Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer
File:                     511ed25c-3ac7-4d86-9290-879e3813322e.cer (raw, json)
Hash identifier:          5tBgN0dDRqLglHth+S6fmtD8mVFKH3ZZ/vlPJoRzd7s=
Subject key identifier:   BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285846F48894EE768A79D6F248E980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Aug 2024 00:45:26 +0000
Certificate not after:    Wed 25 Nov 2026 01:45:26 +0000
Subordinate resources:    AS: 13325
                          IP: 2620:167::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f4:88:94:ee:76:8a:79:d6:f2:48:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Aug 22 00:45:26 2024 GMT
            Not After : Nov 25 01:45:26 2026 GMT
        Subject: CN=511ed25c-3ac7-4d86-9290-879e3813322e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:4b:39:f5:09:61:c4:83:3a:bd:2a:36:c0:
                    97:8e:55:1c:bf:7f:40:7e:b0:05:51:53:a2:e4:d7:
                    21:b1:68:dc:91:aa:28:6f:84:de:b6:21:75:8a:43:
                    9c:09:f5:ac:65:e2:d2:8a:1f:17:a9:8f:84:14:bc:
                    b0:f0:27:24:7d:5d:ed:f3:2f:0d:45:6a:19:c6:a9:
                    7c:d3:96:a9:1a:23:1c:b9:17:56:81:c6:0e:ec:a6:
                    3e:11:7e:a1:6c:70:db:d4:26:fd:e7:58:84:ab:63:
                    b6:9c:56:c3:1e:e1:ec:99:3f:f7:79:58:f3:bc:07:
                    0d:66:96:f1:6d:54:48:13:63:93:4c:3f:df:84:68:
                    c1:ce:bd:9e:8f:6e:9f:a6:df:e9:74:45:3c:e1:1c:
                    a9:b2:aa:71:ac:ce:c5:00:e8:c2:09:c8:76:e9:9a:
                    8f:86:33:16:56:58:3a:3c:e2:43:4f:3f:4d:0c:5e:
                    cc:27:ef:2f:35:c3:65:27:45:ec:61:2c:3f:c3:d5:
                    ff:50:7a:78:aa:92:db:22:6b:dd:2f:4d:96:ae:01:
                    7f:ac:0e:c8:56:b7:7c:fc:3f:fa:9d:55:69:17:a9:
                    7f:f6:6c:89:23:cf:aa:5d:94:a2:b5:21:dc:7f:1d:
                    3e:c1:16:00:38:5b:04:1e:96:e9:8c:4f:4b:ed:29:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:167::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13325

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b5:c6:c0:46:39:60:96:c2:73:65:1f:1e:c9:26:3d:a3:d3:
         10:c1:34:d7:cd:a1:13:90:2e:5e:19:e8:6d:71:2f:43:a2:4c:
         8c:92:61:e3:ac:e7:d6:80:06:5b:c7:cd:5a:97:fb:bf:e2:d7:
         ed:46:c8:49:55:fe:00:c7:ca:62:af:87:d4:36:c0:09:dd:d4:
         b6:1b:b8:ea:fd:67:4c:31:8d:ed:11:05:e1:a3:25:c1:03:ed:
         1f:dc:b6:8b:6e:de:d4:60:b9:24:08:65:7d:36:2f:70:17:c2:
         89:02:59:d3:52:fd:f3:28:46:14:f8:f9:75:43:21:34:71:83:
         11:71:39:cb:42:d9:34:5c:c2:0f:0e:47:0a:d8:9b:0d:98:f7:
         31:81:df:93:f2:ab:cf:f9:5a:3e:90:eb:9c:f1:e1:b5:eb:5c:
         49:6a:72:6a:49:c0:9d:6a:f1:c3:03:39:b6:24:fd:a0:0f:60:
         d0:d6:1b:f3:c4:3b:48:db:79:f2:20:44:a8:18:f7:8c:94:a5:
         0f:22:60:3e:bb:c9:19:ba:e9:f6:84:92:b8:54:09:d2:40:7b:
         11:b3:25:dc:f0:8c:8c:cd:21:73:a5:05:15:cc:3a:cd:a8:cf:
         82:e7:8f:e9:a0:b8:e9:9b:e8:ee:ba:85:f1:b6:ed:ab:bc:25:
         e4:c5:74:f5
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEb0iJTudop51vJI6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI0MDgyMjAwNDUyNloXDTI2MTEyNTAxNDUyNlowLzEtMCsGA1UEAxMk
NTExZWQyNWMtM2FjNy00ZDg2LTkyOTAtODc5ZTM4MTMzMjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TlLOfUJYcSDOr0qNsCXjlUcv39AfrAFUVOi
5NchsWjckaoob4TetiF1ikOcCfWsZeLSih8XqY+EFLyw8CckfV3t8y8NRWoZxql8
05apGiMcuRdWgcYO7KY+EX6hbHDb1Cb951iEq2O2nFbDHuHsmT/3eVjzvAcNZpbx
bVRIE2OTTD/fhGjBzr2ej26fpt/pdEU84RypsqpxrM7FAOjCCch26ZqPhjMWVlg6
POJDTz9NDF7MJ+8vNcNlJ0XsYSw/w9X/UHp4qpLbImvdL02WrgF/rA7IVrd8/D/6
nVVpF6l/9myJI8+qXZSitSHcfx0+wRYAOFsEHpbpjE9L7Sn+uQIDAQABo4IEHDCC
BBgwHQYDVR0OBBYEFL7XimByhXAQeyhD8S7l1Nxvx1suMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81
MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgxMzMyMmUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzUxMWVkMjVjLTNhYzctNGQ4Ni05
MjkwLTg3OWUzODEzMzIyZS81MTFlZDI1Yy0zYWM3LTRkODYtOTI5MC04NzllMzgx
MzMyMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQmIAFnADAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgI0DTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0
dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG
SIb3DQEBCwUAA4IBAQBRtcbARjlglsJzZR8eySY9o9MQwTTXzaETkC5eGehtcS9D
okyMkmHjrOfWgAZbx81al/u/4tftRshJVf4Ax8pir4fUNsAJ3dS2G7jq/WdMMY3t
EQXhoyXBA+0f3LaLbt7UYLkkCGV9Ni9wF8KJAlnTUv3zKEYU+Pl1QyE0cYMRcTnL
Qtk0XMIPDkcK2JsNmPcxgd+T8qvP+Vo+kOuc8eG161xJanJqScCdavHDAzm2JP2g
D2DQ1hvzxDtI23nyIESoGPeMlKUPImA+u8kZuun2hJK4VAnSQHsRsyXc8IyMzSFz
pQUVzDrNqM+C54/poLjpm+juuoXxtu2rvCXkxXT1
-----END CERTIFICATE-----