Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
File:                     90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer (raw, json)
Hash identifier:          0Y7NT3VHu5qXmL2i7JJ3X2HQNtK4lxbnmfrVe7C1oM4=
Subject key identifier:   18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
Authority key identifier: 92:3F:C0:B4:62:A6:2F:B6:14:8F:72:2F:7F:3B:0F:C1:B5:CC:F1:E9
Certificate issuer:       /CN=aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc
Certificate serial:       010D0C9F432858477612CAB5A509A975E3C1B380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Mon 07 Oct 2024 10:23:12 +0000
Certificate not after:    Sun 10 Jan 2027 11:23:12 +0000
Subordinate resources:    AS: 400817
                          IP: 2602:296::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:12:ca:b5:a5:09:a9:75:e3:c1:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc
        Validity
            Not Before: Oct  7 10:23:12 2024 GMT
            Not After : Jan 10 11:23:12 2027 GMT
        Subject: CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:39:d7:71:ff:e1:68:88:bc:b5:3c:ad:5a:
                    d0:75:38:f3:74:a0:64:c9:3a:2b:62:50:e4:ba:75:
                    e2:a6:bf:78:cd:55:c5:ac:ad:be:81:e3:d5:ff:15:
                    e0:ad:52:9a:5d:45:18:d7:66:98:04:8b:45:83:9f:
                    fc:e8:c9:23:05:bc:cc:27:c8:a0:4d:54:fc:7a:56:
                    6d:1d:9a:82:a9:a9:b3:17:60:bf:e3:23:ed:ac:bf:
                    9f:4a:fb:2f:63:57:df:62:d9:36:04:12:05:06:ed:
                    8f:32:2f:95:e3:06:cf:9e:2e:35:41:1f:0d:f8:c8:
                    05:cf:d7:33:02:d1:f1:93:e2:11:fe:d0:65:47:3c:
                    24:2a:68:f8:cc:bd:a9:53:b6:1b:66:be:d8:57:1e:
                    75:a7:52:25:d6:96:3e:df:29:dd:16:e2:1b:00:42:
                    20:9f:f6:b6:e5:c9:ca:f6:5b:dd:ac:3f:0e:c4:ca:
                    51:53:90:4b:c7:1b:0d:0f:45:7e:55:bc:2d:9d:d2:
                    df:28:08:12:11:95:62:07:41:ea:5e:52:28:c4:a6:
                    52:e1:92:a5:da:5a:c7:d2:3b:46:9a:8c:f8:e4:aa:
                    fb:14:a2:a9:93:ba:11:ea:ff:3b:80:6b:ed:d8:bb:
                    dc:fc:20:4f:84:38:20:ef:0e:58:b6:9e:19:9c:62:
                    fc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl

            X509v3 Authority Key Identifier:
                keyid:92:3F:C0:B4:62:A6:2F:B6:14:8F:72:2F:7F:3B:0F:C1:B5:CC:F1:E9

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:296::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400817

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:0c:51:f8:06:cc:bd:07:13:81:84:1b:d9:f5:3a:dd:2d:f8:
         bd:8a:fd:fe:55:f9:c4:45:a2:a2:71:4f:b2:4f:30:66:39:c1:
         a9:e1:83:5e:bf:72:1f:63:14:e2:73:3a:78:e6:8b:bb:fd:2e:
         e4:ec:06:6f:b5:26:12:5b:dc:9e:48:f8:39:86:f1:92:8f:64:
         83:7b:77:99:33:bf:dc:43:65:07:c0:87:f9:e5:2c:e0:49:38:
         10:79:bb:d6:de:ef:a4:bc:03:8f:39:af:d2:f6:f9:9d:d7:d5:
         cc:10:61:a2:9e:a6:b9:6e:d3:a3:31:96:d9:9b:8b:78:ec:50:
         ba:4c:66:a4:2c:02:bf:3a:c0:53:20:48:dc:2c:0b:46:6a:c8:
         cd:56:63:24:33:1d:d5:ad:8b:0b:e0:6b:69:60:89:8a:14:20:
         03:32:0a:29:76:47:6d:fc:65:ca:25:e6:d1:0d:dc:1f:b5:a4:
         14:a9:04:3e:59:9d:ff:8f:dc:d2:6d:05:54:79:57:aa:f9:89:
         7b:58:28:69:cb:05:df:52:7c:a6:17:ca:c4:fd:9b:57:70:5c:
         82:9b:77:18:3f:1a:ce:3e:81:79:d8:1c:7c:20:a7:4b:e0:0e:
         ae:bd:86:05:ac:a3:8b:c5:77:6b:3c:32:8a:6c:29:27:8f:84:
         d8:64:90:1d
-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgIUAQ0Mn0MoWEd2Esq1pQmpdePBs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWE5YWRlNWUtNmZmNi00YWU1LThkNWUtNWRiM2M5ZGU5
NGRjMB4XDTI0MTAwNzEwMjMxMloXDTI3MDExMDExMjMxMlowPTE7MDkGA1UEAxMy
OTBiNjkyODZkMTEyZjVkOGVkMzRjZjJhZjUwZGU1NzZkY2I5NGQxODlhMmFjOWUx
OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGznXcf/haIi8tTyt
WtB1OPN0oGTJOitiUOS6deKmv3jNVcWsrb6B49X/FeCtUppdRRjXZpgEi0WDn/zo
ySMFvMwnyKBNVPx6Vm0dmoKpqbMXYL/jI+2sv59K+y9jV99i2TYEEgUG7Y8yL5Xj
Bs+eLjVBHw34yAXP1zMC0fGT4hH+0GVHPCQqaPjMvalTthtmvthXHnWnUiXWlj7f
Kd0W4hsAQiCf9rblycr2W92sPw7EylFTkEvHGw0PRX5VvC2d0t8oCBIRlWIHQepe
UijEplLhkqXaWsfSO0aajPjkqvsUoqmTuhHq/zuAa+3Yu9z8IE+EOCDvDli2nhmc
Yvy5AgMBAAGjggPCMIIDvjAdBgNVHQ4EFgQUGB1JaLVQmBlSwxgwGrLUwQ9/NN0w
ggEiBggrBgEFBQcBCwSCARQwggEQMFMGCCsGAQUFBzAFhkdyc3luYzovL3Jwa2kt
cnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NjkzZjA2MDAxODZlNGYz
NWEwMDUxNDQvMDCBgAYIKwYBBQUHMAqGdHJzeW5jOi8vcnBraS1ycHMuYXJpbi5u
ZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2OTNmMDYwMDE4NmU0ZjM1YTAwNTE0NC8w
LzE4MUQ0OTY4QjU1MDk4MTk1MkMzMTgzMDFBQjJENEMxMEY3RjM0REQubWZ0MDYG
CCsGAQUFBzANhipodHRwczovL3JyZHAtcnBzLmFyaW4ubmV0L25vdGlmaWNhdGlv
bi54bWwwDwYDVR0TAQH/BAUwAwEB/zCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHF
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1iM2Nj
LTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWE5YWRlNWUtNmZmNi00YWU1LThkNWUt
NWRiM2M5ZGU5NGRjL2FhOWFkZTVlLTZmZjYtNGFlNS04ZDVlLTVkYjNjOWRlOTRk
Yy5jcmwwHwYDVR0jBBgwFoAUkj/AtGKmL7YUj3IvfzsPwbXM8ekwDgYDVR0PAQH/
BAQDAgEGMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzov
L3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEt
ZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1i
ZGE3LTFiZTIwNDkzM2FlNS9hYTlhZGU1ZS02ZmY2LTRhZTUtOGQ1ZS01ZGIzYzlk
ZTk0ZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIClgAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDBh2xMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABIMUfgGzL0HE4GEG9n1
Ot0t+L2K/f5V+cRFoqJxT7JPMGY5wanhg16/ch9jFOJzOnjmi7v9LuTsBm+1JhJb
3J5I+DmG8ZKPZIN7d5kzv9xDZQfAh/nlLOBJOBB5u9be76S8A485r9L2+Z3X1cwQ
YaKeprlu06Mxltmbi3jsULpMZqQsAr86wFMgSNwsC0ZqyM1WYyQzHdWtiwvga2lg
iYoUIAMyCil2R238Zcol5tEN3B+1pBSpBD5Znf+P3NJtBVR5V6r5iXtYKGnLBd9S
fKYXysT9m1dwXIKbdxg/Gs4+gXnYHHwgp0vgDq69hgWso4vFd2s8MopsKSePhNhk
kB0=
-----END CERTIFICATE-----