Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd.cer
File:                     c28b7c13-301c-47fc-b39b-2201e763c4dd.cer (raw, json)
Hash identifier:          VsL2Seq45eYlshwhfQgJJMtER7bGbyuDxfO1ji0pN4E=
Subject key identifier:   E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285845899B9B8A9819B4E5A657BD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 14 Apr 2024 00:45:20 +0000
Certificate not after:    Sat 18 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 30256
                          IP: 2620:21:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:89:9b:9b:8a:98:19:b4:e5:a6:57:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Apr 14 00:45:20 2024 GMT
            Not After : Jul 18 00:45:20 2026 GMT
        Subject: CN=c28b7c13-301c-47fc-b39b-2201e763c4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:24:10:2c:b7:e8:7e:02:10:c9:d8:d7:63:20:
                    ba:e6:71:79:59:89:07:cf:72:19:0b:6a:85:09:77:
                    dd:a6:91:21:ed:e9:85:8e:fa:42:c1:b0:2c:f1:64:
                    8a:5d:a9:13:ab:e0:39:18:f5:27:f2:a8:74:9e:67:
                    94:77:ea:78:fa:36:58:e7:98:37:3f:f8:60:9b:45:
                    d4:28:fc:75:04:f3:6f:f8:09:e4:8b:1e:89:87:66:
                    c1:68:aa:7c:fa:ad:36:c3:3f:5e:57:5f:53:39:49:
                    ba:0a:28:06:e9:16:33:7a:cc:75:bd:21:c6:07:59:
                    b6:a5:7c:ce:ef:71:6a:95:fc:0d:56:35:be:c5:cf:
                    55:59:c6:00:57:cd:23:34:0d:68:dd:cb:18:d7:f0:
                    09:07:76:ed:17:fe:50:f6:76:f0:e6:2f:ed:d6:ff:
                    6b:c3:bd:78:2e:7a:9c:38:ec:a8:d7:7c:70:2f:8b:
                    35:f0:40:d0:34:02:1b:be:00:47:44:e8:a7:0a:de:
                    51:11:2a:12:36:d9:c2:09:bb:96:36:f8:4c:a5:22:
                    2b:ac:90:8a:ff:a2:50:ae:04:dd:17:c2:a6:ea:9a:
                    4a:f1:50:ea:60:b6:be:c8:76:a4:48:12:21:42:ae:
                    27:cb:ca:33:37:6c:be:b4:6c:f0:4b:20:4a:3e:25:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:00:44:49:6A:F4:E0:C2:47:22:B9:1B:EC:F8:50:C2:2B:7B:AC:8A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c28b7c13-301c-47fc-b39b-2201e763c4dd/c28b7c13-301c-47fc-b39b-2201e763c4dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:21:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30256

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:23:f3:1c:80:45:e4:fc:32:4a:ac:3e:28:f2:88:07:0c:a6:
         98:5e:6d:f1:52:45:18:71:22:17:20:39:56:2b:aa:e0:ac:8d:
         94:3c:16:77:49:ff:b5:4b:33:1d:c5:c4:6e:ec:3b:cd:b6:ef:
         17:8d:b2:72:30:d9:9d:8c:55:de:21:a4:7f:6e:1f:7c:ee:2c:
         46:65:bc:d9:4d:79:16:c4:9e:56:f6:38:c8:af:eb:31:e4:2a:
         e0:ea:ac:75:63:62:37:7e:8c:61:c9:3f:fb:e5:6e:3f:4e:34:
         9d:eb:ca:05:55:08:c5:38:4c:03:26:2c:67:6c:fe:82:12:0e:
         25:02:8a:48:33:0c:00:8a:a5:74:a6:8c:13:db:89:3e:3a:de:
         07:c1:71:84:1f:39:5d:eb:85:4d:ac:8f:6e:6c:e4:0d:fe:ec:
         19:bd:af:36:bf:ff:22:3f:d4:0c:9f:95:7c:33:a3:88:37:9b:
         18:0f:1c:bc:29:88:a2:b1:9f:fb:b7:99:09:f3:0c:86:da:61:
         75:14:de:c2:29:87:f3:a1:e6:ca:eb:a6:9c:cd:ea:e7:42:f3:
         b6:22:31:5f:c5:dd:06:75:8d:70:68:74:ab:6c:b8:a0:39:e4:
         80:5f:18:0c:10:6d:a4:83:a5:d5:f3:fb:60:2e:0e:8d:46:04:
         1f:cf:ed:4a
-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEWJm5uKmBm05aZXvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTI0MDQxNDAwNDUyMFoXDTI2MDcxODAwNDUyMFowLzEtMCsGA1UEAxMk
YzI4YjdjMTMtMzAxYy00N2ZjLWIzOWItMjIwMWU3NjNjNGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiQQLLfofgIQydjXYyC65nF5WYkHz3IZC2qF
CXfdppEh7emFjvpCwbAs8WSKXakTq+A5GPUn8qh0nmeUd+p4+jZY55g3P/hgm0XU
KPx1BPNv+Ankix6Jh2bBaKp8+q02wz9eV19TOUm6CigG6RYzesx1vSHGB1m2pXzO
73FqlfwNVjW+xc9VWcYAV80jNA1o3csY1/AJB3btF/5Q9nbw5i/t1v9rw714Lnqc
OOyo13xwL4s18EDQNAIbvgBHROinCt5RESoSNtnCCbuWNvhMpSIrrJCK/6JQrgTd
F8Km6ppK8VDqYLa+yHakSBIhQq4ny8ozN2y+tGzwSyBKPiXzXwIDAQABo4IEHTCC
BBkwHQYDVR0OBBYEFOQARElq9ODCRyK5G+z4UMIre6yKMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9j
MjhiN2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAxZTc2M2M0ZGQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2MyOGI3YzEzLTMwMWMtNDdmYy1i
MzliLTIyMDFlNzYzYzRkZC9jMjhiN2MxMy0zMDFjLTQ3ZmMtYjM5Yi0yMjAxZTc2
M2M0ZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmIAAhwAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw
BAICdjAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAUCPzHIBF5PwySqw+KPKIBwymmF5t8VJFGHEiFyA5Viuq
4KyNlDwWd0n/tUszHcXEbuw7zbbvF42ycjDZnYxV3iGkf24ffO4sRmW82U15FsSe
VvY4yK/rMeQq4OqsdWNiN36MYck/++VuP040nevKBVUIxThMAyYsZ2z+ghIOJQKK
SDMMAIqldKaME9uJPjreB8FxhB85XeuFTayPbmzkDf7sGb2vNr//Ij/UDJ+VfDOj
iDebGA8cvCmIorGf+7eZCfMMhtphdRTewimH86HmyuumnM3q50LztiIxX8XdBnWN
cGh0q2y4oDnkgF8YDBBtpIOl1fP7YC4OjUYEH8/tSg==
-----END CERTIFICATE-----