Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
File:                     8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer (raw, json)
Hash identifier:          NusVzyzaJxk9JFw58yzIeK2fY+oRmIxgduy73yPyWi8=
Subject key identifier:   0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858473FE90D6BB4EF189699D7C040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 18 Sep 2024 00:45:26 +0000
Certificate not after:    Tue 22 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 7354
                          AS: 399045
                          IP: 64.112.72.0/22
                          IP: 68.69.184.0/22
                          IP: 104.167.220.0/22
                          IP: 199.204.96.0/22
                          IP: 2606:d640::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:e9:0d:6b:b4:ef:18:96:99:d7:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 18 00:45:26 2024 GMT
            Not After : Dec 22 01:45:26 2026 GMT
        Subject: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:d1:a3:b0:87:2e:33:91:78:06:fa:8d:9d:
                    ca:8f:32:61:af:b3:02:11:03:40:c0:1c:65:e1:08:
                    fd:15:e0:81:1b:b0:ec:51:39:87:66:52:26:77:6f:
                    12:cd:0d:f7:21:14:7c:3e:17:0d:d5:8e:0d:2d:be:
                    7e:f6:69:8a:81:8a:3c:4c:4a:fc:3c:f2:76:95:f1:
                    43:0a:d6:26:10:6f:a0:19:f4:47:92:44:3f:3e:0e:
                    6d:ec:7b:ab:15:25:ca:57:be:25:64:fe:22:dd:93:
                    c7:93:46:66:d8:05:7c:19:54:61:57:34:e3:19:71:
                    e8:9d:3a:12:cc:1e:e5:36:e2:47:24:2c:13:da:c6:
                    17:93:56:79:69:1e:04:2f:c7:c8:1f:25:01:77:bd:
                    aa:52:09:3f:39:4c:ba:7c:e3:fc:21:53:83:c2:13:
                    d5:35:5e:cd:84:b9:65:8d:8a:58:09:e7:78:50:59:
                    aa:8b:98:ad:99:4a:dd:9f:74:56:da:2f:73:90:da:
                    8b:c4:c7:4c:c3:dc:af:d4:28:1c:dd:4b:ac:a9:2b:
                    a6:72:4e:94:9e:bc:2a:fa:c1:f4:11:2b:6a:47:09:
                    98:4e:28:18:6b:d4:49:1e:7d:08:56:7f:a1:c7:0c:
                    07:3f:96:b1:24:84:4f:43:56:27:d0:55:f2:f3:c5:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.72.0/22
                  68.69.184.0/22
                  104.167.220.0/22
                  199.204.96.0/22
                IPv6:
                  2606:d640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7354
                  399045

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:40:bf:8d:9e:ad:8e:1d:61:92:17:25:6e:c1:8c:4a:5e:13:
         90:fa:d3:99:96:76:18:90:f3:cb:11:9e:50:e4:3c:af:0a:d5:
         b9:49:55:96:7d:f9:0b:73:1e:92:1b:00:4d:6a:02:55:e7:2d:
         fa:a7:24:99:0e:27:02:09:76:81:2b:0d:81:16:25:a1:52:79:
         15:19:8b:d1:d2:53:4c:51:a3:62:04:48:6f:e6:9e:a2:d7:4e:
         67:b8:56:39:29:d6:2d:f9:e4:1e:44:78:33:99:ce:d3:12:82:
         ad:90:a1:34:0a:9a:98:01:0c:22:cb:81:80:0c:19:8a:dc:d8:
         de:2a:16:38:2c:9c:fe:d2:95:92:eb:96:50:dd:cd:0d:5e:f8:
         8c:8b:e7:59:6c:01:b9:b7:43:c7:d2:b2:d6:be:3c:68:46:96:
         b3:3a:31:9d:0b:2b:1f:19:88:1e:8c:ff:cb:11:07:e1:86:0e:
         8c:26:ba:06:b6:76:58:e2:0a:f0:ca:23:27:0d:65:80:01:a6:
         f3:b7:f3:e7:4c:89:3a:01:17:f0:a5:15:b2:ae:2f:a7:5f:3a:
         2b:c2:62:79:3d:22:bd:03:32:5a:3f:55:bd:32:9c:7b:69:de:
         88:87:35:e2:e9:50:3a:25:d1:48:c4:39:e9:fd:20:2d:30:cc:
         77:f4:59:41
-----BEGIN CERTIFICATE-----
MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEc/6Q1rtO8YlpnXwEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI0MDkxODAwNDUyNloXDTI2MTIyMjAxNDUyNlowLzEtMCsGA1UEAxMk
OGU0OWI0YzYtNGQ1OC00MmUwLWFiZTItOTM3NTRmZGNkYTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjHRo7CHLjOReAb6jZ3KjzJhr7MCEQNAwBxl
4Qj9FeCBG7DsUTmHZlImd28SzQ33IRR8PhcN1Y4NLb5+9mmKgYo8TEr8PPJ2lfFD
CtYmEG+gGfRHkkQ/Pg5t7HurFSXKV74lZP4i3ZPHk0Zm2AV8GVRhVzTjGXHonToS
zB7lNuJHJCwT2sYXk1Z5aR4EL8fIHyUBd72qUgk/OUy6fOP8IVODwhPVNV7NhLll
jYpYCed4UFmqi5itmUrdn3RW2i9zkNqLxMdMw9yv1Cgc3UusqSumck6Unrwq+sH0
EStqRwmYTigYa9RJHn0IVn+hxwwHP5axJIRPQ1Yn0FXy88XNIQIDAQABo4IEQDCC
BDwwHQYDVR0OBBYEFApJGJaYb8/UjbPmoiInwSZZ0utrMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84
ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZkY2RhMzUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzhlNDliNGM2LTRkNTgtNDJlMC1h
YmUyLTkzNzU0ZmRjZGEzNS84ZTQ5YjRjNi00ZDU4LTQyZTAtYWJlMi05Mzc1NGZk
Y2RhMzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwQAYIKwYBBQUH
AQcBAf8EMTAvMB4EAgABMBgDBAJAcEgDBAJERbgDBAJop9wDBALHzGAwDQQCAAIw
BwMFACYG1kAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICHLoCAwYWxTBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQBUQL+Nnq2OHWGSFyVuwYxKXhOQ+tOZlnYYkPPLEZ5Q5DyvCtW5SVWWffkLcx6S
GwBNagJV5y36pySZDicCCXaBKw2BFiWhUnkVGYvR0lNMUaNiBEhv5p6i105nuFY5
KdYt+eQeRHgzmc7TEoKtkKE0CpqYAQwiy4GADBmK3NjeKhY4LJz+0pWS65ZQ3c0N
XviMi+dZbAG5t0PH0rLWvjxoRpazOjGdCysfGYgejP/LEQfhhg6MJroGtnZY4grw
yiMnDWWAAabzt/PnTIk6ARfwpRWyri+nXzorwmJ5PSK9AzJaP1W9Mpx7ad6IhzXi
6VA6JdFIxDnp/SAtMMx39FlB
-----END CERTIFICATE-----