Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.cer
File:                     4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.cer (raw, json)
Hash identifier:          FzcvI2MocS9qpVLBY2cPk8w9GKSwQw0ue+m70PWvzEA=
Subject key identifier:   F9:F4:15:A4:E0:21:DA:02:94:48:A1:45:8D:63:D0:99:9A:65:C7:39
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584679334B0C2A1B0FFDAAF11780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 08 Jul 2024 20:29:10 +0000
Certificate not after:    Sun 11 Oct 2026 20:29:10 +0000
Subordinate resources:    AS: 40127
                          IP: 2607:90c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:79:33:4b:0c:2a:1b:0f:fd:aa:f1:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  8 20:29:10 2024 GMT
            Not After : Oct 11 20:29:10 2026 GMT
        Subject: CN=4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0c:a7:a3:7c:af:57:05:9c:85:e0:35:e1:df:
                    22:61:2e:7c:bd:b0:b8:13:06:ba:79:ca:d6:2c:7f:
                    f7:3e:7e:88:38:4d:36:ab:57:6a:08:5c:f1:f3:3f:
                    f9:17:04:a1:17:cf:a4:13:5d:f9:83:e6:24:7c:cb:
                    6b:f1:73:80:6f:3e:13:65:6e:b5:a1:de:db:80:8e:
                    80:8d:9d:af:d2:dc:24:ab:9b:9b:21:a6:36:cb:94:
                    40:cd:4b:2f:3e:ec:6d:d7:39:17:27:5e:36:cf:b8:
                    7b:1a:23:97:69:05:9f:e6:7c:86:f8:51:4f:7a:b9:
                    65:48:48:f2:85:cd:78:07:4a:52:a0:eb:83:59:cc:
                    56:e6:ad:28:fc:e7:6f:bb:e5:62:c4:12:6c:7d:a9:
                    f1:a0:7e:a1:2b:d6:53:5d:dc:8a:b8:e5:16:a9:b6:
                    b1:bc:eb:a5:6c:92:21:c4:e7:d8:1f:21:78:11:7a:
                    f8:20:da:94:67:f7:f6:5d:e0:61:8b:72:d6:18:0f:
                    b9:4f:ba:13:c3:f4:0a:d3:ed:0e:25:f3:58:9a:05:
                    d9:62:f5:bf:46:93:29:d6:87:71:50:25:5c:3a:02:
                    cf:06:aa:3b:7d:13:57:b7:2d:5d:65:13:78:4f:eb:
                    58:9d:08:01:75:60:c8:0d:7f:37:4e:83:86:50:78:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F4:15:A4:E0:21:DA:02:94:48:A1:45:8D:63:D0:99:9A:65:C7:39
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d/4b648cba-e530-4f0f-94b2-f4ef1bdd0c5d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:90c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40127

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:cb:fa:11:3c:09:97:86:72:42:3d:b7:33:5f:5b:f9:05:
         d0:a2:54:3c:7f:31:ff:47:bf:9f:90:50:d8:7a:98:e8:e8:14:
         52:19:6f:28:75:0c:28:8f:77:ee:4b:04:6f:f8:03:b1:b4:f4:
         bd:6b:a1:d5:a0:05:13:4c:62:19:30:94:23:ca:92:91:d1:f9:
         d8:67:a7:7c:85:57:48:b0:94:19:82:f6:db:4c:1d:6f:59:52:
         0a:4a:10:5f:f3:10:64:f5:44:26:7c:82:5c:a2:5c:e5:39:41:
         c6:4a:68:73:bf:e8:7a:83:19:98:86:32:40:1b:a2:74:26:c4:
         27:c4:8b:be:ad:ec:ad:f0:ec:41:4a:86:69:da:8e:0b:97:54:
         d9:13:63:13:04:a4:d9:9f:7e:7c:b8:c2:88:31:40:63:a9:39:
         01:e3:e8:0e:0d:f0:19:06:d2:49:40:6a:fa:9c:3b:50:1b:2b:
         5f:46:ff:dc:dc:02:09:e0:25:06:01:d2:e5:eb:da:0a:c5:b4:
         3d:33:54:7e:6c:44:d4:f1:fd:49:08:f9:4e:8d:33:ec:fb:b0:
         72:5f:31:8b:f8:4e:29:d1:5c:77:79:a6:54:2c:20:e9:42:9d:
         de:15:57:bd:12:74:57:02:02:69:f5:b6:80:84:87:eb:9b:73:
         6f:67:49:3d
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEZ5M0sMKhsP/arxF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDcwODIwMjkxMFoXDTI2MTAxMTIwMjkxMFowLzEtMCsGA1UEAxMk
NGI2NDhjYmEtZTUzMC00ZjBmLTk0YjItZjRlZjFiZGQwYzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQyno3yvVwWcheA14d8iYS58vbC4Ewa6ecrW
LH/3Pn6IOE02q1dqCFzx8z/5FwShF8+kE135g+YkfMtr8XOAbz4TZW61od7bgI6A
jZ2v0twkq5ubIaY2y5RAzUsvPuxt1zkXJ142z7h7GiOXaQWf5nyG+FFPerllSEjy
hc14B0pSoOuDWcxW5q0o/Odvu+VixBJsfanxoH6hK9ZTXdyKuOUWqbaxvOulbJIh
xOfYHyF4EXr4INqUZ/f2XeBhi3LWGA+5T7oTw/QK0+0OJfNYmgXZYvW/RpMp1odx
UCVcOgLPBqo7fRNXty1dZRN4T+tYnQgBdWDIDX83ToOGUHhWewIDAQABo4IEHDCC
BBgwHQYDVR0OBBYEFPn0FaTgIdoClEihRY1j0JmaZcc5MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80
YjY0OGNiYS1lNTMwLTRmMGYtOTRiMi1mNGVmMWJkZDBjNWQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzRiNjQ4Y2JhLWU1MzAtNGYwZi05
NGIyLWY0ZWYxYmRkMGM1ZC80YjY0OGNiYS1lNTMwLTRmMGYtOTRiMi1mNGVmMWJk
ZDBjNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAmB5DAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCcvzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQBaXMv6ETwJl4ZyQj23M19b+QXQolQ8fzH/R7+fkFDYepjo
6BRSGW8odQwoj3fuSwRv+AOxtPS9a6HVoAUTTGIZMJQjypKR0fnYZ6d8hVdIsJQZ
gvbbTB1vWVIKShBf8xBk9UQmfIJcolzlOUHGSmhzv+h6gxmYhjJAG6J0JsQnxIu+
reyt8OxBSoZp2o4Ll1TZE2MTBKTZn358uMKIMUBjqTkB4+gODfAZBtJJQGr6nDtQ
GytfRv/c3AIJ4CUGAdLl69oKxbQ9M1R+bETU8f1JCPlOjTPs+7ByXzGL+E4p0Vx3
eaZULCDpQp3eFVe9EnRXAgJp9baAhIfrm3NvZ0k9
-----END CERTIFICATE-----