Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer
File:                     e7cf57c3-0660-4b21-8d7b-ce52b8d34545.cer (raw, json)
Hash identifier:          USP3SyADjJUVTqaLhNA8gfMuvIi3gnQ9iaZ13/BsBNI=
Subject key identifier:   B1:1D:F6:A5:8B:7B:27:D3:38:49:58:1D:88:87:A1:0B:9F:FD:2A:FA
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F4328584754FB3CAFE6E68B291FFBD600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 25 Sep 2024 13:54:04 +0000
Certificate not after:    Tue 29 Dec 2026 14:54:04 +0000
Subordinate resources:    AS: 30313
                          IP: 2610:30::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:fb:3c:af:e6:e6:8b:29:1f:fb:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Sep 25 13:54:04 2024 GMT
            Not After : Dec 29 14:54:04 2026 GMT
        Subject: CN=e7cf57c3-0660-4b21-8d7b-ce52b8d34545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fb:a2:45:5a:17:3e:6b:8a:4b:5d:a2:c6:b6:
                    c7:76:96:79:b4:16:8a:06:81:a3:3d:db:b4:8e:8c:
                    d8:4b:1c:33:05:2a:48:99:b1:e2:80:be:a1:46:65:
                    d1:e8:b5:27:67:f8:76:39:a8:11:c9:c1:72:b8:08:
                    07:85:62:aa:57:e2:9f:af:2a:a2:2d:7d:a8:eb:67:
                    29:4e:bf:16:02:e4:0c:13:55:13:02:33:89:2e:27:
                    88:da:18:04:a2:cc:c4:9e:32:f6:70:88:f9:43:01:
                    1b:b8:f7:17:40:ed:dc:c0:79:f6:12:cd:9a:d7:bb:
                    47:11:f4:49:57:c0:13:b6:55:e4:48:6d:c3:df:c8:
                    e8:1f:54:d1:b1:eb:00:68:2f:e4:e1:45:6e:fa:4a:
                    1f:c9:bc:c9:fb:f5:14:c9:fa:f1:ad:c3:1f:b1:e3:
                    72:85:c7:88:82:81:3a:ae:b6:d9:a8:e3:1c:b1:21:
                    ad:da:85:ff:46:42:01:de:48:88:a0:00:0b:12:16:
                    e0:ef:e1:19:72:62:d6:fa:32:e6:3d:fc:3e:27:c2:
                    26:26:c5:40:6d:11:9a:6b:c7:39:32:20:a8:d1:ed:
                    b8:29:85:b5:35:20:12:31:05:5c:2e:3d:b7:6a:62:
                    90:44:87:79:9a:85:6c:2e:70:e3:a8:e3:a4:41:51:
                    9e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1D:F6:A5:8B:7B:27:D3:38:49:58:1D:88:87:A1:0B:9F:FD:2A:FA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7cf57c3-0660-4b21-8d7b-ce52b8d34545/e7cf57c3-0660-4b21-8d7b-ce52b8d34545.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30313

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:c5:3a:f5:77:07:ed:c3:be:20:df:5f:b6:34:76:9f:ff:5b:
         ac:9e:b5:9f:23:17:eb:d3:66:9d:b6:99:25:22:c0:5a:eb:f9:
         4f:56:ff:ef:bb:08:3e:01:e1:45:ef:58:e3:08:a5:c3:4b:af:
         d2:a8:64:88:93:87:1c:71:2b:51:1e:4f:f4:33:ec:88:78:6c:
         79:ef:73:92:6f:bf:f9:0e:58:9d:56:62:b4:69:70:3b:a7:67:
         07:93:98:64:fe:40:2e:35:8b:12:df:55:e3:e8:d9:58:8a:bd:
         d3:17:11:51:94:4e:a4:ce:3a:a8:e2:22:a6:e3:99:00:f4:55:
         f9:80:00:0d:34:b6:36:47:d7:50:bc:5f:c2:06:07:74:15:c9:
         86:8e:30:ae:73:e7:4d:45:8e:85:57:8f:ad:25:66:f4:79:54:
         4f:d3:1f:59:02:61:78:8a:6b:0e:22:5c:b2:99:c2:f0:37:99:
         e7:15:61:f4:bb:fb:68:a3:87:0b:24:00:48:7c:60:26:bf:26:
         70:3a:8e:dc:40:6f:49:50:1c:e1:09:c0:58:c0:fa:1f:47:dc:
         17:14:be:da:5e:2e:42:f8:66:33:1f:24:56:a6:7e:74:93:2f:
         89:36:95:9f:3c:e9:06:8d:f3:47:9d:23:dd:17:e3:e6:61:f8:
         2c:35:4a:79
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEdU+zyv5uaLKR/71gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm
MTk1MB4XDTI0MDkyNTEzNTQwNFoXDTI2MTIyOTE0NTQwNFowLzEtMCsGA1UEAxMk
ZTdjZjU3YzMtMDY2MC00YjIxLThkN2ItY2U1MmI4ZDM0NTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfuiRVoXPmuKS12ixrbHdpZ5tBaKBoGjPdu0
jozYSxwzBSpImbHigL6hRmXR6LUnZ/h2OagRycFyuAgHhWKqV+KfryqiLX2o62cp
Tr8WAuQME1UTAjOJLieI2hgEoszEnjL2cIj5QwEbuPcXQO3cwHn2Es2a17tHEfRJ
V8ATtlXkSG3D38joH1TRsesAaC/k4UVu+kofybzJ+/UUyfrxrcMfseNyhceIgoE6
rrbZqOMcsSGt2oX/RkIB3kiIoAALEhbg7+EZcmLW+jLmPfw+J8ImJsVAbRGaa8c5
MiCo0e24KYW1NSASMQVcLj23amKQRId5moVsLnDjqOOkQVGeOQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFLEd9qWLeyfTOElYHYiHoQuf/Sr6MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9l
N2NmNTdjMy0wNjYwLTRiMjEtOGQ3Yi1jZTUyYjhkMzQ1NDUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt
YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1L2U3Y2Y1N2MzLTA2NjAtNGIyMS04
ZDdiLWNlNTJiOGQzNDU0NS9lN2NmNTdjMy0wNjYwLTRiMjEtOGQ3Yi1jZTUyYjhk
MzQ1NDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw
MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4
YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE
69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5
ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAmEAAwMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AnZpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADLFOvV3B+3DviDfX7Y0dp//W6yetZ8jF+vTZp22mSUiwFrr
+U9W/++7CD4B4UXvWOMIpcNLr9KoZIiThxxxK1EeT/Qz7Ih4bHnvc5Jvv/kOWJ1W
YrRpcDunZweTmGT+QC41ixLfVePo2ViKvdMXEVGUTqTOOqjiIqbjmQD0VfmAAA00
tjZH11C8X8IGB3QVyYaOMK5z501FjoVXj60lZvR5VE/TH1kCYXiKaw4iXLKZwvA3
mecVYfS7+2ijhwskAEh8YCa/JnA6jtxAb0lQHOEJwFjA+h9H3BcUvtpeLkL4ZjMf
JFamfnSTL4k2lZ886QaN80edI90X4+Zh+Cw1Snk=
-----END CERTIFICATE-----