Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90abd15e-f8dc-4091-a86f-6174cade7b0f.cer
File:                     90abd15e-f8dc-4091-a86f-6174cade7b0f.cer (raw, json)
Hash identifier:          l3O6AUK3HCD6GWmIz9bCYG3yLDQOpmEahS8FFlLutR8=
Subject key identifier:   4B:19:1F:9C:D8:C4:6A:92:75:7D:A3:3F:5B:33:0B:98:AA:9C:B0:1C
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F4328584654D507CF638D3389B5E4A980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90abd15e-f8dc-4091-a86f-6174cade7b0f/90abd15e-f8dc-4091-a86f-6174cade7b0f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90abd15e-f8dc-4091-a86f-6174cade7b0f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 25 Jun 2024 19:50:09 +0000
Certificate not after:    Mon 28 Sep 2026 19:50:09 +0000
Subordinate resources:    AS: 401197
                          IP: 2602:f897::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:54:d5:07:cf:63:8d:33:89:b5:e4:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Jun 25 19:50:09 2024 GMT
            Not After : Sep 28 19:50:09 2026 GMT
        Subject: CN=90abd15e-f8dc-4091-a86f-6174cade7b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:b4:00:16:c8:c4:17:f6:56:37:89:6c:1f:
                    88:2e:a1:f3:15:6b:4c:61:07:ee:6b:6f:46:5c:0f:
                    3a:a3:29:29:f9:02:8a:74:de:88:a1:0e:08:38:b3:
                    d4:ca:ff:d3:f4:0c:15:48:b3:e0:19:3f:2b:cd:a4:
                    b3:02:a7:16:17:c0:c5:34:2b:a8:b9:42:24:87:f3:
                    a7:c3:bc:33:4b:d5:bc:be:08:77:c5:76:ee:82:43:
                    86:f1:e4:cd:57:5b:59:74:63:79:55:01:4d:a0:10:
                    1d:93:e7:ce:55:13:36:71:30:bf:1b:23:95:3e:d2:
                    42:95:87:12:28:3c:e0:4e:b1:ef:14:f7:5c:2f:88:
                    21:55:a8:e6:73:03:36:59:76:3e:dc:46:79:01:c9:
                    a4:33:6b:ff:72:7e:4a:68:63:17:a2:b6:11:5e:9b:
                    f5:8c:ea:eb:2e:c4:f0:79:e6:81:0e:cc:81:23:4f:
                    d9:45:69:26:4f:47:3a:b0:37:1c:57:24:42:54:16:
                    18:91:c3:f5:51:50:35:1a:57:fe:2e:71:c1:b7:9d:
                    22:59:6c:e6:35:0b:8d:cb:d6:0e:88:b6:b9:70:58:
                    18:05:cb:00:5b:7f:6a:2a:da:e0:69:4b:78:d6:fd:
                    f4:49:cd:f5:d2:f7:fc:aa:a2:af:61:42:c4:fc:d0:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:19:1F:9C:D8:C4:6A:92:75:7D:A3:3F:5B:33:0B:98:AA:9C:B0:1C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90abd15e-f8dc-4091-a86f-6174cade7b0f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/90abd15e-f8dc-4091-a86f-6174cade7b0f/90abd15e-f8dc-4091-a86f-6174cade7b0f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f897::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401197

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3b:4d:1f:8f:cd:d5:75:94:00:15:21:de:6f:10:0d:bb:67:
         97:6d:b4:d2:5e:4a:35:59:2d:af:bd:2c:b8:12:a7:91:5c:9f:
         ac:2a:06:0c:40:74:b6:a8:55:f8:d9:4b:3b:1d:d0:a4:73:24:
         85:d5:66:58:f3:9e:62:4c:b6:82:bc:4d:76:5f:6d:f9:77:e5:
         03:a0:6d:43:92:b8:99:12:0f:82:c4:8c:16:ba:d1:c5:f1:13:
         76:a6:0e:a5:8a:a7:19:f7:77:3a:43:56:a0:c2:b8:5c:b4:c4:
         54:82:d7:14:be:ff:67:80:d8:35:ea:69:e8:b0:00:46:bb:25:
         4b:08:bb:36:cf:36:31:f3:b1:c7:ae:a6:ac:15:74:0f:d7:9e:
         ba:91:1f:df:b8:30:49:51:bf:24:70:27:90:71:4b:07:7c:51:
         72:61:d1:d0:28:3d:0c:c9:39:96:d7:54:89:49:61:f9:03:69:
         28:69:d2:2d:5a:b6:a8:08:6a:fb:c9:3d:80:4d:16:d2:e3:36:
         1b:de:a0:2f:18:1e:61:84:76:63:54:4c:88:7c:00:69:05:4f:
         75:b4:c9:90:a7:25:3d:cd:98:43:cf:4f:a8:8c:e5:1f:b3:88:
         3d:77:f9:63:63:43:1c:e7:57:35:2d:e7:5a:48:4f:b4:6e:8e:
         54:85:4a:08
-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEZU1QfPY40zibXkqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDYyNTE5NTAwOVoXDTI2MDkyODE5NTAwOVowLzEtMCsGA1UEAxMk
OTBhYmQxNWUtZjhkYy00MDkxLWE4NmYtNjE3NGNhZGU3YjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuq0ABbIxBf2VjeJbB+ILqHzFWtMYQfua29G
XA86oykp+QKKdN6IoQ4IOLPUyv/T9AwVSLPgGT8rzaSzAqcWF8DFNCuouUIkh/On
w7wzS9W8vgh3xXbugkOG8eTNV1tZdGN5VQFNoBAdk+fOVRM2cTC/GyOVPtJClYcS
KDzgTrHvFPdcL4ghVajmcwM2WXY+3EZ5AcmkM2v/cn5KaGMXorYRXpv1jOrrLsTw
eeaBDsyBI0/ZRWkmT0c6sDccVyRCVBYYkcP1UVA1Glf+LnHBt50iWWzmNQuNy9YO
iLa5cFgYBcsAW39qKtrgaUt41v30Sc310vf8qqKvYULE/NAufwIDAQABo4IEHTCC
BBkwHQYDVR0OBBYEFEsZH5zYxGqSdX2jP1szC5iqnLAcMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85
MGFiZDE1ZS1mOGRjLTQwOTEtYTg2Zi02MTc0Y2FkZTdiMGYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzkwYWJkMTVlLWY4ZGMtNDA5MS1h
ODZmLTYxNzRjYWRlN2IwZi85MGFiZDE1ZS1mOGRjLTQwOTEtYTg2Zi02MTc0Y2Fk
ZTdiMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAmAviXADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF
AgMGHy0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAADtNH4/N1XWUABUh3m8QDbtnl2200l5KNVktr70suBKn
kVyfrCoGDEB0tqhV+NlLOx3QpHMkhdVmWPOeYky2grxNdl9t+XflA6BtQ5K4mRIP
gsSMFrrRxfETdqYOpYqnGfd3OkNWoMK4XLTEVILXFL7/Z4DYNepp6LAARrslSwi7
Ns82MfOxx66mrBV0D9eeupEf37gwSVG/JHAnkHFLB3xRcmHR0Cg9DMk5ltdUiUlh
+QNpKGnSLVq2qAhq+8k9gE0W0uM2G96gLxgeYYR2Y1RMiHwAaQVPdbTJkKclPc2Y
Q89PqIzlH7OIPXf5Y2NDHOdXNS3nWkhPtG6OVIVKCA==
-----END CERTIFICATE-----