Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe.cer
File:                     eb6a308e-64bb-4558-9b03-6b4c190d86fe.cer (raw, json)
Hash identifier:          O/G0S5/z+ebr5HqMFl+OQNn9ltYTc+4ZG0uS+W8WrsQ=
Subject key identifier:   82:D6:3E:6A:B5:BA:0C:E7:18:E2:5B:46:CC:81:C0:7D:9B:21:AB:F0
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584687A7D908F9EFA894903E9B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/eb6a308e-64bb-4558-9b03-6b4c190d86fe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 14 Jul 2024 00:45:20 +0000
Certificate not after:    Sat 17 Oct 2026 00:45:20 +0000
Subordinate resources:    AS: 63473
                          IP: 45.45.216.0/22
                          IP: 134.195.88.0/22
                          IP: 170.205.36.0/22
                          IP: 2605:4840::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:87:a7:d9:08:f9:ef:a8:94:90:3e:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jul 14 00:45:20 2024 GMT
            Not After : Oct 17 00:45:20 2026 GMT
        Subject: CN=eb6a308e-64bb-4558-9b03-6b4c190d86fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1a:72:8e:12:ec:9d:89:13:6e:7b:8c:f1:af:
                    40:85:7a:f5:48:30:43:4e:a0:17:31:fc:2d:45:fc:
                    37:46:d5:a8:c9:2b:a6:61:e5:d8:fb:d3:e6:5c:e8:
                    45:54:c0:59:c9:06:a7:2d:ef:c1:28:b9:bc:f9:29:
                    b9:3a:72:af:9a:62:c3:53:2d:41:a7:89:61:ee:39:
                    cf:8f:66:34:39:12:ee:d7:38:f4:4c:ee:a8:62:6a:
                    bd:dc:7e:0b:47:e7:c2:87:36:ee:ca:86:5e:ea:4c:
                    91:f8:f7:cf:da:d6:c0:e4:88:b0:05:3b:0b:ae:dd:
                    8c:09:86:a5:4e:3b:f3:9f:43:7c:06:16:77:81:04:
                    cd:52:90:fa:73:e8:17:33:67:11:95:68:ba:eb:a3:
                    11:b9:32:a0:0d:51:28:ab:17:67:08:48:d8:d5:6a:
                    0e:4b:28:cd:c7:64:72:9b:24:86:5a:cb:a3:99:e0:
                    a7:a7:f5:c9:9e:db:74:cc:f7:3d:c2:82:53:49:3d:
                    d2:fd:37:53:0a:fe:f6:f0:0d:1e:f7:86:3d:4b:36:
                    06:c4:c0:17:6c:e9:8d:09:06:50:bd:b4:0f:cb:d3:
                    a7:ed:81:1f:83:7d:1b:3e:5a:ba:0c:c4:a6:ce:2d:
                    ec:f8:10:0b:0f:56:d6:53:2a:ff:47:56:2c:4c:bc:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D6:3E:6A:B5:BA:0C:E7:18:E2:5B:46:CC:81:C0:7D:9B:21:AB:F0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/eb6a308e-64bb-4558-9b03-6b4c190d86fe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.216.0/22
                  134.195.88.0/22
                  170.205.36.0/22
                IPv6:
                  2605:4840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63473

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:83:81:44:b4:20:08:30:bb:1c:22:a5:d4:f9:de:46:b8:b3:
         5d:54:fd:a5:10:db:bf:2d:7d:d4:13:4f:5d:90:8a:f5:f4:fc:
         9c:61:fb:1d:e1:0f:ac:fb:ef:80:23:b7:f5:61:af:4e:36:2b:
         4f:6e:6e:b9:35:fa:5f:a8:8c:f0:6d:0a:cd:73:0e:54:e7:4a:
         57:25:fe:26:7f:75:15:4b:69:14:2b:6e:07:44:30:13:aa:2c:
         aa:68:a3:3e:3d:4e:9d:4d:2c:39:37:38:a6:65:93:d9:57:1d:
         c1:52:f4:f1:9c:bf:1d:c1:b0:02:ac:db:e1:34:ec:f2:24:d9:
         df:cb:40:57:8a:3c:e3:be:c9:8f:c0:87:29:6d:05:20:f5:e9:
         31:06:cb:f2:ac:7f:81:c1:36:92:ff:81:c2:6c:b4:9c:d5:17:
         c7:f6:d3:51:58:e8:6e:af:3b:ec:5a:52:40:8b:6c:b5:4a:bc:
         0b:32:5a:2f:1f:a5:c0:c0:be:a1:9c:33:75:04:d5:47:3f:dd:
         88:23:cb:02:4f:b9:57:fa:f7:ce:29:9c:0c:6a:be:c5:b0:07:
         c5:4c:d3:03:37:6b:e3:17:cb:5d:eb:2d:36:87:f7:36:66:bb:
         c8:33:71:22:17:15:3f:21:8c:6c:a4:c5:06:a3:fd:bc:3e:43:
         0c:44:a9:9a
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEaHp9kI+e+olJA+mwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI0MDcxNDAwNDUyMFoXDTI2MTAxNzAwNDUyMFowLzEtMCsGA1UEAxMk
ZWI2YTMwOGUtNjRiYi00NTU4LTliMDMtNmI0YzE5MGQ4NmZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRpyjhLsnYkTbnuM8a9AhXr1SDBDTqAXMfwt
Rfw3RtWoySumYeXY+9PmXOhFVMBZyQanLe/BKLm8+Sm5OnKvmmLDUy1Bp4lh7jnP
j2Y0ORLu1zj0TO6oYmq93H4LR+fChzbuyoZe6kyR+PfP2tbA5IiwBTsLrt2MCYal
Tjvzn0N8BhZ3gQTNUpD6c+gXM2cRlWi666MRuTKgDVEoqxdnCEjY1WoOSyjNx2Ry
mySGWsujmeCnp/XJntt0zPc9woJTST3S/TdTCv728A0e94Y9SzYGxMAXbOmNCQZQ
vbQPy9On7YEfg30bPlq6DMSmzi3s+BALD1bWUyr/R1YsTLzgvwIDAQABo4IENjCC
BDIwHQYDVR0OBBYEFILWPmq1ugznGOJbRsyBwH2bIavwMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l
YjZhMzA4ZS02NGJiLTQ1NTgtOWIwMy02YjRjMTkwZDg2ZmUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ViNmEzMDhlLTY0YmItNDU1OC05
YjAzLTZiNGMxOTBkODZmZS9lYjZhMzA4ZS02NGJiLTQ1NTgtOWIwMy02YjRjMTkw
ZDg2ZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBAItLdgDBAKGw1gDBAKqzSQwDQQCAAIwBwMFACYF
SEAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPfxMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABCDgUS0IAgw
uxwipdT53ka4s11U/aUQ278tfdQTT12QivX0/Jxh+x3hD6z774Ajt/Vhr042K09u
brk1+l+ojPBtCs1zDlTnSlcl/iZ/dRVLaRQrbgdEMBOqLKpooz49Tp1NLDk3OKZl
k9lXHcFS9PGcvx3BsAKs2+E07PIk2d/LQFeKPOO+yY/AhyltBSD16TEGy/Ksf4HB
NpL/gcJstJzVF8f201FY6G6vO+xaUkCLbLVKvAsyWi8fpcDAvqGcM3UE1Uc/3Ygj
ywJPuVf6984pnAxqvsWwB8VM0wM3a+MXy13rLTaH9zZmu8gzcSIXFT8hjGykxQaj
/bw+QwxEqZo=
-----END CERTIFICATE-----