Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525.cer
File:                     139ae48a-9a2d-4f4b-beff-322b2a47a525.cer (raw, json)
Hash identifier:          5LK4As+s8x+8lPXLJzkNOOzM1JhWJIJju+JjqTyLMI8=
Subject key identifier:   BA:4C:47:89:BC:37:EF:1E:16:FF:1D:08:61:07:39:8D:B0:53:A2:D1
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858467E8BD3B40484375E61FE4840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/139ae48a-9a2d-4f4b-beff-322b2a47a525.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jul 2024 18:26:36 +0000
Certificate not after:    Tue 13 Oct 2026 18:26:36 +0000
Subordinate resources:    AS: 32782
                          AS: 54601
                          AS: 394544
                          IP: 199.248.199.0/24
                          IP: 204.8.240.0/22
                          IP: 2620:0:2e70::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7e:8b:d3:b4:04:84:37:5e:61:fe:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 10 18:26:36 2024 GMT
            Not After : Oct 13 18:26:36 2026 GMT
        Subject: CN=139ae48a-9a2d-4f4b-beff-322b2a47a525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:31:cc:de:d6:c9:64:4c:37:63:bb:b5:bf:4a:
                    6b:b3:97:9c:d5:a6:23:ce:e0:a3:23:0b:6e:18:75:
                    2a:fb:d9:3b:f1:42:ba:a4:a5:43:b6:1c:a7:b7:22:
                    4a:db:d4:80:1d:0a:ff:60:a3:71:41:12:10:7f:f8:
                    4d:87:8c:d8:94:7c:da:37:3f:3e:aa:07:22:a9:80:
                    1c:ce:a6:7a:b0:d0:e8:1d:d3:33:0c:c1:91:ed:7f:
                    8c:c8:7d:a9:30:7a:08:17:d6:dd:f0:22:2a:97:74:
                    91:d5:67:23:0c:6a:32:39:84:5c:4b:4a:f7:be:36:
                    a7:45:6a:50:ad:f6:08:a7:d0:fc:b0:8d:ee:5d:56:
                    c9:86:e8:2b:de:f6:31:bb:10:df:c5:08:36:12:cd:
                    80:61:9c:ef:5a:c0:89:6e:02:b3:8a:3b:1b:20:e6:
                    9f:69:fb:19:9e:1d:4b:cd:93:5a:34:f3:c7:4c:8e:
                    b6:f7:bf:46:5d:12:94:04:bb:c7:91:db:4e:88:aa:
                    45:8e:76:b4:8c:3e:9f:fc:3d:c0:c0:32:e2:69:b3:
                    05:a6:74:6f:23:5e:50:b0:d9:04:3f:e8:94:c7:f4:
                    b4:a0:ac:1a:38:d9:77:90:65:b2:7f:14:c7:be:3a:
                    67:77:bf:65:24:2a:e8:63:4b:7e:c3:e7:be:b6:f9:
                    79:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4C:47:89:BC:37:EF:1E:16:FF:1D:08:61:07:39:8D:B0:53:A2:D1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/139ae48a-9a2d-4f4b-beff-322b2a47a525/139ae48a-9a2d-4f4b-beff-322b2a47a525.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.199.0/24
                  204.8.240.0/22
                IPv6:
                  2620:0:2e70::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32782
                  54601
                  394544

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:96:b9:70:62:88:da:7f:54:5d:8d:75:91:f4:fb:ad:5f:3c:
         cb:ee:30:7f:f8:ba:4e:f6:f1:bc:67:7d:e8:82:ca:d6:65:97:
         10:c2:2b:8b:f2:57:62:ff:d0:96:56:3b:49:b4:bd:ec:8a:b1:
         fb:3f:75:0b:b1:eb:c2:4b:2f:ec:25:29:c1:fe:0b:ad:24:cd:
         13:4d:ef:69:82:49:07:66:6d:83:22:0b:8b:0b:9a:52:f1:d0:
         3d:12:c8:8d:4a:9f:91:50:97:7d:d6:11:02:3a:b3:0a:e4:2c:
         db:96:88:59:1c:22:ab:f9:c8:c3:98:0d:3b:61:32:63:ae:c5:
         90:4e:f3:53:04:25:62:a9:b4:73:7f:0c:2f:68:db:95:3a:d9:
         c9:65:28:f8:06:1e:37:47:e9:15:8a:6d:20:fa:72:c7:91:b0:
         ae:1c:9e:71:53:23:49:b1:2a:df:c4:51:38:9e:1c:e4:6c:1e:
         23:ca:0e:c7:eb:75:ed:2b:8c:aa:03:7d:ce:b1:09:1d:e3:62:
         4f:85:e3:a3:4f:3f:8d:11:32:02:0a:71:1c:61:af:4b:e7:6e:
         fe:bf:0a:f7:95:e6:70:ea:b4:9a:09:0f:c4:81:10:91:4c:5a:
         b6:c2:a6:58:4d:4d:94:95:5f:6e:48:d0:91:f9:d6:61:21:cb:
         02:89:cc:95
-----BEGIN CERTIFICATE-----
MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEZ+i9O0BIQ3XmH+SEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDcxMDE4MjYzNloXDTI2MTAxMzE4MjYzNlowLzEtMCsGA1UEAxMk
MTM5YWU0OGEtOWEyZC00ZjRiLWJlZmYtMzIyYjJhNDdhNTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTHM3tbJZEw3Y7u1v0prs5ec1aYjzuCjIwtu
GHUq+9k78UK6pKVDthyntyJK29SAHQr/YKNxQRIQf/hNh4zYlHzaNz8+qgciqYAc
zqZ6sNDoHdMzDMGR7X+MyH2pMHoIF9bd8CIql3SR1WcjDGoyOYRcS0r3vjanRWpQ
rfYIp9D8sI3uXVbJhugr3vYxuxDfxQg2Es2AYZzvWsCJbgKzijsbIOafafsZnh1L
zZNaNPPHTI62979GXRKUBLvHkdtOiKpFjna0jD6f/D3AwDLiabMFpnRvI15QsNkE
P+iUx/S0oKwaONl3kGWyfxTHvjpnd79lJCroY0t+w+e+tvl5gQIDAQABo4IEPDCC
BDgwHQYDVR0OBBYEFLpMR4m8N+8eFv8dCGEHOY2wU6LRMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x
MzlhZTQ4YS05YTJkLTRmNGItYmVmZi0zMjJiMmE0N2E1MjUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzEzOWFlNDhhLTlhMmQtNGY0Yi1i
ZWZmLTMyMmIyYTQ3YTUyNS8xMzlhZTQ4YS05YTJkLTRmNGItYmVmZi0zMjJiMmE0
N2E1MjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNgYIKwYBBQUH
AQcBAf8EJzAlMBIEAgABMAwDBADH+McDBALMCPAwDwQCAAIwCQMHBCYgAAAucDAk
BggrBgEFBQcBCAEB/wQVMBOgETAPAgMAgA4CAwDVSQIDBgUwMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC+W
uXBiiNp/VF2NdZH0+61fPMvuMH/4uk728bxnfeiCytZllxDCK4vyV2L/0JZWO0m0
veyKsfs/dQux68JLL+wlKcH+C60kzRNN72mCSQdmbYMiC4sLmlLx0D0SyI1Kn5FQ
l33WEQI6swrkLNuWiFkcIqv5yMOYDTthMmOuxZBO81MEJWKptHN/DC9o25U62cll
KPgGHjdH6RWKbSD6cseRsK4cnnFTI0mxKt/EUTieHORsHiPKDsfrde0rjKoDfc6x
CR3jYk+F46NPP40RMgIKcRxhr0vnbv6/CveV5nDqtJoJD8SBEJFMWrbCplhNTZSV
X25I0JH51mEhywKJzJU=
-----END CERTIFICATE-----