Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
File:                     e3fada49-b353-4a69-9b32-1b6ab3729db1.cer (raw, json)
Hash identifier:          J6tMOV/xDWspD1pb5m14AsSXo52ZnYvGEOxKjKfOlio=
Subject key identifier:   26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285847F816D71499C08BC1E07B4A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 23 Nov 2024 00:06:26 +0000
Certificate not after:    Fri 26 Feb 2027 00:06:26 +0000
Subordinate resources:    IP: 198.207.16.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f8:16:d7:14:99:c0:8b:c1:e0:7b:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Nov 23 00:06:26 2024 GMT
            Not After : Feb 26 00:06:26 2027 GMT
        Subject: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4e:f0:a9:03:df:49:07:81:5f:1b:63:4f:c8:
                    2c:f6:6f:08:4b:09:db:cf:75:3d:86:5a:a6:f8:1d:
                    70:98:36:15:0b:81:04:93:4a:e4:56:bc:b6:e1:51:
                    f8:20:82:e5:eb:de:ce:d8:9a:3d:66:fb:52:64:42:
                    db:9a:61:de:c8:99:da:53:0e:7d:ca:00:ac:da:cf:
                    8b:8d:58:76:19:0f:cf:bc:01:88:11:c1:ed:1f:f7:
                    7a:a4:6e:9c:47:3c:9a:9c:af:84:64:6a:c7:bb:04:
                    b6:c7:00:0b:3b:40:c8:27:27:a3:f4:1d:6d:2d:28:
                    22:0d:df:57:d5:05:61:f8:1a:20:e9:de:22:b2:78:
                    c7:86:95:77:2b:26:c8:bc:8c:9f:58:34:de:74:c9:
                    7a:8e:e1:19:31:eb:29:e3:43:52:74:94:43:dd:91:
                    cb:81:7e:dc:3c:62:d0:b8:9c:cc:84:99:22:e5:cd:
                    3a:84:0e:ef:62:ac:82:e0:a7:75:8f:a9:1e:9b:42:
                    62:2b:20:c3:71:fb:77:db:0f:32:05:bb:e1:bf:e1:
                    36:bd:98:bb:cd:22:d3:79:fd:d8:28:47:e1:8c:da:
                    dc:09:15:50:df:66:ee:b7:c4:78:e7:7a:f7:cb:8c:
                    14:e8:85:49:01:81:5a:fa:36:21:7e:88:75:0b:ac:
                    54:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.207.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:33:a3:60:6c:f0:7a:33:1d:bb:cf:2a:70:77:51:95:78:54:
         5b:0d:1b:18:bd:54:53:1c:83:70:02:d7:e7:df:e3:01:99:c5:
         3f:53:91:6f:f7:a3:0f:85:8a:91:06:0c:64:2e:41:52:92:ff:
         e8:ef:09:8a:52:ff:75:84:0e:e5:d8:4d:d7:5e:b8:10:45:b7:
         1e:93:d5:1a:62:47:3c:b2:46:fa:ec:dd:71:0b:38:36:e8:03:
         67:0f:4d:66:ea:07:8a:b4:66:fa:11:6d:bc:4c:52:bb:61:d1:
         32:c1:68:cb:70:5f:8f:b1:bd:f1:81:be:02:b9:c6:3d:c3:f8:
         b1:74:74:29:8f:f9:3f:82:2f:a3:e3:47:78:2a:24:23:0f:a3:
         47:23:68:ab:ac:0a:46:4f:00:17:f9:78:40:dd:28:d6:16:9b:
         fb:d3:85:e1:94:8f:92:38:97:19:a4:28:4b:68:0e:b3:8c:20:
         8a:dd:08:a3:cd:d0:df:3b:ae:cd:fe:60:da:09:5b:a1:17:a3:
         2b:e3:ac:18:12:03:7e:7e:c0:48:89:66:87:47:d7:07:da:ad:
         6f:46:e9:a8:1e:bf:1a:e7:61:5e:9f:85:ee:c0:32:0b:12:ef:
         e0:e6:c6:92:c6:4a:9e:45:6d:6b:34:03:e6:87:82:93:c1:a5:
         4b:df:17:76
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEf4FtcUmcCLweB7SoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MTEyMzAwMDYyNloXDTI3MDIyNjAwMDYyNlowLzEtMCsGA1UEAxMk
ZTNmYWRhNDktYjM1My00YTY5LTliMzItMWI2YWIzNzI5ZGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi07wqQPfSQeBXxtjT8gs9m8ISwnbz3U9hlqm
+B1wmDYVC4EEk0rkVry24VH4IILl697O2Jo9ZvtSZELbmmHeyJnaUw59ygCs2s+L
jVh2GQ/PvAGIEcHtH/d6pG6cRzyanK+EZGrHuwS2xwALO0DIJyej9B1tLSgiDd9X
1QVh+Bog6d4isnjHhpV3KybIvIyfWDTedMl6juEZMesp40NSdJRD3ZHLgX7cPGLQ
uJzMhJki5c06hA7vYqyC4Kd1j6kem0JiKyDDcft32w8yBbvhv+E2vZi7zSLTef3Y
KEfhjNrcCRVQ32but8R453r3y4wU6IVJAYFa+jYhfoh1C6xUpwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFCbpct3yq2oLD2UpE0cv2N/lBj2eMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9l
M2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3MjlkYjEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2UzZmFkYTQ5LWIzNTMtNGE2OS05
YjMyLTFiNmFiMzcyOWRiMS9lM2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3
MjlkYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPGzxAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJTOjYGzwejMdu88qcHdR
lXhUWw0bGL1UUxyDcALX59/jAZnFP1ORb/ejD4WKkQYMZC5BUpL/6O8JilL/dYQO
5dhN1164EEW3HpPVGmJHPLJG+uzdcQs4NugDZw9NZuoHirRm+hFtvExSu2HRMsFo
y3Bfj7G98YG+ArnGPcP4sXR0KY/5P4Ivo+NHeCokIw+jRyNoq6wKRk8AF/l4QN0o
1hab+9OF4ZSPkjiXGaQoS2gOs4wgit0Io83Q3zuuzf5g2glboRejK+OsGBIDfn7A
SIlmh0fXB9qtb0bpqB6/GudhXp+F7sAyCxLv4ObGksZKnkVtazQD5oeCk8GlS98X
dg==
-----END CERTIFICATE-----