Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
File:                     916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer (raw, json)
Hash identifier:          shgUFp2WKil5Fxae0vbqJ1WoefjbLz/69VjfBFQCYpc=
Subject key identifier:   A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845D97B6DBF287EE0161EAB3980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 12 May 2024 15:25:11 +0000
Certificate not after:    Sat 15 Aug 2026 15:25:11 +0000
Subordinate resources:    AS: 400765
                          IP: 173.249.160.0/22
                          IP: 2602:fb15::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:7b:6d:bf:28:7e:e0:16:1e:ab:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: May 12 15:25:11 2024 GMT
            Not After : Aug 15 15:25:11 2026 GMT
        Subject: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ce:27:4f:b1:5c:93:08:33:ea:b8:af:43:76:
                    bb:bf:f1:fb:86:f8:8c:12:3d:00:44:26:b5:5c:80:
                    a6:80:c2:8b:3f:31:22:08:70:53:df:6e:6b:bb:39:
                    85:06:58:fc:ef:18:ff:b3:45:85:cb:27:08:ad:7c:
                    af:21:8f:47:38:4f:43:ee:b3:17:e0:31:7d:79:de:
                    05:c2:b2:91:94:c3:a9:a1:31:3c:c9:a2:49:8a:72:
                    fc:d8:16:fe:b8:d4:c5:b7:db:a6:7c:41:41:25:6a:
                    b5:78:62:cb:5f:0f:e5:df:c0:92:fb:0e:cd:68:38:
                    eb:8c:61:8c:e2:e5:59:2c:83:e9:9b:96:35:6a:0d:
                    72:2b:60:72:07:03:43:cd:57:ac:c1:15:1a:65:1c:
                    bb:69:45:53:b9:08:e6:6b:d7:ea:51:61:20:85:42:
                    e0:ed:fa:98:78:24:00:41:48:e8:a0:c9:ea:d9:d7:
                    ab:c8:df:da:40:2e:af:1c:05:53:66:05:3e:19:4b:
                    62:64:9a:04:84:2c:c1:5c:23:d2:13:5d:3d:0a:4f:
                    b8:58:af:27:a4:4e:45:c6:e4:7c:c2:cd:01:28:39:
                    58:4c:0f:a3:8d:9d:01:6a:f2:a0:6f:49:df:7b:c3:
                    c8:58:9d:28:a7:66:94:18:68:07:65:44:fa:ed:44:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.160.0/22
                IPv6:
                  2602:fb15::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400765

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:7d:1c:f8:4e:21:87:4a:63:48:15:7e:bf:28:41:33:9a:83:
         97:48:c8:74:e2:34:81:a2:9d:fa:f2:8e:37:b7:48:fb:e5:91:
         a1:97:cf:33:ee:62:93:ba:d0:cf:93:6e:af:c1:1c:81:f2:f7:
         bc:21:79:03:20:c8:25:ff:87:39:26:32:e2:d0:e0:e6:92:b4:
         62:39:d7:61:c8:5e:69:a8:77:2a:6f:8f:44:7e:55:74:02:de:
         0f:62:57:bc:df:a3:1f:a8:74:0d:e7:73:a8:f7:c7:ff:c8:3d:
         0f:b7:e6:79:8f:f6:f7:88:67:1d:23:f5:6d:c8:c4:62:0a:ca:
         8c:e1:f6:5b:69:d9:6b:89:79:69:94:5f:52:a4:81:1c:c1:71:
         8e:04:71:f8:1b:dc:75:39:0e:c0:b8:f0:e4:91:a6:3d:65:31:
         1f:52:61:c4:43:74:10:ba:b6:dd:05:14:07:c2:57:2a:45:d0:
         ab:b5:5a:56:1a:78:c9:b9:b7:fa:13:7a:aa:ae:1a:72:98:a4:
         02:a5:2e:a7:83:6f:82:c2:02:99:63:06:85:aa:ed:b0:b8:e5:
         4e:a0:5b:70:36:14:56:e9:b1:f1:b0:c0:f3:67:d3:15:6c:02:
         8d:67:03:9c:f4:ce:4a:f1:a0:c3:9d:df:54:7b:8b:a6:69:c9:
         43:39:ed:4b
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEXZe22/KH7gFh6rOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDUxMjE1MjUxMVoXDTI2MDgxNTE1MjUxMVowLzEtMCsGA1UEAxMk
OTE2YjlhZmItOWU0Ni00YWIwLTgwMjktN2Y0ZDExNjhiYjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM4nT7Fckwgz6rivQ3a7v/H7hviMEj0ARCa1
XICmgMKLPzEiCHBT325ruzmFBlj87xj/s0WFyycIrXyvIY9HOE9D7rMX4DF9ed4F
wrKRlMOpoTE8yaJJinL82Bb+uNTFt9umfEFBJWq1eGLLXw/l38CS+w7NaDjrjGGM
4uVZLIPpm5Y1ag1yK2ByBwNDzVeswRUaZRy7aUVTuQjma9fqUWEghULg7fqYeCQA
QUjooMnq2deryN/aQC6vHAVTZgU+GUtiZJoEhCzBXCPSE109Ck+4WK8npE5FxuR8
ws0BKDlYTA+jjZ0BavKgb0nfe8PIWJ0op2aUGGgHZUT67UQbgwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFKNv7H6NtpnlcFEHAJVohi1qEC3KMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85
MTZiOWFmYi05ZTQ2LTRhYjAtODAyOS03ZjRkMTE2OGJiMzcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzkxNmI5YWZiLTllNDYtNGFiMC04
MDI5LTdmNGQxMTY4YmIzNy85MTZiOWFmYi05ZTQ2LTRhYjAtODAyOS03ZjRkMTE2
OGJiMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAKt+aAwDgQCAAIwCAMGBCYC+xUAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYdfTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALfRz4TiGHSmNIFX6/KEEzmoOX
SMh04jSBop368o43t0j75ZGhl88z7mKTutDPk26vwRyB8ve8IXkDIMgl/4c5JjLi
0ODmkrRiOddhyF5pqHcqb49EflV0At4PYle836MfqHQN53Oo98f/yD0Pt+Z5j/b3
iGcdI/VtyMRiCsqM4fZbadlriXlplF9SpIEcwXGOBHH4G9x1OQ7AuPDkkaY9ZTEf
UmHEQ3QQurbdBRQHwlcqRdCrtVpWGnjJubf6E3qqrhpymKQCpS6ng2+CwgKZYwaF
qu2wuOVOoFtwNhRW6bHxsMDzZ9MVbAKNZwOc9M5K8aDDnd9Ue4umaclDOe1L
-----END CERTIFICATE-----