subject key identifier:   8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847DD4FA53A1D9E369702DCF900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Nov 2024 09:54:04 +0000
Certificate not after:    Tue 16 Feb 2027 09:54:04 +0000
Subordinate resources:    AS: 401489
                          IP: 23.191.216.0/24
                          IP: 2602:f7d4::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dd:4f:a5:3a:1d:9e:36:97:02:dc:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 13 09:54:04 2024 GMT
            Not After : Feb 16 09:54:04 2027 GMT
        Subject: CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:0e:fb:79:22:5a:14:cf:44:b0:f5:0a:41:
                    fd:da:25:5c:35:ad:06:cf:a3:14:e3:5c:7d:88:a8:
                    d5:8f:1b:6d:fb:61:99:01:ac:74:de:d0:0c:52:2c:
                    bb:9e:7f:63:41:6e:9a:ef:1a:de:bc:a0:98:96:10:
                    1e:46:6c:5f:5f:96:91:1c:75:7a:09:79:7e:9a:ec:
                    78:8a:b5:e1:de:8f:4c:fe:fb:1c:87:84:ce:a1:54:
                    ce:58:09:c9:d4:12:71:fe:5c:f2:af:71:fa:d1:35:
                    0a:0f:52:e5:99:6c:83:98:e5:0d:49:53:bd:1b:ac:
                    26:6a:2b:4f:0b:38:14:a4:1e:ea:48:80:bf:7c:cf:
                    59:8f:d8:01:4e:b6:65:c7:3f:30:54:d0:6b:44:68:
                    81:bd:0b:39:2c:92:4d:2c:17:2d:0b:df:9c:db:b8:
                    91:c4:09:52:34:c9:31:50:7a:35:26:ae:c8:62:9f:
                    f4:49:68:c2:77:50:7e:b1:46:87:61:6c:96:a6:b3:
                    e1:d5:86:70:dd:91:68:68:d1:ad:98:ed:40:0c:bd:
                    ca:fe:48:22:c1:ec:5e:71:7a:f7:7d:91:2d:0d:cd:
                    20:75:34:81:80:d2:41:a7:cc:a3:63:55:ec:a1:ef:
                    c9:25:32:16:cc:17:b1:a0:53:a1:8c:44:71:5e:67:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.216.0/24
                IPv6:
                  2602:f7d4::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401489

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:0a:60:67:1a:6a:d3:23:fa:7b:6b:87:3d:26:50:ed:4d:79:
         de:bb:38:54:da:c0:a0:06:a8:5a:34:0d:48:f1:9a:36:47:eb:
         e0:76:cc:19:f4:5c:82:4d:cb:6d:61:57:64:69:b4:3f:13:6a:
         cd:ba:14:87:5b:00:c2:46:e4:a4:e4:93:60:39:25:e5:7a:2b:
         37:13:75:80:9b:55:a2:fe:e8:c7:8d:a6:f7:74:bd:70:0e:46:
         7e:e7:d6:62:bf:59:63:e8:10:c4:a7:e5:9c:2c:d9:16:d1:fd:
         0f:87:d6:9d:e9:16:bb:60:d1:72:6f:be:83:6f:a5:79:e4:ff:
         e3:22:87:55:99:f6:6b:97:e3:47:de:43:0a:bf:ad:ef:24:61:
         f7:3a:17:18:fc:fa:74:f9:73:df:16:e0:8b:73:9b:19:bd:74:
         28:7b:3d:01:c6:fd:43:cc:a5:4a:4d:1c:32:e9:9a:d4:cf:5f:
         ff:3d:47:c5:51:b8:67:72:a5:a8:6b:88:1d:7d:9d:0d:30:15:
         81:4b:79:39:15:1f:16:ae:d3:ef:db:c6:32:30:e4:46:c6:5c:
         76:12:05:43:88:16:27:31:ba:fb:93:d8:76:d8:12:8e:fd:f0:
         de:36:41:8c:90:18:e8:a0:53:fb:59:a3:53:d0:28:35:1d:dd:
         95:17:5c:d0
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEfdT6U6HZ42lwLc+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTExMzA5NTQwNFoXDTI3MDIxNjA5NTQwNFowLzEtMCsGA1UEAxMk
ZGE5NDJhMmUtYTI4ZS00ZGQ3LTg5ODYtOGNkOWQwODExYjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM8O+3kiWhTPRLD1CkH92iVcNa0Gz6MU41x9
iKjVjxtt+2GZAax03tAMUiy7nn9jQW6a7xrevKCYlhAeRmxfX5aRHHV6CXl+mux4
irXh3o9M/vsch4TOoVTOWAnJ1BJx/lzyr3H60TUKD1LlmWyDmOUNSVO9G6wmaitP
CzgUpB7qSIC/fM9Zj9gBTrZlxz8wVNBrRGiBvQs5LJJNLBctC9+c27iRxAlSNMkx
UHo1Jq7IYp/0SWjCd1B+sUaHYWyWprPh1YZw3ZFoaNGtmO1ADL3K/kgiwexecXr3
fZEtDc0gdTSBgNJBp8yjY1Xsoe/JJTIWzBexoFOhjERxXmfzrQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFI8fyubT0ix4/urkWfSrbRIH+Av7MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9k
YTk0MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5ZDA4MTFiMTgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2RhOTQyYTJlLWEyOGUtNGRkNy04
OTg2LThjZDlkMDgxMWIxOC9kYTk0MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5ZDA4
MTFiMTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXv9gwDgQCAAIwCAMGACYC99QAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYgUTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQCmBnGmrTI/p7a4c9JlDtTXne
uzhU2sCgBqhaNA1I8Zo2R+vgdswZ9FyCTcttYVdkabQ/E2rNuhSHWwDCRuSk5JNg
OSXleis3E3WAm1Wi/ujHjab3dL1wDkZ+59Ziv1lj6BDEp+WcLNkW0f0Ph9ad6Ra7
YNFyb76Db6V55P/jIodVmfZrl+NH3kMKv63vJGH3OhcY/Pp0+XPfFuCLc5sZvXQo
ez0Bxv1DzKVKTRwy6ZrUz1//PUfFUbhncqWoa4gdfZ0NMBWBS3k5FR8WrtPv28Yy
MORGxlx2EgVDiBYnMbr7k9h22BKO/fDeNkGMkBjooFP7WaNT0Cg1Hd2VF1zQ
-----END CERTIFICATE-----