Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.cer
File:                     30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.cer (raw, json)
Hash identifier:          xN7ZM/mnrwWwhVzgHnFgs0hIxMK/+R/Vt5126D93NTM=
Subject key identifier:   F5:C7:2E:43:ED:3E:D6:D8:2A:96:2A:ED:5B:43:17:B2:26:28:60:07
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845D109172D9F9199037F7F3D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 09 May 2024 14:48:20 +0000
Certificate not after:    Wed 12 Aug 2026 14:48:20 +0000
Subordinate resources:    AS: 22027
                          AS: 26804
                          IP: 206.82.144.0/20
                          IP: 216.153.8.0/21
                          IP: 2602:f995::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d1:09:17:2d:9f:91:99:03:7f:7f:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May  9 14:48:20 2024 GMT
            Not After : Aug 12 14:48:20 2026 GMT
        Subject: CN=30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:24:56:6a:4a:1f:32:bb:6c:fc:98:a7:fc:
                    ed:14:b5:45:3f:9a:a1:a4:b9:1c:7a:ae:87:69:4c:
                    e3:ee:49:bf:60:73:7e:99:03:f8:e2:1d:1d:b8:2f:
                    e9:99:70:ce:11:fb:a2:65:25:72:58:67:c2:b6:1e:
                    25:dd:ff:a0:9a:87:df:f2:73:b8:11:d7:bd:c7:34:
                    23:af:4c:b4:31:c8:02:01:b5:c2:20:88:15:c8:cb:
                    57:c0:a4:d0:ee:ec:f6:36:91:4a:4b:01:dd:d1:48:
                    a7:59:10:60:eb:c4:71:55:f5:4b:94:62:60:59:22:
                    e8:31:31:f7:12:17:d4:ed:b7:d1:93:ec:60:f5:57:
                    1b:9c:d9:8f:79:63:71:bc:39:63:85:ab:c3:c0:ed:
                    25:a0:c7:02:f0:16:4f:a4:20:df:8e:b3:86:3c:dd:
                    34:74:7c:ad:2a:d1:0e:df:ae:f5:d8:44:7b:2a:04:
                    29:f3:62:01:09:71:74:e6:74:17:e0:3d:a3:07:33:
                    63:70:ae:34:c2:4c:fa:e7:e0:19:68:8d:61:1b:5e:
                    1c:90:17:58:d2:fa:04:b0:0b:bd:15:8b:0b:f9:76:
                    85:07:69:4d:69:e4:26:13:b7:d7:b2:4b:e5:dd:3e:
                    54:ab:2c:50:aa:a7:11:7d:76:b9:7c:e8:d2:32:50:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C7:2E:43:ED:3E:D6:D8:2A:96:2A:ED:5B:43:17:B2:26:28:60:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.144.0/20
                  216.153.8.0/21
                IPv6:
                  2602:f995::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22027
                  26804

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c3:9f:f7:68:e6:1c:6e:1c:7c:1d:25:e8:9f:2c:8f:d6:34:
         51:f0:92:58:d8:60:96:d0:5f:ef:1e:25:f7:27:ae:db:5e:c3:
         bd:22:6e:ab:3d:72:7e:d1:75:f1:e2:e7:17:5d:f1:0a:be:d8:
         4d:e2:ee:79:f0:c8:0b:0d:bb:f5:14:71:24:b4:31:c9:2c:94:
         62:e5:c8:97:ee:54:ce:9f:ce:7f:85:dc:8c:f0:7e:1e:19:d1:
         3e:00:29:eb:0a:a1:e6:28:ed:f5:3c:9c:5f:e8:7e:43:e1:99:
         a8:97:67:ed:7d:99:05:1c:cf:ee:29:8a:73:64:41:c4:5d:16:
         fc:20:d3:19:7e:ec:6d:d7:28:ee:d7:ec:cc:e0:f8:42:60:f6:
         3f:7b:0d:4d:90:c8:7c:44:b8:fd:f4:31:e6:22:18:56:9f:91:
         88:e9:04:84:4c:32:09:70:43:18:83:10:69:11:88:d0:d1:ff:
         6a:a4:20:a3:99:dc:e5:5c:3d:17:e4:9f:2a:e2:b6:93:ad:09:
         87:92:03:82:be:3e:63:ce:ac:96:12:cc:f4:ec:e6:3f:2c:fd:
         96:8c:b0:01:2f:e1:ce:36:31:b0:c0:ff:51:6f:0f:94:6d:10:
         ef:fc:0f:5c:db:00:d7:a6:e5:80:a0:17:aa:e9:88:63:16:40:
         ed:57:9e:3b
-----BEGIN CERTIFICATE-----
MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEXRCRctn5GZA39/PQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDUwOTE0NDgyMFoXDTI2MDgxMjE0NDgyMFowLzEtMCsGA1UEAxMk
MzBjZTJjZWMtMjYyMi00ZjYxLThlYjctOTVmMWE0YTliMWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtgkVmpKHzK7bPyYp/ztFLVFP5qhpLkceq6H
aUzj7km/YHN+mQP44h0duC/pmXDOEfuiZSVyWGfCth4l3f+gmoff8nO4Ede9xzQj
r0y0McgCAbXCIIgVyMtXwKTQ7uz2NpFKSwHd0UinWRBg68RxVfVLlGJgWSLoMTH3
EhfU7bfRk+xg9VcbnNmPeWNxvDljhavDwO0loMcC8BZPpCDfjrOGPN00dHytKtEO
36712ER7KgQp82IBCXF05nQX4D2jBzNjcK40wkz65+AZaI1hG14ckBdY0voEsAu9
FYsL+XaFB2lNaeQmE7fXskvl3T5UqyxQqqcRfXa5fOjSMlBTFwIDAQABo4IENDCC
BDAwHQYDVR0OBBYEFPXHLkPtPtbYKpYq7VtDF7ImKGAHMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8z
MGNlMmNlYy0yNjIyLTRmNjEtOGViNy05NWYxYTRhOWIxZTYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMwY2UyY2VjLTI2MjItNGY2MS04
ZWI3LTk1ZjFhNGE5YjFlNi8zMGNlMmNlYy0yNjIyLTRmNjEtOGViNy05NWYxYTRh
OWIxZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNQYIKwYBBQUH
AQcBAf8EJjAkMBIEAgABMAwDBATOUpADBAPYmQgwDgQCAAIwCAMGBCYC+ZUAMB0G
CCsGAQUFBwEIAQH/BA4wDKAKMAgCAlYLAgJotDBUBgNVHSABAf8ESjBIMEYGCCsG
AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291
cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1w5/3aOYcbhx8
HSXonyyP1jRR8JJY2GCW0F/vHiX3J67bXsO9Im6rPXJ+0XXx4ucXXfEKvthN4u55
8MgLDbv1FHEktDHJLJRi5ciX7lTOn85/hdyM8H4eGdE+ACnrCqHmKO31PJxf6H5D
4Zmol2ftfZkFHM/uKYpzZEHEXRb8INMZfuxt1yju1+zM4PhCYPY/ew1NkMh8RLj9
9DHmIhhWn5GI6QSETDIJcEMYgxBpEYjQ0f9qpCCjmdzlXD0X5J8q4raTrQmHkgOC
vj5jzqyWEsz07OY/LP2WjLABL+HONjGwwP9Rbw+UbRDv/A9c2wDXpuWAoBeq6Yhj
FkDtV547
-----END CERTIFICATE-----