Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5.cer
File:                     122205c9-95b1-4c68-a830-5ad63089c7d5.cer (raw, json)
Hash identifier:          yHD3l5JzjlTmj0dr3PpDWneKqYg5WxgBDccvnI1lcVQ=
Subject key identifier:   37:DA:89:13:D8:D8:B8:74:25:85:15:39:14:2D:AC:35:CD:B7:4C:BB
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846B94AED49A2F5587D7F3C6300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/122205c9-95b1-4c68-a830-5ad63089c7d5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 31 Jul 2024 19:28:32 +0000
Certificate not after:    Tue 03 Nov 2026 20:28:32 +0000
Subordinate resources:    AS: 18938
                          AS: 32569
                          IP: 74.119.200.0/22
                          IP: 204.13.92.0/22
                          IP: 2620:102::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b9:4a:ed:49:a2:f5:58:7d:7f:3c:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 31 19:28:32 2024 GMT
            Not After : Nov  3 20:28:32 2026 GMT
        Subject: CN=122205c9-95b1-4c68-a830-5ad63089c7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:25:ee:95:f2:d0:81:a7:a7:90:7e:fb:7b:c7:
                    33:8d:ba:1c:54:55:f0:bb:b6:69:1b:68:ea:1d:73:
                    20:a3:64:c3:56:c5:1a:48:d1:f3:8e:03:4e:c2:99:
                    f2:80:ad:b0:36:29:83:34:12:17:79:49:d9:84:76:
                    5b:d0:84:8d:15:d4:e4:f6:b5:67:cd:5b:6b:08:62:
                    f9:16:42:7a:2e:e4:e8:91:57:ec:80:9e:29:ec:75:
                    dc:a2:bd:53:39:a4:58:a9:10:c6:9f:21:6a:e4:73:
                    fc:0c:1a:27:49:0d:16:1a:4d:ac:1e:c9:61:fc:73:
                    38:ed:16:cd:8a:83:09:a2:e2:d1:60:77:74:02:d9:
                    2e:29:37:ad:d1:11:1d:04:f1:ff:4b:a3:11:78:d3:
                    fc:82:cc:c4:3a:a6:f7:ef:b3:b9:66:10:c9:9b:59:
                    80:fb:42:7b:58:f5:40:8f:e1:41:75:f5:6f:4f:a4:
                    6a:de:52:f1:7d:41:4c:0d:ed:b9:1c:66:fb:a8:67:
                    cf:11:74:a4:d9:47:3c:1f:94:ed:9c:c7:fe:60:d5:
                    ac:d3:6f:ff:fb:6b:70:c0:aa:0c:df:95:0c:65:4b:
                    69:eb:4b:82:cd:46:f0:df:24:98:f3:b3:b5:f6:a8:
                    04:be:5f:31:7a:2a:85:75:b1:d3:8b:7f:e6:27:ab:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DA:89:13:D8:D8:B8:74:25:85:15:39:14:2D:AC:35:CD:B7:4C:BB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/122205c9-95b1-4c68-a830-5ad63089c7d5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.119.200.0/22
                  204.13.92.0/22
                IPv6:
                  2620:102::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18938
                  32569

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:cc:96:bd:51:5b:81:4d:92:df:81:2a:db:0d:42:a5:8a:
         b4:cd:2b:a5:40:74:bc:a9:6f:b7:6c:2c:38:e8:4b:23:d3:2d:
         f5:05:c2:58:e5:18:29:f5:83:4a:f7:36:cd:2d:17:23:ca:09:
         78:0a:a0:18:0d:9c:d3:ef:06:e2:7d:de:ce:a2:5e:4c:19:95:
         94:e2:5e:df:ff:8b:1f:4d:bc:f8:13:6f:1c:20:04:a2:de:6b:
         77:af:bf:36:3e:da:4a:1f:f4:14:5d:3e:52:4c:51:0f:05:6b:
         8e:16:f7:50:2c:5b:8a:3b:a6:7e:e0:d1:a9:b9:33:b0:88:16:
         8d:a9:45:c6:ee:40:15:80:54:91:a5:a1:ff:99:4f:87:0c:3f:
         fc:6e:3e:06:07:d9:19:74:e9:fd:36:ab:91:06:6b:54:28:26:
         c7:85:1b:65:b5:83:a6:95:66:f5:31:5f:e3:22:10:e7:67:35:
         cd:f0:d5:a4:3e:fe:e3:34:38:fe:e6:ec:6e:54:ac:bb:11:f8:
         50:39:d9:00:4b:ec:cf:a4:b2:63:24:de:7f:b3:b8:da:4f:bf:
         99:69:f2:ec:08:16:1c:bf:4a:60:57:e8:1d:98:ef:15:88:4c:
         5e:83:25:88:9f:50:d9:76:04:16:4b:16:d1:95:e4:9a:05:6e:
         a3:f7:a0:93
-----BEGIN CERTIFICATE-----
MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEa5Su1JovVYfX88YwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDczMTE5MjgzMloXDTI2MTEwMzIwMjgzMlowLzEtMCsGA1UEAxMk
MTIyMjA1YzktOTViMS00YzY4LWE4MzAtNWFkNjMwODljN2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryXulfLQgaenkH77e8czjbocVFXwu7ZpG2jq
HXMgo2TDVsUaSNHzjgNOwpnygK2wNimDNBIXeUnZhHZb0ISNFdTk9rVnzVtrCGL5
FkJ6LuTokVfsgJ4p7HXcor1TOaRYqRDGnyFq5HP8DBonSQ0WGk2sHslh/HM47RbN
ioMJouLRYHd0AtkuKTet0REdBPH/S6MReNP8gszEOqb377O5ZhDJm1mA+0J7WPVA
j+FBdfVvT6Rq3lLxfUFMDe25HGb7qGfPEXSk2Uc8H5TtnMf+YNWs02//+2twwKoM
35UMZUtp60uCzUbw3ySY87O19qgEvl8xeiqFdbHTi3/mJ6tmkwIDAQABo4IENTCC
BDEwHQYDVR0OBBYEFDfaiRPY2Lh0JYUVORQtrDXNt0y7MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x
MjIyMDVjOS05NWIxLTRjNjgtYTgzMC01YWQ2MzA4OWM3ZDUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzEyMjIwNWM5LTk1YjEtNGM2OC1h
ODMwLTVhZDYzMDg5YzdkNS8xMjIyMDVjOS05NWIxLTRjNjgtYTgzMC01YWQ2MzA4
OWM3ZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNgYIKwYBBQUH
AQcBAf8EJzAlMBIEAgABMAwDBAJKd8gDBALMDVwwDwQCAAIwCQMHBCYgAQIAADAd
BggrBgEFBQcBCAEB/wQOMAygCjAIAgJJ+gICfzkwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfF7Mlr1RW4FN
kt+BKtsNQqWKtM0rpUB0vKlvt2wsOOhLI9Mt9QXCWOUYKfWDSvc2zS0XI8oJeAqg
GA2c0+8G4n3ezqJeTBmVlOJe3/+LH028+BNvHCAEot5rd6+/Nj7aSh/0FF0+UkxR
DwVrjhb3UCxbijumfuDRqbkzsIgWjalFxu5AFYBUkaWh/5lPhww//G4+BgfZGXTp
/TarkQZrVCgmx4UbZbWDppVm9TFf4yIQ52c1zfDVpD7+4zQ4/ubsblSsuxH4UDnZ
AEvsz6SyYyTef7O42k+/mWny7AgWHL9KYFfoHZjvFYhMXoMliJ9Q2XYEFksW0ZXk
mgVuo/egkw==
-----END CERTIFICATE-----