Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab.cer
File:                     692aac29-6d3b-4bdf-9238-da449246d5ab.cer (raw, json)
Hash identifier:          S6aeja1092mCDpBtc7yiRcvxjamg+0up9bnoFK5KARc=
Subject key identifier:   EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846798C9632E175D40C7E0F5C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 08 Jul 2024 23:29:05 +0000
Certificate not after:    Sun 11 Oct 2026 23:29:05 +0000
Subordinate resources:    IP: 64.40.204.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:79:8c:96:32:e1:75:d4:0c:7e:0f:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  8 23:29:05 2024 GMT
            Not After : Oct 11 23:29:05 2026 GMT
        Subject: CN=692aac29-6d3b-4bdf-9238-da449246d5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:99:8d:45:c7:e9:cd:31:cb:f0:48:f2:ae:75:
                    4f:ba:be:79:d6:f5:56:17:7d:97:e8:b7:76:b8:c1:
                    9d:a8:32:53:43:c9:b2:92:f3:e3:0b:48:83:1e:7f:
                    8e:1c:68:60:8f:55:cc:cc:e4:1b:c3:2d:e0:58:51:
                    b7:db:f6:fb:f3:db:45:67:f4:00:4f:7e:16:46:46:
                    b6:3e:ef:be:c4:70:76:22:7f:7f:65:2d:0d:37:ce:
                    0d:5a:a5:2f:10:29:db:ac:8b:60:51:96:1b:48:66:
                    67:07:a5:3d:2f:4b:8b:8e:ce:a0:e2:c6:8d:e4:06:
                    d1:54:c6:f2:86:66:a8:e5:a9:56:68:15:4e:4f:82:
                    cc:cb:53:b2:67:09:e9:ea:db:36:a8:44:b3:c6:6f:
                    f6:c4:a0:57:c5:1a:fa:cc:50:3c:41:e7:c2:63:b5:
                    af:ff:4e:32:fc:3d:3d:82:04:7c:2c:53:09:5a:1e:
                    32:cd:15:51:c8:9f:53:01:c2:61:95:39:c2:c6:da:
                    a8:5c:17:d3:a7:d7:6e:16:a6:27:a4:11:3d:88:9f:
                    91:bb:8b:2c:36:54:90:8a:ce:7e:c9:61:44:9c:01:
                    b4:b6:11:c6:d9:7b:e3:5b:ba:4f:67:28:98:b9:17:
                    c7:ab:2d:21:2f:0c:b0:d8:48:a0:b2:8e:39:4d:f5:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:56:10:32:5F:67:0D:6B:D4:13:D8:4E:62:59:26:B5:BF:49:88:E6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/692aac29-6d3b-4bdf-9238-da449246d5ab/692aac29-6d3b-4bdf-9238-da449246d5ab.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:07:23:09:95:b4:3d:d1:bb:19:96:32:94:fd:7f:78:26:87:
         76:4a:f5:d7:92:39:45:78:5e:56:6c:67:66:67:d0:f4:9f:44:
         c3:bf:e3:ba:6c:4c:0f:f1:e4:d9:af:90:02:b6:d2:a2:2e:23:
         72:f7:60:2a:0c:2a:fb:c8:0a:99:bb:46:6f:31:e0:5c:8c:58:
         1d:9a:14:27:67:45:82:f4:6b:26:e1:9b:a2:c4:ed:1b:c6:90:
         aa:71:cb:bf:32:34:48:d9:cd:49:27:f5:fe:80:59:d4:f6:48:
         91:32:05:1c:a5:6f:d2:4b:13:48:3a:5e:20:c4:95:50:ed:fc:
         a4:7a:0e:d4:e9:b3:d4:09:c8:50:7c:86:18:f7:18:4d:e7:4b:
         8e:cc:f5:a5:68:fc:d8:a9:59:b3:c7:c7:51:5b:9e:90:bf:20:
         9e:1f:cc:6b:f4:b2:38:13:af:05:b1:e1:c0:ed:eb:b6:2a:1c:
         40:f2:0f:1e:bb:80:3b:c0:be:4d:65:8d:79:e0:1c:b6:4a:91:
         98:72:82:d7:55:1c:bf:22:cf:5c:ac:8d:c2:1b:aa:ed:d8:13:
         ac:88:36:3e:eb:ee:c8:88:e9:7c:0d:8a:07:6c:71:ac:6f:53:
         79:b3:00:01:c5:db:5d:f4:33:29:b7:72:79:25:f0:f5:4b:74:
         e2:7a:fd:b6
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEZ5jJYy4XXUDH4PXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDcwODIzMjkwNVoXDTI2MTAxMTIzMjkwNVowLzEtMCsGA1UEAxMk
NjkyYWFjMjktNmQzYi00YmRmLTkyMzgtZGE0NDkyNDZkNWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpmNRcfpzTHL8EjyrnVPur551vVWF32X6Ld2
uMGdqDJTQ8mykvPjC0iDHn+OHGhgj1XMzOQbwy3gWFG32/b789tFZ/QAT34WRka2
Pu++xHB2In9/ZS0NN84NWqUvECnbrItgUZYbSGZnB6U9L0uLjs6g4saN5AbRVMby
hmao5alWaBVOT4LMy1OyZwnp6ts2qESzxm/2xKBXxRr6zFA8QefCY7Wv/04y/D09
ggR8LFMJWh4yzRVRyJ9TAcJhlTnCxtqoXBfTp9duFqYnpBE9iJ+Ru4ssNlSQis5+
yWFEnAG0thHG2XvjW7pPZyiYuRfHqy0hLwyw2Eigso45TfX/TwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFOpWEDJfZw1r1BPYTmJZJrW/SYjmMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82
OTJhYWMyOS02ZDNiLTRiZGYtOTIzOC1kYTQ0OTI0NmQ1YWIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzY5MmFhYzI5LTZkM2ItNGJkZi05
MjM4LWRhNDQ5MjQ2ZDVhYi82OTJhYWMyOS02ZDNiLTRiZGYtOTIzOC1kYTQ0OTI0
NmQ1YWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAJAKMwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATQcjCZW0PdG7GZYylP1/
eCaHdkr115I5RXheVmxnZmfQ9J9Ew7/jumxMD/Hk2a+QArbSoi4jcvdgKgwq+8gK
mbtGbzHgXIxYHZoUJ2dFgvRrJuGbosTtG8aQqnHLvzI0SNnNSSf1/oBZ1PZIkTIF
HKVv0ksTSDpeIMSVUO38pHoO1Omz1AnIUHyGGPcYTedLjsz1pWj82KlZs8fHUVue
kL8gnh/Ma/SyOBOvBbHhwO3rtiocQPIPHruAO8C+TWWNeeActkqRmHKC11UcvyLP
XKyNwhuq7dgTrIg2PuvuyIjpfA2KB2xxrG9TebMAAcXbXfQzKbdyeSXw9Ut04nr9
tg==
-----END CERTIFICATE-----