Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9.cer
File:                     529c456a-0a45-44a6-8d94-800e442e44a9.cer (raw, json)
Hash identifier:          RX5XGW+LX8GcECQWb8nEPL3TsJ9ODKd2l4Zl9s2AvA8=
Subject key identifier:   76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584659E209FC62D4DBA0C88AF000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 27 Jun 2024 15:15:24 +0000
Certificate not after:    Wed 30 Sep 2026 15:15:24 +0000
Subordinate resources:    AS: 394933
                          IP: 198.252.166.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:59:e2:09:fc:62:d4:db:a0:c8:8a:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 27 15:15:24 2024 GMT
            Not After : Sep 30 15:15:24 2026 GMT
        Subject: CN=529c456a-0a45-44a6-8d94-800e442e44a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:6b:e7:ec:16:47:8a:06:c4:5f:67:f8:e1:
                    83:df:a3:80:c5:40:12:77:0a:a1:e7:5c:c0:4c:d8:
                    2f:62:37:3c:44:76:c5:48:a1:18:24:52:e8:c1:59:
                    fd:a3:28:c8:87:fb:cd:e0:78:d2:ed:0f:b7:56:03:
                    16:cb:43:fe:33:cc:a1:18:23:37:9b:01:17:a5:20:
                    59:0e:95:36:c5:ef:9a:7c:88:48:4e:65:0f:22:93:
                    4b:fa:5d:dc:52:d3:ea:16:2d:c9:c3:1b:c4:cb:4b:
                    45:46:cc:85:47:b4:3e:33:78:1e:9f:53:ed:08:d6:
                    61:86:88:56:d3:43:20:66:47:12:eb:97:c5:ab:c6:
                    55:eb:bf:0b:fb:ee:da:bb:4c:d2:ba:8e:e7:7d:6a:
                    a5:b3:31:6a:43:db:29:34:aa:d6:8e:37:46:02:82:
                    6d:11:67:81:4a:e7:a3:1d:93:ef:01:85:cb:f6:0d:
                    0b:c7:45:1d:e9:63:a4:91:dc:2a:3c:55:f7:a5:8b:
                    98:f9:44:01:eb:aa:d3:cb:7a:04:83:fb:c5:79:7a:
                    e3:d0:4e:93:94:6d:ea:e3:32:30:6f:17:e5:d9:7f:
                    9e:65:68:c3:a4:c9:c7:62:67:ce:fe:8e:40:40:24:
                    64:20:27:90:6c:13:44:5f:6f:c9:c8:6d:c7:45:33:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:4C:A8:68:0B:A0:F6:0E:DC:DC:CC:66:C9:B4:EC:E6:E1:83:F0:A2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/529c456a-0a45-44a6-8d94-800e442e44a9/529c456a-0a45-44a6-8d94-800e442e44a9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.166.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394933

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:bf:d6:0f:2d:e7:d2:6c:28:ee:b4:67:48:ff:fc:00:13:2c:
         aa:e9:36:0d:40:52:74:c4:aa:96:35:bc:d1:71:d5:67:19:d2:
         d0:c2:5e:30:a3:76:f0:e6:68:70:a9:cd:85:dd:39:23:52:39:
         0e:7a:4c:cb:87:f5:e9:23:8c:f5:13:22:3f:bf:51:f7:e4:98:
         61:09:ef:08:64:16:10:29:9c:c7:05:b5:b5:61:c0:52:51:23:
         c7:e7:80:41:ef:98:5f:b9:f0:b0:00:a5:63:60:f5:36:87:f5:
         69:74:9f:9f:81:ff:aa:14:de:ee:e3:cd:7d:3c:4d:5a:ce:69:
         37:ec:79:18:36:3f:5b:20:d7:90:64:ad:ef:35:a8:d5:ed:f9:
         ae:94:0d:3c:3f:f6:b7:77:79:ab:dc:50:9b:ac:d4:b5:79:99:
         ef:6e:d4:2b:30:da:15:0c:0c:c2:a9:c6:58:c0:f8:7e:00:6e:
         91:f1:5f:2e:69:75:b7:41:c9:e0:c7:76:37:8c:fd:99:2f:07:
         7e:ba:bb:1f:92:be:0e:d6:a0:87:20:c8:47:70:c9:40:4a:07:
         6d:33:db:46:53:b5:34:93:de:c5:17:35:e3:28:ce:b1:a9:bb:
         4d:f7:c3:b0:f7:f6:4e:9a:17:d3:1a:87:1f:41:2f:9b:1f:c9:
         4b:7f:98:1c
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEZZ4gn8YtTboMiK8AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDYyNzE1MTUyNFoXDTI2MDkzMDE1MTUyNFowLzEtMCsGA1UEAxMk
NTI5YzQ1NmEtMGE0NS00NGE2LThkOTQtODAwZTQ0MmU0NGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGZr5+wWR4oGxF9n+OGD36OAxUASdwqh51zA
TNgvYjc8RHbFSKEYJFLowVn9oyjIh/vN4HjS7Q+3VgMWy0P+M8yhGCM3mwEXpSBZ
DpU2xe+afIhITmUPIpNL+l3cUtPqFi3JwxvEy0tFRsyFR7Q+M3gen1PtCNZhhohW
00MgZkcS65fFq8ZV678L++7au0zSuo7nfWqlszFqQ9spNKrWjjdGAoJtEWeBSuej
HZPvAYXL9g0Lx0Ud6WOkkdwqPFX3pYuY+UQB66rTy3oEg/vFeXrj0E6TlG3q4zIw
bxfl2X+eZWjDpMnHYmfO/o5AQCRkICeQbBNEX2/JyG3HRTPsdQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFHZMqGgLoPYO3NzMZsm07Obhg/CiMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81
MjljNDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBlNDQyZTQ0YTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzUyOWM0NTZhLTBhNDUtNDRhNi04
ZDk0LTgwMGU0NDJlNDRhOS81MjljNDU2YS0wYTQ1LTQ0YTYtOGQ5NC04MDBlNDQy
ZTQ0YTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHG/KYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
Bga1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADi/1g8t59JsKO60Z0j//AATLKrpNg1AUnTEqpY1vNFx1WcZ
0tDCXjCjdvDmaHCpzYXdOSNSOQ56TMuH9ekjjPUTIj+/UffkmGEJ7whkFhApnMcF
tbVhwFJRI8fngEHvmF+58LAApWNg9TaH9Wl0n5+B/6oU3u7jzX08TVrOaTfseRg2
P1sg15Bkre81qNXt+a6UDTw/9rd3eavcUJus1LV5me9u1Csw2hUMDMKpxljA+H4A
bpHxXy5pdbdByeDHdjeM/ZkvB366ux+Svg7WoIcgyEdwyUBKB20z20ZTtTST3sUX
NeMozrGpu033w7D39k6aF9Mahx9BL5sfyUt/mBw=
-----END CERTIFICATE-----