Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
File:                     9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer (raw, json)
Hash identifier:          8oSgBhLAlRQ44N/Ci60gKRIb73NhtERj2+admGavzpo=
Subject key identifier:   02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858444B775AD1F4C8F2F62E824300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 22 Dec 2023 01:45:15 +0000
Certificate not after:    Thu 26 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 27385
                          IP: 64.39.96.0/20
                          IP: 2602:fdaa::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:4b:77:5a:d1:f4:c8:f2:f6:2e:82:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Dec 22 01:45:15 2023 GMT
            Not After : Mar 26 00:45:15 2026 GMT
        Subject: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:50:ef:19:36:ec:ac:24:e8:fe:e1:7c:14:
                    e4:ed:7f:c1:95:7b:e7:42:fa:57:53:ff:fa:cb:6c:
                    37:bd:10:ee:d1:26:42:f8:56:0e:ee:98:76:69:ea:
                    b4:ca:53:8a:2e:2c:1d:9d:6e:ed:53:24:18:c9:5b:
                    80:25:f6:58:b1:b2:cb:1e:23:b6:d2:9b:e6:2b:ae:
                    1c:28:3b:b8:7b:a4:c5:c7:10:d5:83:a3:0a:9b:7f:
                    8f:be:64:b6:30:d8:d7:2e:ab:32:7d:2a:06:32:8e:
                    1a:67:ca:ff:d7:52:52:16:85:21:7d:44:eb:fc:e4:
                    2f:c2:d0:25:e9:9a:c3:c8:2b:8e:29:2f:67:94:71:
                    9b:d2:09:b8:cf:94:73:fb:14:2e:6a:b6:dd:6e:7c:
                    6d:8b:35:a0:b4:00:fd:e5:d6:bc:13:91:95:ce:3c:
                    59:50:47:19:01:2a:d3:b3:b4:ea:7a:5a:6f:42:b7:
                    8b:c3:58:f7:f3:ea:47:4e:e9:73:7f:8b:df:51:57:
                    62:47:e1:cd:08:14:c0:71:37:a0:3f:d4:c4:48:1e:
                    da:52:96:9e:57:89:3d:a0:dc:67:18:8f:a0:9c:b7:
                    35:66:72:6e:3a:73:69:fd:14:13:10:e6:d0:ce:d4:
                    2b:e7:6d:e5:5a:61:82:c9:36:05:a5:08:a6:3f:77:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.96.0/20
                IPv6:
                  2602:fdaa::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27385

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:6d:a4:25:60:1f:64:09:00:28:39:f4:7b:3c:b8:3c:87:d1:
         b4:62:cd:3d:ab:a6:64:88:57:ac:24:dd:34:3c:58:45:57:71:
         cc:79:6b:48:27:b2:6a:d4:ad:dc:21:22:75:5f:a1:bd:0d:7c:
         11:13:bf:a1:34:c4:2d:ac:ca:64:d2:63:ba:cb:df:6a:18:f5:
         4d:a8:52:9c:80:d1:78:cc:c1:fd:de:c3:98:8a:66:8a:f4:8f:
         ae:17:68:a8:4d:1e:5a:64:1c:f1:19:b2:20:f7:d9:78:87:ea:
         a5:6b:01:a4:c1:30:79:d6:59:ee:36:2c:d0:78:2d:7c:4b:8c:
         5d:51:1e:c3:57:70:db:05:18:14:01:ee:40:1f:d5:77:74:d2:
         d3:e7:8d:c9:f1:40:67:03:7b:bc:f6:8a:e1:5f:a7:37:2c:50:
         ce:38:f7:ee:4e:9a:7c:79:69:48:98:3d:2c:a4:f8:87:d5:08:
         45:1e:88:dc:82:68:a0:b6:93:59:e9:0d:49:11:6f:80:e7:91:
         d4:30:c2:f3:fd:35:1a:fc:e9:10:3c:23:fe:b0:61:87:2d:72:
         bf:35:6d:ff:b9:7c:13:39:0f:ef:e3:26:d5:17:ca:78:ce:c0:
         49:20:78:5d:b6:da:69:86:6d:d3:9c:95:5c:2d:63:8d:11:b2:
         0c:96:88:ff
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWERLd1rR9Mjy9i6CQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMTIyMjAxNDUxNVoXDTI2MDMyNjAwNDUxNVowLzEtMCsGA1UEAxMk
OWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMxZDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHZQ7xk27Kwk6P7hfBTk7X/BlXvnQvpXU//6
y2w3vRDu0SZC+FYO7ph2aeq0ylOKLiwdnW7tUyQYyVuAJfZYsbLLHiO20pvmK64c
KDu4e6TFxxDVg6MKm3+PvmS2MNjXLqsyfSoGMo4aZ8r/11JSFoUhfUTr/OQvwtAl
6ZrDyCuOKS9nlHGb0gm4z5Rz+xQuarbdbnxtizWgtAD95da8E5GVzjxZUEcZASrT
s7TqelpvQreLw1j38+pHTulzf4vfUVdiR+HNCBTAcTegP9TESB7aUpaeV4k9oNxn
GI+gnLc1ZnJuOnNp/RQTEObQztQr523lWmGCyTYFpQimP3fY7QIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFAJETV5tCp7t/dz1NNcxY7nLesIMMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85
ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzlkMDZlZDY2LTlmZGQtNDA0OC04
NjQ1LWUzM2U4Y2VjMWQ0MS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNl
YzFkNDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBARAJ2AwDgQCAAIwCAMGBCYC/aoAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAmr5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHttpCVgH2QJACg59Hs8uDyH0bRi
zT2rpmSIV6wk3TQ8WEVXccx5a0gnsmrUrdwhInVfob0NfBETv6E0xC2symTSY7rL
32oY9U2oUpyA0XjMwf3ew5iKZor0j64XaKhNHlpkHPEZsiD32XiH6qVrAaTBMHnW
We42LNB4LXxLjF1RHsNXcNsFGBQB7kAf1Xd00tPnjcnxQGcDe7z2iuFfpzcsUM44
9+5Omnx5aUiYPSyk+IfVCEUeiNyCaKC2k1npDUkRb4DnkdQwwvP9NRr86RA8I/6w
YYctcr81bf+5fBM5D+/jJtUXynjOwEkgeF222mmGbdOclVwtY40RsgyWiP8=
-----END CERTIFICATE-----