Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140.cer
File:                     410cdbf9-164e-4f04-8897-d002dc917140.cer (raw, json)
Hash identifier:          Qp+OgQIblRMz7XIrikK54Wz0fNErF5j6e3UvTBQUIY4=
Subject key identifier:   1F:8B:3B:B4:B4:B3:70:0F:49:EF:07:63:08:D1:A2:AF:C5:B8:DE:94
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F4328584726C8E4A0334461B49CBE8360
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 09 Sep 2024 00:45:26 +0000
Certificate not after:    Sun 13 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 393717
                          IP: 192.69.65.0/24
                          IP: 2620:9c:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:26:c8:e4:a0:33:44:61:b4:9c:be:83:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep  9 00:45:26 2024 GMT
            Not After : Dec 13 01:45:26 2026 GMT
        Subject: CN=410cdbf9-164e-4f04-8897-d002dc917140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2f:fb:5f:5b:e7:31:b6:36:5b:e0:5f:92:36:
                    99:0e:53:1c:72:a4:bd:3d:cf:30:41:26:fd:c4:08:
                    d7:16:23:68:08:62:7f:7d:e4:25:14:c5:dc:1f:f7:
                    91:0f:df:28:27:de:a4:c0:19:ea:fe:f7:47:a0:5f:
                    ee:a0:98:74:a6:a3:14:9a:7e:a5:83:a3:fe:05:d1:
                    e7:62:59:2b:83:fc:45:24:d2:1f:fe:3d:d9:93:0c:
                    5b:6f:13:d9:c8:03:20:77:2d:50:56:12:17:8c:82:
                    4c:47:50:da:08:6e:90:ea:77:d0:5d:dd:18:a9:bc:
                    05:af:d8:08:06:c8:fe:b4:c4:d4:c2:0d:cc:bc:5f:
                    df:f5:47:63:75:ac:74:c4:9b:78:c2:a5:25:99:69:
                    a5:4a:c8:60:78:7c:40:0a:c0:02:d1:7d:fd:ce:fc:
                    51:fb:a7:ba:56:e2:dd:c8:66:6a:99:0f:c4:7d:06:
                    6f:53:ad:66:c0:5e:8c:6e:a9:41:b1:7c:9f:6a:a4:
                    67:52:c2:16:3c:ce:b0:8f:a7:7c:0b:ce:ab:df:27:
                    3e:24:d0:a8:c3:b7:07:bd:0f:c9:8f:18:16:54:98:
                    d8:f7:1e:b3:a5:1c:d9:97:b2:c3:eb:b0:b4:80:9d:
                    07:76:79:7c:49:a8:4b:54:16:5b:ae:bf:96:d7:96:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8B:3B:B4:B4:B3:70:0F:49:EF:07:63:08:D1:A2:AF:C5:B8:DE:94
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/410cdbf9-164e-4f04-8897-d002dc917140/410cdbf9-164e-4f04-8897-d002dc917140.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.65.0/24
                IPv6:
                  2620:9c:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393717

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ed:88:1c:21:23:dd:1d:43:40:cc:be:d8:05:cf:52:d4:b3:
         eb:a2:ea:ef:70:e5:d3:e8:19:88:44:ca:31:9c:3d:1a:d2:3f:
         72:0c:ef:23:14:05:25:d5:7d:38:8f:8d:59:58:3e:83:6a:84:
         6a:a7:65:ef:ad:59:ee:09:e0:b5:15:c6:1a:a6:ca:59:93:d1:
         72:72:b8:48:43:b8:d3:ac:32:f3:d0:be:34:f7:b0:f9:96:c9:
         65:ab:59:f1:20:14:57:cb:47:b6:50:2c:8b:d5:f2:fb:27:41:
         93:dd:04:2f:4d:7a:92:d2:94:be:96:cd:01:54:cc:d1:63:42:
         13:c6:df:e5:bc:5a:78:ac:28:d8:58:c8:bc:f0:17:16:e6:d6:
         7e:95:e9:f8:e4:52:26:02:3f:71:34:ea:00:1a:5c:83:b1:7c:
         63:6f:54:da:97:8e:d9:49:29:35:71:63:c5:69:bf:04:2e:1c:
         11:80:38:7b:05:09:82:cc:a9:1f:13:11:88:0d:e5:c0:1d:27:
         36:6e:1f:e1:a7:d6:68:c6:19:f3:38:d6:8e:24:c3:d7:2e:c7:
         b3:cd:74:7e:dc:63:31:ca:2d:57:20:a8:ff:a6:a2:e1:43:73:
         6c:a5:30:18:2c:b6:a8:1a:d4:10:71:5c:ef:c1:ee:b2:a3:1d:
         23:86:8a:f9
-----BEGIN CERTIFICATE-----
MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEcmyOSgM0RhtJy+g2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI0MDkwOTAwNDUyNloXDTI2MTIxMzAxNDUyNlowLzEtMCsGA1UEAxMk
NDEwY2RiZjktMTY0ZS00ZjA0LTg4OTctZDAwMmRjOTE3MTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS/7X1vnMbY2W+BfkjaZDlMccqS9Pc8wQSb9
xAjXFiNoCGJ/feQlFMXcH/eRD98oJ96kwBnq/vdHoF/uoJh0pqMUmn6lg6P+BdHn
Ylkrg/xFJNIf/j3ZkwxbbxPZyAMgdy1QVhIXjIJMR1DaCG6Q6nfQXd0YqbwFr9gI
Bsj+tMTUwg3MvF/f9Udjdax0xJt4wqUlmWmlSshgeHxACsAC0X39zvxR+6e6VuLd
yGZqmQ/EfQZvU61mwF6MbqlBsXyfaqRnUsIWPM6wj6d8C86r3yc+JNCow7cHvQ/J
jxgWVJjY9x6zpRzZl7LD67C0gJ0Hdnl8SahLVBZbrr+W15ZRywIDAQABo4IELDCC
BCgwHQYDVR0OBBYEFB+LO7S0s3APSe8HYwjRoq/FuN6UMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80
MTBjZGJmOS0xNjRlLTRmMDQtODg5Ny1kMDAyZGM5MTcxNDAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQxMGNkYmY5LTE2NGUtNGYwNC04
ODk3LWQwMDJkYzkxNzE0MC80MTBjZGJmOS0xNjRlLTRmMDQtODg5Ny1kMDAyZGM5
MTcxNDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBADARUEwDwQCAAIwCQMHACYgAJzAADAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMGAfUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPO2IHCEj3R1DQMy+2AXPUtSz
66Lq73Dl0+gZiETKMZw9GtI/cgzvIxQFJdV9OI+NWVg+g2qEaqdl761Z7gngtRXG
GqbKWZPRcnK4SEO406wy89C+NPew+ZbJZatZ8SAUV8tHtlAsi9Xy+ydBk90EL016
ktKUvpbNAVTM0WNCE8bf5bxaeKwo2FjIvPAXFubWfpXp+ORSJgI/cTTqABpcg7F8
Y29U2peO2UkpNXFjxWm/BC4cEYA4ewUJgsypHxMRiA3lwB0nNm4f4afWaMYZ8zjW
jiTD1y7Hs810ftxjMcotVyCo/6ai4UNzbKUwGCy2qBrUEHFc78HusqMdI4aK+Q==
-----END CERTIFICATE-----