Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c.cer
File:                     6e8499d4-7126-459b-b6cc-4ca2f542f30c.cer (raw, json)
Hash identifier:          XluR6LqKbwoIqwh5hAG/yEB9vgKUTl7oE5M0QQvf7cM=
Subject key identifier:   69:E1:F8:2C:A6:89:01:F7:41:DA:56:B7:E7:A0:3F:23:60:F0:DA:54
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845D150CF5064E433A11449D780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/6e8499d4-7126-459b-b6cc-4ca2f542f30c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 09 May 2024 17:12:50 +0000
Certificate not after:    Wed 12 Aug 2026 17:12:50 +0000
Subordinate resources:    AS: 3635
                          IP: 192.149.12.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d1:50:cf:50:64:e4:33:a1:14:49:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May  9 17:12:50 2024 GMT
            Not After : Aug 12 17:12:50 2026 GMT
        Subject: CN=6e8499d4-7126-459b-b6cc-4ca2f542f30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:2b:ee:d1:ec:4e:11:1b:57:fb:f0:7b:19:
                    1f:a2:78:ed:2f:f4:23:55:74:43:b5:7a:8d:b2:4b:
                    a2:29:a0:e0:47:2d:57:4a:e6:d2:ac:c6:48:6a:cf:
                    fd:79:b6:c9:4b:9c:d2:3d:b3:95:99:d4:3e:d6:d0:
                    4f:54:00:9d:df:fa:55:e6:aa:be:38:f6:a9:f4:bb:
                    80:a8:cd:8e:8c:32:ad:e4:7f:29:8c:13:d3:6c:1e:
                    6b:f0:17:54:e9:67:24:a9:d6:44:19:66:e0:5c:a9:
                    57:27:1a:e5:b7:66:5d:fd:c4:a7:8c:40:b9:6c:3c:
                    2e:72:f5:b5:83:7d:f3:ba:13:c0:d2:9b:02:2a:57:
                    96:33:f0:2f:69:00:41:b7:45:de:6e:1d:9f:03:64:
                    54:38:a7:9f:0a:cd:de:49:b4:22:af:2a:9b:4d:06:
                    99:72:1a:5f:81:43:51:60:bc:a0:54:ee:3e:83:da:
                    e2:a0:10:0c:15:1e:7c:c8:1b:de:49:b0:66:a3:af:
                    e1:db:d8:42:10:15:a1:a2:0b:8c:ce:2b:0c:d2:96:
                    45:78:87:b0:42:0a:9e:b7:62:3c:97:0b:bb:ea:29:
                    ab:27:27:7f:3c:7a:a5:0c:b4:f7:cc:9a:c7:9c:a0:
                    24:38:57:a4:96:53:f3:e7:4d:94:2e:2a:0c:f4:94:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E1:F8:2C:A6:89:01:F7:41:DA:56:B7:E7:A0:3F:23:60:F0:DA:54
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/6e8499d4-7126-459b-b6cc-4ca2f542f30c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.12.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3635

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:90:ec:b6:cf:cc:59:05:32:d8:5c:59:45:e1:b5:10:2a:77:
         9b:e2:a4:0b:2c:f7:ae:64:3f:08:6b:42:fe:6f:60:ac:99:94:
         2a:06:e6:ee:b9:b7:55:15:bc:0d:37:64:a0:c3:0c:24:15:b8:
         15:a7:d2:62:a1:5b:cf:27:57:92:be:89:82:63:2c:cc:42:45:
         a6:85:93:f4:28:24:ae:6f:38:64:93:8a:fc:a9:b2:04:cb:04:
         25:30:24:18:49:d4:fb:61:6f:a6:7a:33:a8:ef:c8:15:35:73:
         2c:90:5d:dd:89:2d:62:f3:eb:ed:98:66:50:6e:75:af:1e:4e:
         bf:34:bb:fd:3b:f9:93:90:ff:b6:81:ff:00:ce:75:48:76:59:
         bd:9a:cc:c3:9d:b9:c5:d2:73:96:bf:f7:08:50:55:8a:17:45:
         3a:30:42:85:d6:4c:ca:4b:f4:c9:49:b9:bc:05:43:cb:bf:90:
         3c:57:48:c1:a7:de:6e:ee:a0:34:58:1c:2e:94:97:9f:aa:ac:
         84:db:03:6e:d0:e3:c3:62:f8:91:48:48:92:55:5b:8c:be:ae:
         2b:e5:6c:a6:28:0f:a2:b7:7b:13:30:6f:01:b4:01:ce:e2:07:
         72:b7:57:37:cc:55:93:85:bf:0a:e8:33:07:3b:52:fe:db:3b:
         6b:83:8f:23
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEXRUM9QZOQzoRRJ14AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDUwOTE3MTI1MFoXDTI2MDgxMjE3MTI1MFowLzEtMCsGA1UEAxMk
NmU4NDk5ZDQtNzEyNi00NTliLWI2Y2MtNGNhMmY1NDJmMzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHMr7tHsThEbV/vwexkfonjtL/QjVXRDtXqN
skuiKaDgRy1XSubSrMZIas/9ebbJS5zSPbOVmdQ+1tBPVACd3/pV5qq+OPap9LuA
qM2OjDKt5H8pjBPTbB5r8BdU6WckqdZEGWbgXKlXJxrlt2Zd/cSnjEC5bDwucvW1
g33zuhPA0psCKleWM/AvaQBBt0Xebh2fA2RUOKefCs3eSbQiryqbTQaZchpfgUNR
YLygVO4+g9rioBAMFR58yBveSbBmo6/h29hCEBWhoguMzisM0pZFeIewQgqet2I8
lwu76imrJyd/PHqlDLT3zJrHnKAkOFekllPz502ULioM9JTBRwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFGnh+CymiQH3QdpWt+egPyNg8NpUMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82
ZTg0OTlkNC03MTI2LTQ1OWItYjZjYy00Y2EyZjU0MmYzMGMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzZlODQ5OWQ0LTcxMjYtNDU5Yi1i
NmNjLTRjYTJmNTQyZjMwYy82ZTg0OTlkNC03MTI2LTQ1OWItYjZjYy00Y2EyZjU0
MmYzMGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAlQwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
DjMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAGpDsts/MWQUy2FxZReG1ECp3m+KkCyz3rmQ/CGtC/m9grJmU
Kgbm7rm3VRW8DTdkoMMMJBW4FafSYqFbzydXkr6JgmMszEJFpoWT9Cgkrm84ZJOK
/KmyBMsEJTAkGEnU+2FvpnozqO/IFTVzLJBd3YktYvPr7ZhmUG51rx5OvzS7/Tv5
k5D/toH/AM51SHZZvZrMw525xdJzlr/3CFBVihdFOjBChdZMykv0yUm5vAVDy7+Q
PFdIwafebu6gNFgcLpSXn6qshNsDbtDjw2L4kUhIklVbjL6uK+VspigPord7EzBv
AbQBzuIHcrdXN8xVk4W/CugzBztS/ts7a4OPIw==
-----END CERTIFICATE-----