Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
File:                     e0016267-dc0a-4a90-a925-951bf1a98788.cer (raw, json)
Hash identifier:          HhFhgSQ65hvRrq8e/uNWhfgpLhQglM0DFDgtHL2LSIY=
Subject key identifier:   66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858462F81A4F92BD1AB9AE6E16180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Jun 2024 10:57:13 +0000
Certificate not after:    Mon 26 Jan 2026 19:10:02 +0000
Subordinate resources:    AS: 18907
                          AS: 401165
                          IP: 104.219.144.0/22
                          IP: 162.249.36.0/22
                          IP: 2605:2880::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2f:81:a4:f9:2b:d1:ab:9a:e6:e1:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jun 12 10:57:13 2024 GMT
            Not After : Jan 26 19:10:02 2026 GMT
        Subject: CN=e0016267-dc0a-4a90-a925-951bf1a98788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:62:8d:33:f1:db:cd:45:44:38:21:5f:f0:
                    ff:5f:92:b9:a1:cf:ec:65:03:83:78:26:21:18:35:
                    27:43:33:43:56:e9:d3:29:19:54:cc:63:72:a5:50:
                    6c:c1:2e:84:39:3b:1a:8e:4d:f1:ca:9e:52:e2:1c:
                    57:48:de:e5:59:7e:b4:2f:4c:97:2b:5b:fa:37:22:
                    b4:60:8f:c8:de:70:13:68:b8:43:a9:7a:6f:93:5e:
                    62:7e:58:c1:1f:b3:34:55:03:11:c9:20:6d:81:d0:
                    29:b0:ed:9b:a4:fb:e5:5e:ec:8c:df:d7:52:07:0a:
                    c1:ea:66:b7:f4:0a:1a:b4:30:0e:40:b6:22:ea:bb:
                    5c:ef:74:21:bd:ff:38:66:ca:2b:41:c9:50:5c:cd:
                    23:95:a3:f0:94:30:c0:59:81:37:51:90:b8:70:0a:
                    c3:d6:4d:30:78:82:36:a7:f1:74:a4:54:3e:31:33:
                    a9:ca:0b:93:9c:7f:2b:2b:42:45:13:f0:ee:8c:11:
                    c6:de:ac:a3:c5:29:5e:c6:c6:10:e1:9b:80:ae:11:
                    f9:7d:93:46:6a:3a:3e:61:6d:ee:de:3b:e3:b4:0a:
                    ed:40:e6:02:4e:a2:af:a6:8f:8a:58:61:7e:9f:b6:
                    41:57:7c:7d:e1:52:a0:2c:18:d2:bb:41:bd:e6:05:
                    21:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.144.0/22
                  162.249.36.0/22
                IPv6:
                  2605:2880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18907
                  401165

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:92:13:4c:0e:9e:1a:46:3c:3f:f1:a6:e1:e2:52:a0:29:8c:
         c4:f1:f1:a5:02:cf:77:f4:04:5f:0b:17:63:a5:ca:ea:29:56:
         42:d0:e5:85:09:17:34:8a:95:99:e9:7c:1d:3a:c7:c6:15:1e:
         52:40:05:b2:b6:79:42:31:0d:35:16:b0:02:0c:29:10:21:6c:
         b5:ba:28:9b:8f:f3:f3:4e:62:41:08:00:65:3e:61:11:e3:81:
         5d:8f:71:b1:86:64:30:68:80:c2:78:d2:38:3f:b3:8e:92:d7:
         d7:eb:df:6e:cf:df:53:82:8a:82:09:e9:55:57:a1:cd:f5:7c:
         09:32:c2:1e:eb:e6:cd:6c:2f:f9:b7:f3:ac:cb:d0:95:cd:d2:
         ef:15:46:36:8b:7b:80:80:e1:b0:ca:85:dd:bb:b3:e0:55:bc:
         c5:70:3e:41:f3:9c:32:b7:ad:61:a1:94:6c:5a:b6:95:2e:02:
         23:e5:25:20:8d:95:70:57:26:f9:03:15:7f:3e:f6:03:ad:98:
         f0:29:20:36:71:a7:ae:ad:6a:a6:a2:5c:9f:b3:98:bb:a1:1e:
         05:e1:4a:e1:18:b8:d6:11:e4:11:a6:22:f6:c0:bb:4a:7d:c5:
         d4:e2:03:3d:e6:0a:75:a9:60:03:cf:bc:1b:1b:03:d7:36:00:
         0c:8c:19:d5
-----BEGIN CERTIFICATE-----
MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEYvgaT5K9GrmubhYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx
YTA3MB4XDTI0MDYxMjEwNTcxM1oXDTI2MDEyNjE5MTAwMlowLzEtMCsGA1UEAxMk
ZTAwMTYyNjctZGMwYS00YTkwLWE5MjUtOTUxYmYxYTk4Nzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqtijTPx281FRDghX/D/X5K5oc/sZQODeCYh
GDUnQzNDVunTKRlUzGNypVBswS6EOTsajk3xyp5S4hxXSN7lWX60L0yXK1v6NyK0
YI/I3nATaLhDqXpvk15ifljBH7M0VQMRySBtgdApsO2bpPvlXuyM39dSBwrB6ma3
9AoatDAOQLYi6rtc73Qhvf84ZsorQclQXM0jlaPwlDDAWYE3UZC4cArD1k0weII2
p/F0pFQ+MTOpyguTnH8rK0JFE/DujBHG3qyjxSlexsYQ4ZuArhH5fZNGajo+YW3u
3jvjtArtQOYCTqKvpo+KWGF+n7ZBV3x94VKgLBjSu0G95gUhkQIDAQABo4IENDCC
BDAwHQYDVR0OBBYEFGYjewIKLxJ6ucHNt/qk2K1Xh3YDMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9l
MDAxNjI2Ny1kYzBhLTRhOTAtYTkyNS05NTFiZjFhOTg3ODgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt
NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2UwMDE2MjY3LWRjMGEtNGE5MC1h
OTI1LTk1MWJmMWE5ODc4OC9lMDAxNjI2Ny1kYzBhLTRhOTAtYTkyNS05NTFiZjFh
OTg3ODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh
NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh
NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ
A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3
MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAJo25ADBAKi+SQwDQQCAAIwBwMFACYFKIAwHgYI
KwYBBQUHAQgBAf8EDzANoAswCQICSdsCAwYfDTBUBgNVHSABAf8ESjBIMEYGCCsG
AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291
cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8khNMDp4aRjw/
8abh4lKgKYzE8fGlAs939ARfCxdjpcrqKVZC0OWFCRc0ipWZ6XwdOsfGFR5SQAWy
tnlCMQ01FrACDCkQIWy1uiibj/PzTmJBCABlPmER44Fdj3GxhmQwaIDCeNI4P7OO
ktfX699uz99TgoqCCelVV6HN9XwJMsIe6+bNbC/5t/Osy9CVzdLvFUY2i3uAgOGw
yoXdu7PgVbzFcD5B85wyt61hoZRsWraVLgIj5SUgjZVwVyb5AxV/PvYDrZjwKSA2
caeurWqmolyfs5i7oR4F4UrhGLjWEeQRpiL2wLtKfcXU4gM95gp1qWADz7wbGwPX
NgAMjBnV
-----END CERTIFICATE-----