Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.cer
File:                     c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.cer (raw, json)
Hash identifier:          BzcexgNuaHq+nAFLjzRXjcQqsIF6Ku3i27xRjkJWSD0=
Subject key identifier:   44:40:1E:82:DE:11:D9:4E:9F:9E:0A:D7:F7:27:05:0F:E5:F4:7B:27
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858472F28F25E169B208F94EB7080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Sep 2024 00:45:26 +0000
Certificate not after:    Wed 16 Dec 2026 01:45:26 +0000
Subordinate resources:    IP: 2602:80d:3000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:28:f2:5e:16:9b:20:8f:94:eb:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 12 00:45:26 2024 GMT
            Not After : Dec 16 01:45:26 2026 GMT
        Subject: CN=c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:29:64:cf:65:67:1e:90:02:fb:d6:04:13:
                    f5:68:4c:36:e4:8b:1d:e8:d2:24:1f:39:bb:68:db:
                    87:4c:b6:78:be:0d:d3:db:82:ce:27:93:0a:01:1d:
                    85:92:64:75:90:14:6e:52:e5:b7:3e:7e:36:bb:8b:
                    17:69:3a:16:45:7a:df:ea:a0:bf:11:74:6b:69:0c:
                    ff:6b:bf:b5:c8:3f:b5:a2:60:49:10:36:86:73:0c:
                    4a:3d:2c:96:e6:fb:73:ea:8d:ed:b3:6c:48:06:df:
                    de:21:4a:0a:51:5b:04:31:3f:cb:db:d8:e2:8a:1b:
                    7e:0b:ba:ce:e9:ef:23:c2:43:77:55:9b:80:f0:e1:
                    a4:e6:69:62:0b:16:0c:22:53:db:6d:1c:4a:64:cd:
                    80:82:e9:ad:9a:19:db:d2:91:6c:ef:65:94:34:52:
                    e5:9f:5b:58:6a:32:86:9c:13:5f:32:66:ef:9c:91:
                    ef:b7:5f:3e:9c:5b:30:d5:f9:6d:2a:9d:9c:23:b6:
                    38:3a:0d:38:6f:21:e0:fa:4b:34:39:c8:5f:16:32:
                    48:9d:77:12:1f:3b:58:99:2c:76:0a:92:52:6b:bf:
                    b9:2f:ec:74:1b:dd:e8:c9:5e:5e:e7:61:5c:f3:93:
                    c3:37:da:b1:b8:1e:c8:34:00:b0:9e:61:ca:67:87:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:40:1E:82:DE:11:D9:4E:9F:9E:0A:D7:F7:27:05:0F:E5:F4:7B:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf/c91d741c-8cc0-44ec-8b13-fd9ff9d4acaf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80d:3000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:20:14:ee:c1:53:ff:b7:3a:cc:c0:e2:cb:20:6c:f1:8e:17:
         b7:93:4f:96:d5:6d:14:3b:9a:d2:d4:33:f5:f3:4f:66:77:4e:
         3a:ad:35:bc:e3:cd:88:80:ad:29:96:ca:f3:d3:85:43:84:3d:
         fd:3e:3f:dc:d0:37:67:72:6e:15:dc:ec:69:e9:d1:ff:11:09:
         da:f9:73:61:94:57:9b:b7:af:d5:0c:26:cf:ce:12:d7:d2:51:
         0e:3f:1a:52:4e:9d:d1:7c:d8:c8:30:99:9d:d0:77:b4:4f:f2:
         87:9d:64:2d:18:b2:31:78:be:0a:c2:7c:e2:9c:e8:b7:d1:47:
         80:f7:31:ca:76:6d:19:98:b8:c7:b5:9a:1c:e4:2d:55:63:b5:
         9d:58:9a:63:ea:4a:a9:9d:34:13:13:48:e3:35:4f:05:4a:a0:
         ef:34:80:ed:9e:6a:bb:7c:2c:20:1a:4f:bc:8b:fa:be:2e:6e:
         d5:66:24:f3:67:e5:9b:d6:78:a5:84:57:16:24:fc:be:2e:be:
         d2:f6:d6:96:1d:67:bb:3f:06:52:17:5e:d4:3f:7f:b0:44:1e:
         d7:ba:17:1a:2a:76:5e:cb:11:73:7c:22:53:4c:34:92:a2:c5:
         eb:3f:b0:86:b1:5e:f6:f5:50:3c:ed:58:9c:77:24:6a:03:ad:
         26:a1:60:a5
-----BEGIN CERTIFICATE-----
MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWEcvKPJeFpsgj5TrcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI0MDkxMjAwNDUyNloXDTI2MTIxNjAxNDUyNlowLzEtMCsGA1UEAxMk
YzkxZDc0MWMtOGNjMC00NGVjLThiMTMtZmQ5ZmY5ZDRhY2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2wpZM9lZx6QAvvWBBP1aEw25Isd6NIkHzm7
aNuHTLZ4vg3T24LOJ5MKAR2FkmR1kBRuUuW3Pn42u4sXaToWRXrf6qC/EXRraQz/
a7+1yD+1omBJEDaGcwxKPSyW5vtz6o3ts2xIBt/eIUoKUVsEMT/L29jiiht+C7rO
6e8jwkN3VZuA8OGk5mliCxYMIlPbbRxKZM2Agumtmhnb0pFs72WUNFLln1tYajKG
nBNfMmbvnJHvt18+nFsw1fltKp2cI7Y4Og04byHg+ks0OchfFjJInXcSHztYmSx2
CpJSa7+5L+x0G93oyV5e52Fc85PDN9qxuB7INACwnmHKZ4ev+wIDAQABo4IEAjCC
A/4wHQYDVR0OBBYEFERAHoLeEdlOn54K1/cnBQ/l9HsnMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9j
OTFkNzQxYy04Y2MwLTQ0ZWMtOGIxMy1mZDlmZjlkNGFjYWYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2M5MWQ3NDFjLThjYzAtNDRlYy04
YjEzLWZkOWZmOWQ0YWNhZi9jOTFkNzQxYy04Y2MwLTQ0ZWMtOGIxMy1mZDlmZjlk
NGFjYWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQmAggNMAAwVAYDVR0gAQH/BEowSDBGBggrBgEF
BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj
ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiyAU7sFT/7c6zMDi
yyBs8Y4Xt5NPltVtFDua0tQz9fNPZndOOq01vOPNiICtKZbK89OFQ4Q9/T4/3NA3
Z3JuFdzsaenR/xEJ2vlzYZRXm7ev1Qwmz84S19JRDj8aUk6d0XzYyDCZndB3tE/y
h51kLRiyMXi+CsJ84pzot9FHgPcxynZtGZi4x7WaHOQtVWO1nViaY+pKqZ00ExNI
4zVPBUqg7zSA7Z5qu3wsIBpPvIv6vi5u1WYk82flm9Z4pYRXFiT8vi6+0vbWlh1n
uz8GUhde1D9/sEQe17oXGip2XssRc3wiU0w0kqLF6z+whrFe9vVQPO1YnHckagOt
JqFgpQ==
-----END CERTIFICATE-----