Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91.cer
File:                     750854da-6a6d-4f9f-a9f0-b7000e95cc91.cer (raw, json)
Hash identifier:          YKpxTiRk/C6oFvJOwf+oYxrp17YEjtFBMa5ozOlsvmg=
Subject key identifier:   7F:C4:FA:69:BC:F6:B3:38:57:46:2A:07:83:94:A8:3C:EC:40:80:FF
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285844E7CDB633206133D3DA817080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/750854da-6a6d-4f9f-a9f0-b7000e95cc91.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 16 Feb 2024 01:45:21 +0000
Certificate not after:    Thu 21 May 2026 00:45:21 +0000
Subordinate resources:    AS: 11927
                          IP: 69.2.96.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e7:cd:b6:33:20:61:33:d3:da:81:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 16 01:45:21 2024 GMT
            Not After : May 21 00:45:21 2026 GMT
        Subject: CN=750854da-6a6d-4f9f-a9f0-b7000e95cc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:36:b2:53:86:2f:b0:ea:cd:ce:bf:d9:31:
                    1c:09:6d:94:38:4c:b0:64:c4:1b:58:4c:b9:e1:bf:
                    9d:f0:f6:25:bb:b0:9e:02:84:80:45:c8:aa:29:75:
                    f5:2a:62:77:ac:09:8b:ed:f7:bb:bb:3c:36:db:59:
                    e8:3c:13:7e:2f:ed:0a:13:a5:cf:b7:67:f8:21:d8:
                    da:78:d2:f1:77:48:ee:dc:59:c7:cc:b0:93:0e:64:
                    c8:be:57:86:63:c0:51:94:8c:f3:b5:ce:04:4e:ce:
                    88:e7:b4:a3:a6:b6:23:d2:a3:4f:90:5d:66:59:20:
                    7e:ab:fa:7e:81:64:72:69:e8:f4:49:44:5b:d4:cf:
                    85:4c:5f:d8:ee:ef:bb:b8:6e:98:35:e4:b4:c6:1c:
                    f9:80:ba:cf:ac:fc:b8:c9:f9:e2:07:50:bf:fa:63:
                    f9:40:82:fd:aa:e1:66:21:a1:dd:93:42:23:e4:51:
                    87:ea:9d:83:41:6a:69:43:7b:87:d8:e5:ee:de:94:
                    69:56:8e:ff:c5:8b:23:eb:be:a5:e1:a3:ae:a3:c5:
                    06:53:39:83:9c:da:1e:da:24:9e:51:00:09:26:ca:
                    ac:ca:a3:6f:92:75:6d:8f:e8:b4:df:71:42:ed:c8:
                    7f:42:fe:54:41:9f:5b:91:4f:2b:17:7a:3a:8f:57:
                    7d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C4:FA:69:BC:F6:B3:38:57:46:2A:07:83:94:A8:3C:EC:40:80:FF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/750854da-6a6d-4f9f-a9f0-b7000e95cc91/750854da-6a6d-4f9f-a9f0-b7000e95cc91.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.2.96.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11927

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e7:9e:af:db:ae:25:33:c8:d3:25:91:3a:e4:11:be:44:32:
         ca:5f:24:26:47:fd:13:35:a5:13:3b:48:2f:ee:a1:7d:78:e0:
         06:34:78:85:b1:69:d1:6f:5c:e7:a3:03:8c:29:eb:6e:9d:3c:
         85:22:a3:1b:30:83:b7:59:d7:10:d9:23:16:a1:03:3b:7a:0e:
         bd:ba:3f:f4:4d:7e:6f:df:3b:b7:09:f6:71:27:27:cf:ef:71:
         84:93:f4:39:1a:fc:a0:65:d8:c5:73:75:e5:78:54:dc:b9:c7:
         94:1b:20:7f:d1:e2:5a:e4:1e:dd:56:60:bc:a2:fe:6f:90:0e:
         86:5f:00:f2:c2:a1:40:48:a3:10:73:e8:4a:7c:52:55:a3:ba:
         25:fc:af:44:dd:1a:9c:1d:cc:28:fe:4e:cd:da:bd:de:a0:c4:
         a3:b2:31:66:78:68:b6:32:ab:5b:a8:d8:7b:19:20:3a:07:55:
         68:20:e7:c9:81:5a:f3:13:8f:87:ae:d7:14:1a:18:dd:a4:94:
         7b:01:4c:e4:8c:6d:60:14:21:8c:51:00:d7:6f:8f:b1:2f:18:
         72:a7:10:b7:78:4d:67:7e:95:45:f6:59:8c:96:9f:5d:ec:2e:
         f6:ab:cb:74:7c:eb:60:52:f3:6f:b6:0d:05:39:e3:d1:94:39:
         11:d8:46:db
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWETnzbYzIGEz09qBcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI0MDIxNjAxNDUyMVoXDTI2MDUyMTAwNDUyMVowLzEtMCsGA1UEAxMk
NzUwODU0ZGEtNmE2ZC00ZjlmLWE5ZjAtYjcwMDBlOTVjYzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQs2slOGL7Dqzc6/2TEcCW2UOEywZMQbWEy5
4b+d8PYlu7CeAoSARciqKXX1KmJ3rAmL7fe7uzw221noPBN+L+0KE6XPt2f4Idja
eNLxd0ju3FnHzLCTDmTIvleGY8BRlIzztc4ETs6I57SjprYj0qNPkF1mWSB+q/p+
gWRyaej0SURb1M+FTF/Y7u+7uG6YNeS0xhz5gLrPrPy4yfniB1C/+mP5QIL9quFm
IaHdk0Ij5FGH6p2DQWppQ3uH2OXu3pRpVo7/xYsj676l4aOuo8UGUzmDnNoe2iSe
UQAJJsqsyqNvknVtj+i033FC7ch/Qv5UQZ9bkU8rF3o6j1d9DwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFH/E+mm89rM4V0YqB4OUqDzsQID/MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83
NTA4NTRkYS02YTZkLTRmOWYtYTlmMC1iNzAwMGU5NWNjOTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzc1MDg1NGRhLTZhNmQtNGY5Zi1h
OWYwLWI3MDAwZTk1Y2M5MS83NTA4NTRkYS02YTZkLTRmOWYtYTlmMC1iNzAwMGU5
NWNjOTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAVFAmAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
LpcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAjueer9uuJTPI0yWROuQRvkQyyl8kJkf9EzWlEztIL+6hfXjg
BjR4hbFp0W9c56MDjCnrbp08hSKjGzCDt1nXENkjFqEDO3oOvbo/9E1+b987twn2
cScnz+9xhJP0ORr8oGXYxXN15XhU3LnHlBsgf9HiWuQe3VZgvKL+b5AOhl8A8sKh
QEijEHPoSnxSVaO6JfyvRN0anB3MKP5Ozdq93qDEo7IxZnhotjKrW6jYexkgOgdV
aCDnyYFa8xOPh67XFBoY3aSUewFM5IxtYBQhjFEA12+PsS8YcqcQt3hNZ36VRfZZ
jJafXewu9qvLdHzrYFLzb7YNBTnj0ZQ5EdhG2w==
-----END CERTIFICATE-----