Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/513f00e2-3c09-4356-b429-b9111b1f6e7a.cer
File:                     513f00e2-3c09-4356-b429-b9111b1f6e7a.cer (raw, json)
Hash identifier:          GVX/3iRe3BQ3LZBNBNFANZf6fiPvhjC9JKyINKnieD8=
Subject key identifier:   7E:D7:39:45:14:6C:1C:36:A1:1A:6A:6D:F3:43:26:CE:86:50:67:69
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845DCB7B35C3CCA4E2917D06140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/513f00e2-3c09-4356-b429-b9111b1f6e7a/513f00e2-3c09-4356-b429-b9111b1f6e7a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/513f00e2-3c09-4356-b429-b9111b1f6e7a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 May 2024 19:14:03 +0000
Certificate not after:    Sun 16 Aug 2026 19:14:03 +0000
Subordinate resources:    AS: 991
                          IP: 216.230.184.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dc:b7:b3:5c:3c:ca:4e:29:17:d0:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 13 19:14:03 2024 GMT
            Not After : Aug 16 19:14:03 2026 GMT
        Subject: CN=513f00e2-3c09-4356-b429-b9111b1f6e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0b:8e:6e:ab:d9:34:3c:09:90:b7:16:84:a8:
                    5b:88:54:05:25:e7:12:44:7b:1a:63:a9:8d:7c:d1:
                    57:fc:6b:0b:6e:9f:27:c9:a3:f3:0e:fb:cc:39:e5:
                    19:e2:bd:f8:18:10:58:cc:54:5c:71:c7:b7:88:b4:
                    dc:2c:14:ff:57:9c:a3:05:da:c1:a2:13:5a:4b:28:
                    a9:e6:87:e1:c9:73:e2:5c:5d:9e:d9:4e:e8:e6:58:
                    91:00:9b:c8:bb:1b:41:98:32:a4:e2:61:da:9c:d1:
                    f1:0e:e7:6e:b1:77:fb:13:38:a4:8e:bc:c4:1e:aa:
                    4b:42:85:40:5a:93:23:43:9b:24:6d:f3:bf:74:30:
                    37:7e:0a:8e:e8:df:a0:00:9f:eb:b9:af:db:bf:a8:
                    67:cf:5b:b1:7f:16:d1:65:ef:ec:1f:6a:ab:26:25:
                    3f:3d:87:3b:a6:e0:03:e0:75:0f:ed:21:e4:0f:3b:
                    de:6a:3b:9d:b4:7e:a3:04:ae:1b:b7:bb:d5:37:0f:
                    ac:f5:6b:36:4b:21:62:a3:a2:51:63:67:30:7e:c2:
                    3a:e4:bf:74:2d:dc:69:28:08:fb:ff:08:c6:a9:5b:
                    31:2e:17:3b:a5:d3:50:11:2f:0b:95:9f:3d:74:d3:
                    64:dc:52:29:0c:12:08:8a:65:6b:06:46:4a:89:9b:
                    a8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D7:39:45:14:6C:1C:36:A1:1A:6A:6D:F3:43:26:CE:86:50:67:69
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/513f00e2-3c09-4356-b429-b9111b1f6e7a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/513f00e2-3c09-4356-b429-b9111b1f6e7a/513f00e2-3c09-4356-b429-b9111b1f6e7a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.184.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  991

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f3:43:47:c7:69:16:29:dd:02:2b:47:a0:fb:3e:34:49:64:
         ea:23:08:17:6f:7e:00:f2:a2:2c:f9:a2:73:33:07:a0:f1:e1:
         f3:dd:cf:9f:93:e3:59:97:75:95:31:86:13:b1:5f:a9:d0:e0:
         ba:ff:b8:16:44:5b:e0:f1:31:5a:ad:56:52:e4:26:8e:6d:b7:
         e2:24:a4:00:1b:bd:e8:74:08:5a:53:d8:c9:f9:f4:0d:77:31:
         ba:41:9c:21:de:81:47:dd:8b:5f:6c:67:08:81:3d:d8:dc:20:
         41:da:52:ad:22:bc:3f:46:96:f9:d5:4c:bc:3b:e4:6e:d7:fd:
         a5:82:fc:79:e5:7c:af:1a:65:75:17:05:d3:51:6f:3c:be:62:
         51:2f:ff:5a:62:5a:c0:7e:78:c4:34:47:a0:6a:10:e2:f4:b6:
         56:9b:1d:e4:1b:0e:83:10:f2:6a:c8:aa:57:59:f5:31:f3:b0:
         52:c2:19:c1:46:aa:7a:62:da:0c:52:13:33:2f:12:1d:57:13:
         81:38:53:31:47:f5:b0:bc:11:e2:5f:b4:3b:63:3a:b0:03:f2:
         4c:5d:05:43:d5:a5:d2:03:c0:fc:dd:30:45:57:66:57:88:9c:
         00:d8:01:e0:53:5a:7a:23:8c:76:87:36:f2:da:1a:1a:54:be:
         2c:cc:1f:97
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEXct7NcPMpOKRfQYUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDUxMzE5MTQwM1oXDTI2MDgxNjE5MTQwM1owLzEtMCsGA1UEAxMk
NTEzZjAwZTItM2MwOS00MzU2LWI0MjktYjkxMTFiMWY2ZTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQuObqvZNDwJkLcWhKhbiFQFJecSRHsaY6mN
fNFX/GsLbp8nyaPzDvvMOeUZ4r34GBBYzFRccce3iLTcLBT/V5yjBdrBohNaSyip
5ofhyXPiXF2e2U7o5liRAJvIuxtBmDKk4mHanNHxDudusXf7EzikjrzEHqpLQoVA
WpMjQ5skbfO/dDA3fgqO6N+gAJ/rua/bv6hnz1uxfxbRZe/sH2qrJiU/PYc7puAD
4HUP7SHkDzveajudtH6jBK4bt7vVNw+s9Ws2SyFio6JRY2cwfsI65L90LdxpKAj7
/wjGqVsxLhc7pdNQES8LlZ89dNNk3FIpDBIIimVrBkZKiZuoSwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFH7XOUUUbBw2oRpqbfNDJs6GUGdpMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81
MTNmMDBlMi0zYzA5LTQzNTYtYjQyOS1iOTExMWIxZjZlN2EvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzUxM2YwMGUyLTNjMDktNDM1Ni1i
NDI5LWI5MTExYjFmNmU3YS81MTNmMDBlMi0zYzA5LTQzNTYtYjQyOS1iOTExMWIx
ZjZlN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALY5rgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
A98wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAcPNDR8dpFindAitHoPs+NElk6iMIF29+APKiLPmiczMHoPHh
893Pn5PjWZd1lTGGE7FfqdDguv+4FkRb4PExWq1WUuQmjm234iSkABu96HQIWlPY
yfn0DXcxukGcId6BR92LX2xnCIE92NwgQdpSrSK8P0aW+dVMvDvkbtf9pYL8eeV8
rxpldRcF01FvPL5iUS//WmJawH54xDRHoGoQ4vS2Vpsd5BsOgxDyasiqV1n1MfOw
UsIZwUaqemLaDFITMy8SHVcTgThTMUf1sLwR4l+0O2M6sAPyTF0FQ9Wl0gPA/N0w
RVdmV4icANgB4FNaeiOMdoc28toaGlS+LMwflw==
-----END CERTIFICATE-----