Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736.cer
File:                     ab48051f-b089-4872-acc6-a73a442e9736.cer (raw, json)
Hash identifier:          cDtvEaU2T7SY+fg2Zyqymd+H5QdwcUZvKd9t6zktrcs=
Subject key identifier:   2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285845A49B23086EB6E1B954090A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 23 Apr 2024 16:51:14 +0000
Certificate not after:    Thu 23 Jul 2026 18:40:43 +0000
Subordinate resources:    AS: 401008
                          IP: 23.176.72.0/24
                          IP: 2607:ad40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:9b:23:08:6e:b6:e1:b9:54:09:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Apr 23 16:51:14 2024 GMT
            Not After : Jul 23 18:40:43 2026 GMT
        Subject: CN=ab48051f-b089-4872-acc6-a73a442e9736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:da:e2:7f:4b:5b:80:e8:2e:1d:2d:5a:e0:31:
                    e6:40:4d:26:0a:bf:3b:99:9b:29:99:46:5d:c1:32:
                    56:ca:26:c2:df:8e:5b:23:1a:96:11:87:98:73:4b:
                    3d:06:4e:e2:ef:e0:09:fa:f1:53:66:6c:53:bd:81:
                    e3:14:1c:85:9f:b0:8b:4d:27:a7:61:5d:e7:09:b9:
                    5e:1d:a3:77:01:95:c7:4d:92:6e:e5:93:95:75:6d:
                    9c:d5:ab:42:1d:70:38:95:53:c0:2f:09:f7:cb:6b:
                    57:47:3b:c8:76:37:96:eb:15:ac:17:74:27:37:13:
                    e7:e6:8f:4c:72:d8:e9:57:6a:77:a5:99:66:7d:9b:
                    73:fd:6a:d3:56:a8:75:9a:82:b4:cd:79:a6:61:25:
                    5e:eb:f0:bf:67:75:44:46:27:0c:a9:48:31:11:41:
                    53:9b:0b:49:c5:90:91:7a:3f:09:1a:63:7d:c5:e8:
                    46:f0:20:94:1c:20:5c:7e:5d:f2:dc:c9:ac:fa:f3:
                    57:21:b7:f6:be:45:16:ab:7d:ae:b7:4a:65:60:52:
                    aa:ee:36:3b:58:01:ed:88:27:ae:a5:c7:7a:ac:50:
                    e0:a8:48:99:0b:3d:e4:57:7a:00:cf:da:e0:bc:51:
                    b3:f7:07:0f:18:1c:42:15:69:76:1a:22:aa:d6:62:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:54:20:F2:AF:8F:AF:36:32:D0:F6:01:84:AB:37:C8:43:29:28:26
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ab48051f-b089-4872-acc6-a73a442e9736/ab48051f-b089-4872-acc6-a73a442e9736.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.72.0/24
                IPv6:
                  2607:ad40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  401008

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:72:93:9b:2f:47:e9:1f:ff:ff:28:20:68:96:e3:8f:da:0f:
         92:8a:53:33:ec:1a:31:21:29:2a:89:26:d3:91:48:bf:dc:08:
         ba:d5:00:c5:28:10:33:dd:68:c5:b7:94:ff:13:bb:1c:d0:46:
         8e:22:d7:da:ed:83:0d:87:1d:3e:f9:e7:29:b3:c6:b3:b8:16:
         6d:86:a2:93:a5:55:fa:fd:35:1e:19:98:dd:9a:f3:59:f1:82:
         bf:b0:04:8f:3c:64:dc:e9:a9:d5:72:62:f1:a6:00:8b:8f:ce:
         42:5c:37:da:7c:47:c9:aa:4d:9b:93:b3:31:06:d9:10:98:d0:
         d9:b0:e1:47:e6:af:e6:62:16:4d:73:ba:c6:7c:97:59:53:0d:
         b3:21:a0:9f:e0:1c:43:84:bf:67:9e:e4:56:d9:3b:c5:4d:bf:
         07:1a:31:79:29:62:85:a1:5e:85:83:0d:82:01:36:56:6e:c7:
         03:c7:be:87:b7:0f:12:b7:c4:f6:41:50:48:b2:c1:42:5c:ca:
         9e:08:f3:de:7e:7b:1c:1b:b9:ed:41:26:0b:2d:b8:eb:c4:13:
         53:0f:d7:69:1c:84:ed:2d:be:36:51:67:1d:ca:74:f1:39:68:
         74:0f:f7:04:50:8b:49:51:4a:a0:db:a6:a1:53:9e:ba:f2:f2:
         42:bf:2d:91
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEWkmyMIbrbhuVQJCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3
YzI1MB4XDTI0MDQyMzE2NTExNFoXDTI2MDcyMzE4NDA0M1owLzEtMCsGA1UEAxMk
YWI0ODA1MWYtYjA4OS00ODcyLWFjYzYtYTczYTQ0MmU5NzM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19rif0tbgOguHS1a4DHmQE0mCr87mZspmUZd
wTJWyibC345bIxqWEYeYc0s9Bk7i7+AJ+vFTZmxTvYHjFByFn7CLTSenYV3nCble
HaN3AZXHTZJu5ZOVdW2c1atCHXA4lVPALwn3y2tXRzvIdjeW6xWsF3QnNxPn5o9M
ctjpV2p3pZlmfZtz/WrTVqh1moK0zXmmYSVe6/C/Z3VERicMqUgxEUFTmwtJxZCR
ej8JGmN9xehG8CCUHCBcfl3y3Mms+vNXIbf2vkUWq32ut0plYFKq7jY7WAHtiCeu
pcd6rFDgqEiZCz3kV3oAz9rgvFGz9wcPGBxCFWl2GiKq1mKrbQIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFCtUIPKvj682MtD2AYSrN8hDKSgmMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9h
YjQ4MDUxZi1iMDg5LTQ4NzItYWNjNi1hNzNhNDQyZTk3MzYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt
YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1L2FiNDgwNTFmLWIwODktNDg3Mi1h
Y2M2LWE3M2E0NDJlOTczNi9hYjQ4MDUxZi1iMDg5LTQ4NzItYWNjNi1hNzNhNDQy
ZTk3MzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw
NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1
MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/
9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl
YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAAXsEgwDQQCAAIwBwMFACYHrUAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBh5wMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACByk5svR+kf//8oIGiW44/aD5KK
UzPsGjEhKSqJJtORSL/cCLrVAMUoEDPdaMW3lP8TuxzQRo4i19rtgw2HHT755ymz
xrO4Fm2GopOlVfr9NR4ZmN2a81nxgr+wBI88ZNzpqdVyYvGmAIuPzkJcN9p8R8mq
TZuTszEG2RCY0Nmw4Ufmr+ZiFk1zusZ8l1lTDbMhoJ/gHEOEv2ee5FbZO8VNvwca
MXkpYoWhXoWDDYIBNlZuxwPHvoe3DxK3xPZBUEiywUJcyp4I895+exwbue1BJgst
uOvEE1MP12kchO0tvjZRZx3KdPE5aHQP9wRQi0lRSqDbpqFTnrry8kK/LZE=
-----END CERTIFICATE-----