Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
File:                     8ea241f2-3e20-4202-98ef-4d92b45559ea.cer (raw, json)
Hash identifier:          EHVX3LdFqHAd20lO1W2it37k8qhrYKzViY7fDPe6hCs=
Subject key identifier:   ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285846792E78C384F078F020791D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 08 Jul 2024 20:19:27 +0000
Certificate not after:    Sun 11 Oct 2026 20:19:27 +0000
Subordinate resources:    AS: 33469
                          IP: 204.16.216.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:79:2e:78:c3:84:f0:78:f0:20:79:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jul  8 20:19:27 2024 GMT
            Not After : Oct 11 20:19:27 2026 GMT
        Subject: CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:a9:70:6d:16:27:ed:4f:45:e2:67:fd:10:
                    46:98:11:12:cf:3d:a4:05:f2:8f:be:5a:62:e8:16:
                    0b:69:ab:16:e9:e8:68:a4:9c:e4:6e:c1:71:df:dd:
                    3a:d5:8a:79:90:1a:7f:1b:e3:9f:73:0f:0f:7c:3d:
                    e5:fa:77:50:f0:58:03:9e:cc:35:89:88:78:4d:41:
                    c0:56:80:00:14:f6:b5:07:41:6c:b5:bd:cc:59:b9:
                    4b:04:a5:7c:02:8a:13:11:1a:07:69:a6:d5:03:ff:
                    e6:f4:52:06:a1:20:7f:0a:c6:16:da:8c:c4:3f:d2:
                    74:6a:75:2d:f5:ba:05:eb:98:84:b2:ef:60:15:80:
                    1f:cb:a3:b9:08:f8:f8:d3:15:c1:93:5b:3d:7b:b6:
                    da:d4:4f:a9:37:0b:c7:5d:e7:59:f2:5d:3d:57:ae:
                    51:92:fc:68:9f:83:49:bf:41:70:12:dc:92:c9:e5:
                    a2:64:4f:59:4b:95:5b:0f:06:7c:09:6a:d4:99:71:
                    df:e5:54:c2:6e:58:ed:da:d5:19:eb:14:8c:26:35:
                    d4:50:ef:ac:55:1e:8e:ec:89:66:09:8e:61:9c:9c:
                    6a:6a:60:92:81:5e:eb:e9:4b:79:2f:e1:1c:65:b9:
                    5d:42:ae:6b:88:5d:b1:1c:2d:d3:d3:bf:47:c0:aa:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.216.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33469

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c7:e6:f0:9f:3f:51:39:6a:b4:6e:d3:5a:a1:9e:5b:06:cc:
         59:8c:9a:02:be:34:2c:a2:61:6a:94:2f:23:7c:22:b1:87:f2:
         ec:91:30:7e:26:d0:6f:71:5a:14:28:da:f0:80:f8:b3:2e:a8:
         65:94:e2:91:db:9b:ef:12:0d:1a:84:41:12:ff:16:ba:66:80:
         c7:01:36:65:4b:03:b1:3d:ba:a1:30:1c:3a:33:4d:1b:32:6a:
         c1:99:35:ea:2e:0f:26:4c:79:06:48:9b:16:dc:a8:6c:67:2d:
         5c:50:fc:fe:f0:2f:8e:ac:ea:c8:7f:db:2e:42:22:1d:a4:7f:
         94:1a:16:04:c4:d4:34:60:2b:71:ec:af:71:34:40:18:0d:61:
         c4:0b:7e:f3:e4:c5:d3:86:3e:4f:a2:d6:4e:a6:7c:ed:31:96:
         c9:9d:04:f1:62:3d:b9:e1:c0:2b:1e:ae:a8:88:22:ec:be:64:
         5f:c8:6a:f6:50:33:0e:fa:32:f3:8b:3b:c4:d7:b0:9c:cf:7e:
         00:64:61:33:8c:ce:7e:9b:30:79:b6:f9:6e:1f:25:8c:28:e2:
         5e:c8:05:12:b4:49:80:01:20:45:19:2d:2d:2f:26:d2:7b:41:
         9a:3a:6b:50:d4:b1:38:4d:91:5b:a4:9f:21:25:95:85:c4:41:
         dd:34:ff:48
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEZ5LnjDhPB48CB5HQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDcwODIwMTkyN1oXDTI2MTAxMTIwMTkyN1owLzEtMCsGA1UEAxMk
OGVhMjQxZjItM2UyMC00MjAyLTk4ZWYtNGQ5MmI0NTU1OWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCWpcG0WJ+1PReJn/RBGmBESzz2kBfKPvlpi
6BYLaasW6ehopJzkbsFx39061Yp5kBp/G+Ofcw8PfD3l+ndQ8FgDnsw1iYh4TUHA
VoAAFPa1B0Fstb3MWblLBKV8AooTERoHaabVA//m9FIGoSB/CsYW2ozEP9J0anUt
9boF65iEsu9gFYAfy6O5CPj40xXBk1s9e7ba1E+pNwvHXedZ8l09V65Rkvxon4NJ
v0FwEtySyeWiZE9ZS5VbDwZ8CWrUmXHf5VTCbljt2tUZ6xSMJjXUUO+sVR6O7Ilm
CY5hnJxqamCSgV7r6Ut5L+EcZbldQq5riF2xHC3T079HwKpHjwIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFO1rFPlTXfK1NUrMjBaVJeY8tgVqMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84
ZWEyNDFmMi0zZTIwLTQyMDItOThlZi00ZDkyYjQ1NTU5ZWEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzhlYTI0MWYyLTNlMjAtNDIwMi05
OGVmLTRkOTJiNDU1NTllYS84ZWEyNDFmMi0zZTIwLTQyMDItOThlZi00ZDkyYjQ1
NTU5ZWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPMENgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
AIK9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFHH5vCfP1E5arRu01qhnlsGzFmMmgK+NCyiYWqULyN8IrGH
8uyRMH4m0G9xWhQo2vCA+LMuqGWU4pHbm+8SDRqEQRL/FrpmgMcBNmVLA7E9uqEw
HDozTRsyasGZNeouDyZMeQZImxbcqGxnLVxQ/P7wL46s6sh/2y5CIh2kf5QaFgTE
1DRgK3Hsr3E0QBgNYcQLfvPkxdOGPk+i1k6mfO0xlsmdBPFiPbnhwCserqiIIuy+
ZF/IavZQMw76MvOLO8TXsJzPfgBkYTOMzn6bMHm2+W4fJYwo4l7IBRK0SYABIEUZ
LS0vJtJ7QZo6a1DUsThNkVuknyEllYXEQd00/0g=
-----END CERTIFICATE-----