Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d782618-2e83-4896-8b86-d8daf08e41bc.cer
File:                     7d782618-2e83-4896-8b86-d8daf08e41bc.cer (raw, json)
Hash identifier:          OyUkxT++Qqwm+K//bAFE19y29hO7vCMLZRvYmILwyaU=
Subject key identifier:   36:CC:A9:C9:8D:22:E2:B6:A5:90:9B:81:35:68:23:CE:53:56:AF:03
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285842CA1733D437B7126CDC24D496
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d782618-2e83-4896-8b86-d8daf08e41bc/7d782618-2e83-4896-8b86-d8daf08e41bc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d782618-2e83-4896-8b86-d8daf08e41bc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 06 Aug 2023 00:45:17 +0000
Certificate not after:    Sat 08 Nov 2025 01:45:17 +0000
Subordinate resources:    IP: 64.190.237.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ca:17:33:d4:37:b7:12:6c:dc:24:d4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug  6 00:45:17 2023 GMT
            Not After : Nov  8 01:45:17 2025 GMT
        Subject: CN=7d782618-2e83-4896-8b86-d8daf08e41bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:58:f4:54:ad:be:36:4d:ee:15:52:5e:52:
                    97:bc:f3:b9:e4:e2:b5:3c:22:51:23:4c:92:b3:6d:
                    9f:d1:40:11:9d:10:5c:9b:b9:2e:d5:8a:be:f8:bb:
                    48:37:41:42:0d:83:86:b7:91:e7:4e:b2:8c:ec:06:
                    fc:ed:30:68:c5:8e:b7:51:a5:03:1a:f9:21:75:08:
                    ec:8d:ea:fc:4d:54:3f:b8:bf:c8:12:93:01:59:3c:
                    98:29:b2:72:45:9e:75:c2:cc:9a:f5:98:94:92:24:
                    1c:29:ad:bc:28:32:c3:01:ec:31:6d:b2:c5:f8:01:
                    ba:81:5c:d7:c5:64:25:f1:e5:c2:f5:6f:10:65:46:
                    af:f3:31:fd:13:b6:fa:7a:cf:cb:56:c8:30:5e:d2:
                    52:2f:c2:84:c8:44:5b:fe:b2:41:2d:cc:d3:04:6d:
                    39:14:31:64:51:62:c7:c6:93:50:a7:e2:5e:d3:8b:
                    f0:a1:ee:6c:a6:a5:fc:af:f7:db:05:7a:b0:c0:20:
                    22:76:99:a7:04:d8:33:d1:fc:6a:82:1b:38:2b:6d:
                    f4:25:80:f5:55:f1:cb:44:19:e3:e3:50:67:d2:e7:
                    c3:f7:84:d0:26:40:f9:7b:2a:17:51:a3:f0:30:c8:
                    57:fe:0b:4d:58:12:78:5e:7e:6d:cb:4e:ea:b0:cc:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CC:A9:C9:8D:22:E2:B6:A5:90:9B:81:35:68:23:CE:53:56:AF:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d782618-2e83-4896-8b86-d8daf08e41bc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7d782618-2e83-4896-8b86-d8daf08e41bc/7d782618-2e83-4896-8b86-d8daf08e41bc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:73:78:dd:1f:3a:dc:32:7b:b8:9f:2e:80:84:f4:f8:71:
         b2:51:6f:31:1c:2c:00:b9:6f:b1:c2:83:c4:f4:d9:47:0d:cb:
         65:4d:d1:4f:93:3e:37:99:8b:39:f6:bc:c7:a9:cc:f7:12:ab:
         dc:1f:4a:09:3b:fd:91:81:5c:9d:09:25:47:23:bf:f7:33:6b:
         6e:f3:47:55:a1:4c:eb:ac:83:b9:29:37:12:e0:51:a6:1d:83:
         08:e1:0c:fc:66:61:31:12:35:f0:38:68:dc:1b:3c:21:97:fe:
         be:59:f6:24:a9:d8:db:9f:51:da:39:fd:f7:3f:91:86:a2:06:
         17:fa:68:cd:cd:76:84:5a:72:6f:2b:6b:5e:20:3d:f9:69:1c:
         4d:85:af:40:c7:af:b0:72:e1:14:a7:4a:37:3d:5d:00:62:91:
         77:d5:f9:bb:27:73:95:4b:8b:1c:38:52:dd:5d:ca:b6:bd:24:
         cb:b0:1a:a7:af:29:e7:86:6f:d7:15:4f:70:a9:62:71:55:bc:
         a1:f7:b5:36:1c:69:cd:a1:d1:c5:6c:0a:fe:9e:e9:0a:5a:ea:
         f9:5a:69:49:f3:15:21:ae:30:3e:9d:c5:bc:5f:db:21:9f:21:
         97:ac:98:3d:f3:2c:64:ce:40:46:9f:47:de:07:1a:ad:64:8d:
         5e:3e:69:b6
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWELKFzPUN7cSbNwk1JYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMDgwNjAwNDUxN1oXDTI1MTEwODAxNDUxN1owLzEtMCsGA1UEAxMk
N2Q3ODI2MTgtMmU4My00ODk2LThiODYtZDhkYWYwOGU0MWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyRY9FStvjZN7hVSXlKXvPO55OK1PCJRI0yS
s22f0UARnRBcm7ku1Yq++LtIN0FCDYOGt5HnTrKM7Ab87TBoxY63UaUDGvkhdQjs
jer8TVQ/uL/IEpMBWTyYKbJyRZ51wsya9ZiUkiQcKa28KDLDAewxbbLF+AG6gVzX
xWQl8eXC9W8QZUav8zH9E7b6es/LVsgwXtJSL8KEyERb/rJBLczTBG05FDFkUWLH
xpNQp+Je04vwoe5spqX8r/fbBXqwwCAidpmnBNgz0fxqghs4K230JYD1VfHLRBnj
41Bn0ufD94TQJkD5eyoXUaPwMMhX/gtNWBJ4Xn5ty07qsMys9wIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFDbMqcmNIuK2pZCbgTVoI85TVq8DMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83
ZDc4MjYxOC0yZTgzLTQ4OTYtOGI4Ni1kOGRhZjA4ZTQxYmMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzdkNzgyNjE4LTJlODMtNDg5Ni04
Yjg2LWQ4ZGFmMDhlNDFiYy83ZDc4MjYxOC0yZTgzLTQ4OTYtOGI4Ni1kOGRhZjA4
ZTQxYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBABAvu0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAICxzeN0fOtwye7ifLoCE
9PhxslFvMRwsALlvscKDxPTZRw3LZU3RT5M+N5mLOfa8x6nM9xKr3B9KCTv9kYFc
nQklRyO/9zNrbvNHVaFM66yDuSk3EuBRph2DCOEM/GZhMRI18Dho3Bs8IZf+vln2
JKnY259R2jn99z+RhqIGF/pozc12hFpybytrXiA9+WkcTYWvQMevsHLhFKdKNz1d
AGKRd9X5uydzlUuLHDhS3V3Ktr0ky7Aap68p54Zv1xVPcKlicVW8ofe1NhxpzaHR
xWwK/p7pClrq+VppSfMVIa4wPp3FvF/bIZ8hl6yYPfMsZM5ARp9H3gcarWSNXj5p
tg==
-----END CERTIFICATE-----