Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer
File:                     9bf7e8f1-89be-4f57-a2cb-912b45b308fc.cer (raw, json)
Hash identifier:          e5l5PtVjD3x7vNqqArdTwIhi5upX71AYgl+BklTwfKE=
Subject key identifier:   4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858440D6F8B16ED0C9B5B1C736200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 Nov 2023 20:29:24 +0000
Certificate not after:    Tue 03 Mar 2026 20:29:24 +0000
Subordinate resources:    AS: 36527
                          IP: 23.160.136.0/24
                          IP: 2602:fa41::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0d:6f:8b:16:ed:0c:9b:5b:1c:73:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Nov 29 20:29:24 2023 GMT
            Not After : Mar  3 20:29:24 2026 GMT
        Subject: CN=9bf7e8f1-89be-4f57-a2cb-912b45b308fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:0c:59:8a:cc:b8:c9:28:a9:7b:c2:de:e7:
                    52:9a:f4:c3:6b:ac:95:5f:1f:4b:8c:03:bb:c3:bf:
                    93:ed:46:15:a5:82:36:c0:e7:19:f4:cf:1e:d7:03:
                    fb:a8:b0:53:fd:0a:40:85:14:53:d5:cd:22:6b:9f:
                    b8:a1:8b:ae:11:c5:16:36:e3:33:b5:81:dc:4b:05:
                    61:79:f5:5a:b6:25:95:82:ad:20:cd:a2:e5:8a:12:
                    b6:b2:dc:89:c7:0e:8e:38:52:8e:2d:09:06:c5:12:
                    e4:ec:03:4a:2e:3b:62:a0:80:4c:1c:7a:73:5b:78:
                    e3:cf:d3:68:8e:55:1d:b1:9d:5b:cb:9d:ab:ec:a9:
                    3b:2f:77:38:bf:20:29:b8:8e:1b:7d:af:0f:fe:f5:
                    ec:17:23:ac:a9:0b:84:3b:f4:ca:ed:eb:89:a5:4c:
                    9c:dc:81:77:a4:b2:b7:33:ec:33:eb:c0:d1:ca:ac:
                    6f:2c:a0:6e:a0:e6:36:13:0e:c8:0f:fa:2f:c6:b3:
                    29:67:10:1d:cf:d6:a8:d9:8c:d0:dd:0f:98:6f:0a:
                    36:5b:c0:0c:63:a7:37:fc:a8:63:14:59:d4:18:b1:
                    73:89:9b:f3:70:fb:dc:b1:99:ca:e1:06:fa:bf:7b:
                    23:ed:95:99:64:e3:39:a3:0c:40:5c:08:ba:de:2c:
                    23:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:02:DA:48:22:BE:8E:F4:B3:E8:17:F2:47:64:73:8A:ED:86:D8:76
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf7e8f1-89be-4f57-a2cb-912b45b308fc/9bf7e8f1-89be-4f57-a2cb-912b45b308fc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.136.0/24
                IPv6:
                  2602:fa41::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36527

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:81:d0:fd:ee:48:39:47:da:8c:7d:be:ee:89:fc:35:a1:1c:
         6e:d2:c3:24:18:8c:e0:8f:dd:11:2d:a2:79:11:b9:c9:61:1f:
         a5:ce:a7:12:e8:c5:3a:ca:b1:f3:58:95:ee:f1:f2:7e:0a:d4:
         d2:eb:43:2f:85:d4:25:73:f2:34:98:86:9b:e4:4d:d4:7b:41:
         37:f3:85:41:2c:ce:d1:d3:e3:1c:c7:74:31:58:82:e8:05:dc:
         9d:26:97:16:9a:55:ee:ab:e0:70:3f:cd:ee:b4:0d:9a:0b:aa:
         68:5f:35:54:54:88:6a:d1:89:4e:97:37:13:02:29:e4:19:d8:
         51:1b:75:fb:99:f2:56:0c:3f:68:ef:22:8d:5c:6f:14:6b:01:
         88:00:f7:db:31:99:66:1d:9c:d1:62:df:59:44:e2:c6:10:9b:
         0b:41:75:62:76:34:a7:a3:5f:d5:9f:76:82:6d:d5:8f:c1:23:
         e0:0a:13:f7:5f:7b:a8:c9:61:2d:57:0a:4e:77:64:af:c0:4d:
         33:cc:a0:e9:a4:fc:c5:3c:37:9d:fa:2b:e3:1b:2a:1a:7b:fa:
         79:58:33:c3:9b:55:84:8b:6e:97:4f:db:fe:07:27:55:26:f0:
         92:62:62:e2:47:f4:19:b7:d1:b9:4f:eb:61:43:8f:5c:ae:07:
         34:04:62:eb
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEQNb4sW7QybWxxzYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTIzMTEyOTIwMjkyNFoXDTI2MDMwMzIwMjkyNFowLzEtMCsGA1UEAxMk
OWJmN2U4ZjEtODliZS00ZjU3LWEyY2ItOTEyYjQ1YjMwOGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZkMWYrMuMkoqXvC3udSmvTDa6yVXx9LjAO7
w7+T7UYVpYI2wOcZ9M8e1wP7qLBT/QpAhRRT1c0ia5+4oYuuEcUWNuMztYHcSwVh
efVatiWVgq0gzaLlihK2styJxw6OOFKOLQkGxRLk7ANKLjtioIBMHHpzW3jjz9No
jlUdsZ1by52r7Kk7L3c4vyApuI4bfa8P/vXsFyOsqQuEO/TK7euJpUyc3IF3pLK3
M+wz68DRyqxvLKBuoOY2Ew7ID/ovxrMpZxAdz9ao2YzQ3Q+Ybwo2W8AMY6c3/Khj
FFnUGLFziZvzcPvcsZnK4Qb6v3sj7ZWZZOM5owxAXAi63iwjXwIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFEwC2kgivo70s+gX8kdkc4rthth2MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85
YmY3ZThmMS04OWJlLTRmNTctYTJjYi05MTJiNDViMzA4ZmMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3LzliZjdlOGYxLTg5YmUtNGY1Ny1h
MmNiLTkxMmI0NWIzMDhmYy85YmY3ZThmMS04OWJlLTRmNTctYTJjYi05MTJiNDVi
MzA4ZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXoIgwDgQCAAIwCAMGBCYC+kEAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwCOrzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWgdD97kg5R9qMfb7uifw1oRxu
0sMkGIzgj90RLaJ5EbnJYR+lzqcS6MU6yrHzWJXu8fJ+CtTS60MvhdQlc/I0mIab
5E3Ue0E384VBLM7R0+Mcx3QxWILoBdydJpcWmlXuq+BwP83utA2aC6poXzVUVIhq
0YlOlzcTAinkGdhRG3X7mfJWDD9o7yKNXG8UawGIAPfbMZlmHZzRYt9ZROLGEJsL
QXVidjSno1/Vn3aCbdWPwSPgChP3X3uoyWEtVwpOd2SvwE0zzKDppPzFPDed+ivj
Gyoae/p5WDPDm1WEi26XT9v+BydVJvCSYmLiR/QZt9G5T+thQ49crgc0BGLr
-----END CERTIFICATE-----