Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6758df5c-8f8d-4300-9c75-82c8803200f2.cer
File:                     6758df5c-8f8d-4300-9c75-82c8803200f2.cer (raw, json)
Hash identifier:          uhsP1RgAKB6S5Y3SWJVtnkae/GrYMVT1WrJjucig2CQ=
Subject key identifier:   9E:6A:0A:3C:5F:EE:32:3D:2E:42:52:93:77:27:1A:95:97:75:DF:38
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858477C3C1FE08D6427D0B563A280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6758df5c-8f8d-4300-9c75-82c8803200f2/6758df5c-8f8d-4300-9c75-82c8803200f2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6758df5c-8f8d-4300-9c75-82c8803200f2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 09 Oct 2024 15:21:20 +0000
Certificate not after:    Mon 11 Jan 2027 21:45:47 +0000
Subordinate resources:    AS: 62568
                          IP: 205.134.32.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7c:3c:1f:e0:8d:64:27:d0:b5:63:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Oct  9 15:21:20 2024 GMT
            Not After : Jan 11 21:45:47 2027 GMT
        Subject: CN=6758df5c-8f8d-4300-9c75-82c8803200f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:ff:6d:aa:1b:ab:6b:48:93:03:24:7a:e3:
                    8d:db:d3:5c:aa:54:5c:c5:5c:9e:a8:7b:d8:56:42:
                    8b:1c:c5:91:11:3d:00:85:49:09:f1:da:e3:d3:36:
                    7a:12:ac:38:c6:07:c9:d5:28:78:8c:9f:0a:da:62:
                    ff:5b:ea:80:8d:42:13:3e:39:a9:e5:37:6b:76:bc:
                    3e:96:75:c0:77:c3:a3:91:0d:ab:a8:6a:4c:e4:80:
                    35:cf:a1:36:35:2a:e2:65:f5:2c:b7:2c:6c:83:98:
                    aa:21:63:78:c1:0a:22:86:5f:8a:37:48:ca:38:ea:
                    3d:9d:6b:ee:e0:d7:15:54:8a:cb:93:60:47:6b:f2:
                    dd:60:8d:83:c4:52:74:6b:28:ec:d7:a2:9a:66:06:
                    f1:d7:eb:10:b0:65:7f:cf:32:31:7f:09:f1:b2:92:
                    49:46:d0:f2:34:54:6d:d9:62:51:93:a5:9b:4a:f7:
                    9e:ab:c8:20:2c:1a:83:2c:d7:5f:7e:2c:d1:e0:4c:
                    ae:e9:8e:75:22:29:4d:13:0a:8f:d9:95:ab:f4:e3:
                    d9:28:52:f8:a2:10:b2:e8:2f:b8:57:28:07:5b:92:
                    21:d6:87:eb:ff:9d:be:9c:ab:6c:d5:ff:81:f4:9c:
                    2d:4c:c7:8d:9a:7f:ca:a5:22:f1:a3:52:2f:38:2e:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6A:0A:3C:5F:EE:32:3D:2E:42:52:93:77:27:1A:95:97:75:DF:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6758df5c-8f8d-4300-9c75-82c8803200f2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6758df5c-8f8d-4300-9c75-82c8803200f2/6758df5c-8f8d-4300-9c75-82c8803200f2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.32.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62568

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:36:5b:e7:17:01:4e:58:88:bb:57:e6:82:2e:81:95:49:18:
         05:d0:44:63:72:e0:e6:e2:bf:5d:8b:3c:0e:94:01:73:45:dd:
         62:88:3b:99:2c:02:4d:ec:03:62:73:ae:8b:e5:0c:4c:e2:fb:
         b8:b3:2e:54:2a:98:4c:0c:1b:9b:dd:94:62:9a:7b:19:18:a1:
         16:00:72:a7:1e:5b:e3:3b:8e:98:51:7a:04:73:2b:c2:66:9d:
         cb:fb:c0:33:14:bd:63:5d:45:d1:d4:98:0b:fd:5c:69:33:a7:
         a1:b6:54:6c:3c:ef:41:e8:c5:b3:e7:d2:6f:11:8b:dc:25:b7:
         6e:b4:ca:b2:4a:f3:9f:85:3f:3b:a0:f0:f6:57:70:fd:33:a4:
         7e:44:85:c6:b9:54:f1:51:60:86:84:ac:0e:90:6b:e6:f8:49:
         b1:35:b2:82:c4:5b:42:4a:d6:2d:75:cc:4c:0e:26:58:f5:e5:
         58:40:18:cf:69:e7:9b:73:a3:d8:05:b2:4c:ed:c6:e8:66:95:
         55:7b:5c:b3:32:ef:c1:06:0b:1b:8c:ec:8b:ed:b2:71:ab:0d:
         ce:26:bb:7b:8f:5c:d3:be:cc:e2:da:2b:65:0f:95:6e:0f:db:
         3c:43:dd:70:2a:b3:e7:46:8d:2b:57:31:fd:94:0e:12:5d:3e:
         e2:34:12:af
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEd8PB/gjWQn0LVjooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI0MTAwOTE1MjEyMFoXDTI3MDExMTIxNDU0N1owLzEtMCsGA1UEAxMk
Njc1OGRmNWMtOGY4ZC00MzAwLTljNzUtODJjODgwMzIwMGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkD/baobq2tIkwMkeuON29NcqlRcxVyeqHvY
VkKLHMWRET0AhUkJ8drj0zZ6Eqw4xgfJ1Sh4jJ8K2mL/W+qAjUITPjmp5Tdrdrw+
lnXAd8OjkQ2rqGpM5IA1z6E2NSriZfUstyxsg5iqIWN4wQoihl+KN0jKOOo9nWvu
4NcVVIrLk2BHa/LdYI2DxFJ0ayjs16KaZgbx1+sQsGV/zzIxfwnxspJJRtDyNFRt
2WJRk6WbSveeq8ggLBqDLNdffizR4Eyu6Y51IilNEwqP2ZWr9OPZKFL4ohCy6C+4
VygHW5Ih1ofr/52+nKts1f+B9JwtTMeNmn/KpSLxo1IvOC46GwIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFJ5qCjxf7jI9LkJSk3cnGpWXdd84MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82
NzU4ZGY1Yy04ZjhkLTQzMDAtOWM3NS04MmM4ODAzMjAwZjIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY3NThkZjVjLThmOGQtNDMwMC05
Yzc1LTgyYzg4MDMyMDBmMi82NzU4ZGY1Yy04ZjhkLTQzMDAtOWM3NS04MmM4ODAz
MjAwZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAXNhiAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
APRoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADQ2W+cXAU5YiLtX5oIugZVJGAXQRGNy4Obiv12LPA6UAXNF
3WKIO5ksAk3sA2JzrovlDEzi+7izLlQqmEwMG5vdlGKaexkYoRYAcqceW+M7jphR
egRzK8Jmncv7wDMUvWNdRdHUmAv9XGkzp6G2VGw870HoxbPn0m8Ri9wlt260yrJK
85+FPzug8PZXcP0zpH5Ehca5VPFRYIaErA6Qa+b4SbE1soLEW0JK1i11zEwOJlj1
5VhAGM9p55tzo9gFskztxuhmlVV7XLMy78EGCxuM7IvtsnGrDc4mu3uPXNO+zOLa
K2UPlW4P2zxD3XAqs+dGjStXMf2UDhJdPuI0Eq8=
-----END CERTIFICATE-----