Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b9a38e-cc3c-40ef-a8d3-d74cb6c986cc.cer
File:                     31b9a38e-cc3c-40ef-a8d3-d74cb6c986cc.cer (raw, json)
Hash identifier:          B0zVUJqQ9UzB/xn5VTx5Tk/hs2lP/KeQ2LtaMQQvqRA=
Subject key identifier:   E9:5A:63:DE:6D:E4:1C:56:B3:53:17:72:51:FA:AA:8D:D5:85:EC:6D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858442CC1D470A2BB31D9FEE24A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b9a38e-cc3c-40ef-a8d3-d74cb6c986cc/31b9a38e-cc3c-40ef-a8d3-d74cb6c986cc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b9a38e-cc3c-40ef-a8d3-d74cb6c986cc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Dec 2023 01:45:15 +0000
Certificate not after:    Sun 15 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 54351
                          IP: 142.202.96.0/22
                          IP: 162.210.56.0/22
                          IP: 172.82.48.0/22
                          IP: 207.174.16.0/22
                          IP: 2604:2b80::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2c:c1:d4:70:a2:bb:31:d9:fe:e2:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Dec 11 01:45:15 2023 GMT
            Not After : Mar 15 00:45:15 2026 GMT
        Subject: CN=31b9a38e-cc3c-40ef-a8d3-d74cb6c986cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:2a:51:52:fb:2d:e5:1e:62:3b:46:39:2c:
                    b3:a7:67:41:4c:82:1b:ec:3b:4a:e7:5d:75:11:64:
                    c0:ef:f8:5c:b6:2f:cd:36:ae:b8:ac:91:11:0f:64:
                    2e:63:2d:6f:3a:6c:6c:b6:62:8b:71:0e:bc:81:a2:
                    4a:53:9b:6e:66:12:92:8e:82:22:50:bf:00:77:2e:
                    d6:ad:6a:93:81:00:0e:e6:86:57:7c:c0:b9:fb:15:
                    f7:1e:5d:e5:1f:99:b9:f3:ed:c1:35:d4:ea:d8:21:
                    e0:79:9a:5d:98:5d:6d:6a:ab:a8:55:3a:84:6e:bf:
                    da:31:16:23:86:f8:a3:21:92:1c:ad:8c:bb:ec:d8:
                    db:9c:62:20:68:56:87:cb:36:49:fa:1f:b1:82:7c:
                    7b:07:ba:96:70:50:e3:76:94:07:5b:03:6f:9c:7d:
                    54:c6:91:18:9e:f3:ec:0b:90:9a:ae:ac:01:b7:3a:
                    57:a0:b5:2d:aa:32:b7:95:3b:8d:07:5f:a9:34:a3:
                    c6:cf:ce:6e:16:7a:94:33:d9:19:32:2e:8a:79:49:
                    10:1a:36:c2:ad:4f:fe:34:17:e5:ff:53:9d:8e:6c:
                    ec:09:ab:2e:b3:5b:21:0e:7b:6c:96:67:1d:1d:75:
                    cb:32:f6:92:0c:d5:b5:40:0b:f7:49:9d:37:8c:7a:
                    8a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5A:63:DE:6D:E4:1C:56:B3:53:17:72:51:FA:AA:8D:D5:85:EC:6D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b9a38e-cc3c-40ef-a8d3-d74cb6c986cc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/31b9a38e-cc3c-40ef-a8d3-d74cb6c986cc/31b9a38e-cc3c-40ef-a8d3-d74cb6c986cc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.96.0/22
                  162.210.56.0/22
                  172.82.48.0/22
                  207.174.16.0/22
                IPv6:
                  2604:2b80::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54351

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:50:c3:4b:12:85:c3:50:f2:d9:36:14:27:d6:ec:61:9b:
         49:7e:6c:51:df:b3:6e:95:ce:d2:b5:9c:cd:6d:08:6c:35:b4:
         f0:6a:a5:07:c4:d5:ae:4d:2c:63:5d:a9:fa:42:e5:d3:fd:57:
         f0:db:fb:ea:46:ef:8a:79:e0:c4:1c:93:0c:0e:04:0e:05:8a:
         ae:50:4a:ea:65:73:bf:ca:3a:28:4b:f8:67:28:ff:ab:da:77:
         4f:9b:f7:44:7b:f5:23:b3:a5:b7:6c:76:53:49:14:c3:62:d5:
         1c:c2:18:7a:f0:09:fb:8a:69:bb:9c:b3:5b:3d:ae:8e:7b:20:
         1e:b5:76:fd:c9:05:d3:38:32:4c:c3:c4:23:76:02:e2:7a:9f:
         d6:52:8b:d1:2c:da:8a:8b:c6:31:6b:d1:4b:51:a2:4c:7a:e3:
         5a:22:4e:e5:28:fa:e4:2e:96:41:9a:c5:1f:92:e3:da:7f:19:
         20:43:41:81:a3:52:39:2f:f9:46:d4:75:ec:5a:a4:12:56:7b:
         91:56:57:7b:a3:5e:3a:d3:fb:a1:99:47:00:cf:00:7f:9a:b9:
         1f:a0:7d:e2:73:eb:c6:a3:4a:bc:00:68:f1:1b:69:64:18:fa:
         11:29:d6:2c:8b:33:31:b6:54:ad:d7:6a:a0:08:29:fc:07:be:
         6a:8b:53:fd
-----BEGIN CERTIFICATE-----
MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEQswdRworsx2f7iSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMTIxMTAxNDUxNVoXDTI2MDMxNTAwNDUxNVowLzEtMCsGA1UEAxMk
MzFiOWEzOGUtY2MzYy00MGVmLWE4ZDMtZDc0Y2I2Yzk4NmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAUqUVL7LeUeYjtGOSyzp2dBTIIb7DtK5111
EWTA7/hcti/NNq64rJERD2QuYy1vOmxstmKLcQ68gaJKU5tuZhKSjoIiUL8Ady7W
rWqTgQAO5oZXfMC5+xX3Hl3lH5m58+3BNdTq2CHgeZpdmF1taquoVTqEbr/aMRYj
hvijIZIcrYy77NjbnGIgaFaHyzZJ+h+xgnx7B7qWcFDjdpQHWwNvnH1UxpEYnvPs
C5CarqwBtzpXoLUtqjK3lTuNB1+pNKPGz85uFnqUM9kZMi6KeUkQGjbCrU/+NBfl
/1OdjmzsCasus1shDntslmcdHXXLMvaSDNW1QAv3SZ03jHqKNQIDAQABo4IEPTCC
BDkwHQYDVR0OBBYEFOlaY95t5BxWs1MXclH6qo3VhextMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z
MWI5YTM4ZS1jYzNjLTQwZWYtYThkMy1kNzRjYjZjOTg2Y2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzMxYjlhMzhlLWNjM2MtNDBlZi1h
OGQzLWQ3NGNiNmM5ODZjYy8zMWI5YTM4ZS1jYzNjLTQwZWYtYThkMy1kNzRjYjZj
OTg2Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwQQYIKwYBBQUH
AQcBAf8EMjAwMB4EAgABMBgDBAKOymADBAKi0jgDBAKsUjADBALPrhAwDgQCAAIw
CAMGBCYEK4AAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDUTzBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBF
4VDDSxKFw1Dy2TYUJ9bsYZtJfmxR37Nulc7StZzNbQhsNbTwaqUHxNWuTSxjXan6
QuXT/Vfw2/vqRu+KeeDEHJMMDgQOBYquUErqZXO/yjooS/hnKP+r2ndPm/dEe/Uj
s6W3bHZTSRTDYtUcwhh68An7imm7nLNbPa6OeyAetXb9yQXTODJMw8QjdgLiep/W
UovRLNqKi8Yxa9FLUaJMeuNaIk7lKPrkLpZBmsUfkuPafxkgQ0GBo1I5L/lG1HXs
WqQSVnuRVld7o1460/uhmUcAzwB/mrkfoH3ic+vGo0q8AGjxG2lkGPoRKdYsizMx
tlSt12qgCCn8B75qi1P9
-----END CERTIFICATE-----