Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799.cer
File:                     9845687b-adc5-4703-901b-ed09092a7799.cer (raw, json)
Hash identifier:          SyhBukViDZTl/DipO7xnkxwOwLcR6hmPVjbhbYUeIjs=
Subject key identifier:   FD:11:20:64:CE:1E:09:22:69:25:3C:83:DC:32:05:B5:F3:74:74:DF
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285843AC389684CB4D4F76F1E87C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/9845687b-adc5-4703-901b-ed09092a7799.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Oct 2023 00:45:15 +0000
Certificate not after:    Wed 28 Jan 2026 01:45:15 +0000
Subordinate resources:    IP: 192.84.23.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ac:38:96:84:cb:4d:4f:76:f1:e8:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Oct 26 00:45:15 2023 GMT
            Not After : Jan 28 01:45:15 2026 GMT
        Subject: CN=9845687b-adc5-4703-901b-ed09092a7799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:e5:fa:19:58:de:75:c0:8c:d7:ce:a9:46:
                    61:cf:f3:a5:7b:fc:f4:c7:5c:b3:7f:42:e0:61:ca:
                    17:c3:6f:4c:bb:be:f1:aa:57:de:03:96:11:0b:d2:
                    f5:1a:28:44:93:b6:be:23:0d:67:2e:e8:f9:fa:21:
                    ee:52:70:bd:61:6c:43:eb:47:66:d9:28:9b:63:6a:
                    3e:58:dd:3a:34:af:09:83:ba:cc:f4:f2:a6:fe:04:
                    12:6a:22:7c:f4:3d:b8:70:4c:a4:12:35:74:87:88:
                    42:14:d7:02:47:41:8c:55:5b:ca:ff:cc:1f:e3:34:
                    eb:cc:bb:ce:38:1f:0c:24:a8:eb:3b:59:c7:4d:fc:
                    d2:ed:66:aa:0b:ae:b4:8d:ca:e4:93:22:bc:ad:e9:
                    2c:59:26:55:1c:49:96:23:0b:84:2d:f6:55:03:ae:
                    a0:3e:97:15:e8:27:d4:42:60:dc:90:8c:3e:19:a4:
                    d0:b8:e1:eb:4e:ee:9f:0d:fe:85:bb:d2:cb:af:64:
                    37:20:4e:5b:ce:2c:cd:90:8e:72:2a:7e:3a:a3:14:
                    d8:cf:93:d5:69:15:08:64:81:1c:e1:80:93:58:bd:
                    ee:6a:d6:9a:d1:38:f9:f1:56:45:5f:c3:9f:d8:c5:
                    33:fe:a0:7f:cc:53:9e:96:78:74:a3:8a:93:c8:79:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:11:20:64:CE:1E:09:22:69:25:3C:83:DC:32:05:B5:F3:74:74:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/9845687b-adc5-4703-901b-ed09092a7799.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0a:16:22:23:1c:44:eb:d8:02:0f:00:28:5d:70:61:a9:a0:
         2f:5c:c1:9d:50:28:d9:2c:b0:4b:94:6e:01:1e:7a:86:83:cc:
         a1:0c:a8:ee:70:c7:92:21:c3:31:28:a4:cc:f3:dd:2c:a3:36:
         da:1e:4c:d9:aa:ec:c5:ae:05:00:74:6a:c5:1b:43:5b:4d:0d:
         71:3e:a5:8f:c1:49:e8:53:a0:2b:93:ac:cd:3d:a4:5b:33:1b:
         59:65:45:3e:04:8a:9f:78:4c:71:0a:96:b1:ff:5a:29:f0:f2:
         40:06:41:c4:e6:6f:30:60:83:71:85:98:f8:21:7f:b6:5a:d3:
         34:ce:60:95:d0:e9:98:51:04:11:dc:06:fc:7e:90:ef:76:86:
         a0:ab:b0:7f:cf:8e:87:a2:b1:cf:93:89:2d:05:85:22:3c:c1:
         e7:97:48:9c:99:b1:7c:e0:bb:6c:3f:a1:43:2e:61:87:16:6c:
         f7:a7:36:45:88:84:b9:7e:ad:02:ed:5f:8e:f5:32:43:cf:05:
         15:87:be:51:ae:df:7a:43:61:77:05:48:da:34:16:e5:68:65:
         36:c6:f2:71:1e:63:97:bc:4a:cf:41:bc:31:81:ee:fc:07:26:
         56:89:70:c3:b9:9a:6c:c2:dc:08:8b:5c:81:c4:31:90:3f:0f:
         46:a4:d6:bd
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEOsOJaEy01PdvHofAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMTAyNjAwNDUxNVoXDTI2MDEyODAxNDUxNVowLzEtMCsGA1UEAxMk
OTg0NTY4N2ItYWRjNS00NzAzLTkwMWItZWQwOTA5MmE3Nzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVTl+hlY3nXAjNfOqUZhz/Ole/z0x1yzf0Lg
YcoXw29Mu77xqlfeA5YRC9L1GihEk7a+Iw1nLuj5+iHuUnC9YWxD60dm2SibY2o+
WN06NK8Jg7rM9PKm/gQSaiJ89D24cEykEjV0h4hCFNcCR0GMVVvK/8wf4zTrzLvO
OB8MJKjrO1nHTfzS7WaqC660jcrkkyK8reksWSZVHEmWIwuELfZVA66gPpcV6CfU
QmDckIw+GaTQuOHrTu6fDf6Fu9LLr2Q3IE5bzizNkI5yKn46oxTYz5PVaRUIZIEc
4YCTWL3uataa0Tj58VZFX8Of2MUz/qB/zFOelnh0o4qTyHmciwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFP0RIGTOHgkiaSU8g9wyBbXzdHTfMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85
ODQ1Njg3Yi1hZGM1LTQ3MDMtOTAxYi1lZDA5MDkyYTc3OTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1Lzk4NDU2ODdiLWFkYzUtNDcwMy05
MDFiLWVkMDkwOTJhNzc5OS85ODQ1Njg3Yi1hZGM1LTQ3MDMtOTAxYi1lZDA5MDky
YTc3OTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADAVBcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABwoWIiMcROvYAg8AKF1w
YamgL1zBnVAo2SywS5RuAR56hoPMoQyo7nDHkiHDMSikzPPdLKM22h5M2arsxa4F
AHRqxRtDW00NcT6lj8FJ6FOgK5OszT2kWzMbWWVFPgSKn3hMcQqWsf9aKfDyQAZB
xOZvMGCDcYWY+CF/tlrTNM5gldDpmFEEEdwG/H6Q73aGoKuwf8+Oh6Kxz5OJLQWF
IjzB55dInJmxfOC7bD+hQy5hhxZs96c2RYiEuX6tAu1fjvUyQ88FFYe+Ua7fekNh
dwVI2jQW5WhlNsbycR5jl7xKz0G8MYHu/AcmVolww7mabMLcCItcgcQxkD8PRqTW
vQ==
-----END CERTIFICATE-----