Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1ba3d579-a991-4921-a9bd-c621cb4af3ca.cer
File:                     1ba3d579-a991-4921-a9bd-c621cb4af3ca.cer (raw, json)
Hash identifier:          mKhzuLbzMAStY/hNDjb7T+mfqA//gWY9VYYBN+g3n4c=
Subject key identifier:   A9:B3:53:78:98:46:7D:40:4F:EF:5A:3E:1D:D3:B5:48:18:89:DD:E5
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584683D4438AA773AC608CE6C340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1ba3d579-a991-4921-a9bd-c621cb4af3ca/1ba3d579-a991-4921-a9bd-c621cb4af3ca.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1ba3d579-a991-4921-a9bd-c621cb4af3ca/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 12 Jul 2024 15:51:35 +0000
Certificate not after:    Thu 15 Oct 2026 15:51:35 +0000
Subordinate resources:    IP: 205.237.22.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:83:d4:43:8a:a7:73:ac:60:8c:e6:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul 12 15:51:35 2024 GMT
            Not After : Oct 15 15:51:35 2026 GMT
        Subject: CN=1ba3d579-a991-4921-a9bd-c621cb4af3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:89:ef:f9:d5:5c:9f:60:0c:f4:50:4e:66:
                    b0:d4:59:0d:b2:51:a4:6b:a0:18:00:f3:96:51:b8:
                    21:4b:4a:87:c0:f4:1b:21:bd:10:b2:8c:a3:d9:6f:
                    ba:0e:dd:55:5b:af:65:00:49:ef:2e:7a:99:c2:f1:
                    1b:13:67:8c:eb:5b:3e:07:3d:1d:cc:cd:9a:bf:5f:
                    c2:ad:3c:4e:dc:91:30:4b:4b:1b:0c:db:ad:d4:d8:
                    27:6b:ad:ab:35:9e:ce:88:ed:47:2e:65:de:3b:7b:
                    14:f7:f9:08:c7:44:48:5f:05:2c:35:fd:c7:dc:db:
                    e4:c0:93:bc:7a:ac:63:a3:20:59:71:1e:e6:02:16:
                    d7:53:16:58:dd:7f:30:34:80:9b:34:69:74:a0:43:
                    56:50:c9:2d:93:98:6f:ad:5b:90:70:8f:88:40:43:
                    57:dd:cc:89:1d:83:8d:68:86:f2:56:98:c6:6b:a8:
                    e9:53:e8:30:d6:a2:4c:55:42:61:a1:ca:67:8e:eb:
                    21:21:64:ca:25:26:ab:e9:b6:ee:78:33:9e:ad:a9:
                    34:09:4c:9d:3d:36:ba:a7:0f:5f:80:3a:65:4a:20:
                    c8:f5:f9:80:cf:ac:67:1a:67:22:ad:60:e3:3d:27:
                    cc:1f:66:b1:32:12:e4:61:d3:68:ec:73:9c:c3:98:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B3:53:78:98:46:7D:40:4F:EF:5A:3E:1D:D3:B5:48:18:89:DD:E5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1ba3d579-a991-4921-a9bd-c621cb4af3ca/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1ba3d579-a991-4921-a9bd-c621cb4af3ca/1ba3d579-a991-4921-a9bd-c621cb4af3ca.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:47:6c:d2:8a:db:23:05:51:85:68:24:1e:11:05:04:a1:da:
         65:c1:c8:ca:f5:dd:50:1a:41:f1:5b:3a:2c:7b:7d:6f:78:1a:
         ad:8b:3a:9d:02:8e:0d:bf:48:4a:df:17:d5:d4:70:d1:c3:db:
         3d:de:90:4e:48:59:b8:62:17:8b:9c:be:27:ac:bb:8f:66:7e:
         9a:15:d0:db:40:ef:ff:a7:10:d8:70:82:ed:9a:87:fb:12:90:
         39:1f:37:87:3b:71:d4:eb:2c:15:84:58:3e:8f:76:d2:47:fd:
         15:02:c6:2f:6b:63:fd:b9:bd:53:1b:a0:17:9b:24:bb:ab:97:
         ab:c7:07:b1:6b:da:13:eb:6c:5f:e8:67:d9:35:f0:98:b3:a1:
         46:9f:34:d8:10:99:9d:37:70:b7:82:b3:ca:cf:37:27:28:35:
         a0:fa:a3:ac:28:14:51:77:e9:53:c9:d2:2b:d8:0a:e8:6f:d0:
         cd:f7:70:03:00:f3:a8:43:eb:a2:68:50:2a:a0:66:a9:72:de:
         77:d1:0c:b0:c1:d7:9a:41:33:98:5a:30:0b:c3:86:d4:06:d9:
         e5:06:bd:1c:0c:cf:88:64:7e:7d:13:e5:c9:b5:09:8b:75:47:
         cd:4a:52:aa:3a:cc:07:09:46:d5:b9:d4:d6:9d:04:48:8e:28:
         a7:c0:49:59
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEaD1EOKp3OsYIzmw0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDcxMjE1NTEzNVoXDTI2MTAxNTE1NTEzNVowLzEtMCsGA1UEAxMk
MWJhM2Q1NzktYTk5MS00OTIxLWE5YmQtYzYyMWNiNGFmM2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkiJ7/nVXJ9gDPRQTmaw1FkNslGka6AYAPOW
UbghS0qHwPQbIb0Qsoyj2W+6Dt1VW69lAEnvLnqZwvEbE2eM61s+Bz0dzM2av1/C
rTxO3JEwS0sbDNut1Ngna62rNZ7OiO1HLmXeO3sU9/kIx0RIXwUsNf3H3NvkwJO8
eqxjoyBZcR7mAhbXUxZY3X8wNICbNGl0oENWUMktk5hvrVuQcI+IQENX3cyJHYON
aIbyVpjGa6jpU+gw1qJMVUJhocpnjushIWTKJSar6bbueDOerak0CUydPTa6pw9f
gDplSiDI9fmAz6xnGmcirWDjPSfMH2axMhLkYdNo7HOcw5gUSwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFKmzU3iYRn1AT+9aPh3TtUgYid3lMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8x
YmEzZDU3OS1hOTkxLTQ5MjEtYTliZC1jNjIxY2I0YWYzY2EvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzFiYTNkNTc5LWE5OTEtNDkyMS1h
OWJkLWM2MjFjYjRhZjNjYS8xYmEzZDU3OS1hOTkxLTQ5MjEtYTliZC1jNjIxY2I0
YWYzY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADN7RYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAa0ds0orbIwVRhWgkHhEF
BKHaZcHIyvXdUBpB8Vs6LHt9b3garYs6nQKODb9ISt8X1dRw0cPbPd6QTkhZuGIX
i5y+J6y7j2Z+mhXQ20Dv/6cQ2HCC7ZqH+xKQOR83hztx1OssFYRYPo920kf9FQLG
L2tj/bm9UxugF5sku6uXq8cHsWvaE+tsX+hn2TXwmLOhRp802BCZnTdwt4Kzys83
Jyg1oPqjrCgUUXfpU8nSK9gK6G/QzfdwAwDzqEPromhQKqBmqXLed9EMsMHXmkEz
mFowC8OG1AbZ5Qa9HAzPiGR+fRPlybUJi3VHzUpSqjrMBwlG1bnU1p0ESI4op8BJ
WQ==
-----END CERTIFICATE-----