Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer
File:                     78eba1b6-855c-4b4c-8ecc-23746cad1ae9.cer (raw, json)
Hash identifier:          URq+ExP18SSwf1zHndi98VSTymJy8TOYn83a8XcRTLc=
Subject key identifier:   FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858459A5BB7C4933833058D78E080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 20 Apr 2024 00:45:21 +0000
Certificate not after:    Fri 24 Jul 2026 00:45:21 +0000
Subordinate resources:    IP: 23.247.200.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9a:5b:b7:c4:93:38:33:05:8d:78:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr 20 00:45:21 2024 GMT
            Not After : Jul 24 00:45:21 2026 GMT
        Subject: CN=78eba1b6-855c-4b4c-8ecc-23746cad1ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:52:25:00:1f:50:d2:1f:4f:c1:48:60:4c:74:
                    ae:0b:0d:23:bd:b2:73:e8:53:45:3d:77:d5:43:19:
                    3c:50:37:79:9f:e2:b9:8a:7a:34:c5:2e:58:16:2f:
                    27:2a:17:55:f0:98:c1:6f:ad:e1:3f:c4:82:46:bb:
                    61:a1:0d:0f:ff:a4:22:e6:1a:cd:20:be:44:41:55:
                    e1:cb:e4:55:b4:4f:ab:18:e6:79:50:20:19:38:2c:
                    35:40:f2:23:14:f6:84:ed:5d:e3:e4:b4:01:b0:35:
                    32:ed:4a:a6:a3:a6:67:d0:da:78:5d:59:de:fa:b5:
                    9a:dd:fa:b6:df:47:d7:21:09:35:ea:da:09:9b:1f:
                    4c:51:1e:4f:58:e6:64:c8:70:79:7d:b5:8a:ef:58:
                    e0:56:51:dc:95:fd:04:a6:21:9a:33:e4:70:b1:9c:
                    9a:4c:a3:f2:e7:97:7e:7a:89:91:60:a0:c6:55:2a:
                    36:b6:5e:98:22:cc:e4:8c:e2:2a:00:62:1f:df:80:
                    64:a2:0c:10:db:ba:3b:0e:bb:85:18:1f:0f:ab:a1:
                    21:23:3c:27:c2:ae:c8:e3:31:2c:57:92:38:69:31:
                    cf:a6:9b:24:7d:d8:7f:46:cc:fb:db:b7:d1:23:25:
                    e0:24:24:8d:0f:f2:28:c0:5c:4e:bd:fe:2b:a1:f5:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4A:C7:EE:73:45:70:7E:5D:45:E6:3E:B4:00:C9:8F:19:66:3E:B7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78eba1b6-855c-4b4c-8ecc-23746cad1ae9/78eba1b6-855c-4b4c-8ecc-23746cad1ae9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ee:72:0e:cb:51:95:5b:3f:9f:9f:45:0f:59:7d:56:b2:88:
         01:64:ff:3e:ae:75:f0:ba:5d:66:0c:2a:59:ca:6c:30:69:75:
         ee:f8:82:f5:b4:99:2f:53:de:cf:f9:ae:2d:73:5b:4f:3b:a5:
         4a:22:52:3c:49:b5:07:54:05:56:24:78:c8:85:25:ab:ce:db:
         ac:a9:df:6a:9e:86:43:19:67:4a:83:84:17:ab:07:5d:2a:e8:
         b0:82:c8:76:e5:ab:c1:8b:6b:ca:88:4e:ef:a2:21:79:82:38:
         c2:e3:b7:c2:30:40:cb:91:48:32:0c:a8:f1:f5:88:d3:c6:b2:
         2b:9c:f7:51:b3:10:00:a0:3f:5b:fd:11:84:c2:a0:ff:64:58:
         f4:ce:bd:f1:62:5f:78:ef:c5:9b:d5:54:0d:a7:e0:42:39:ae:
         46:03:7a:63:fa:85:17:08:41:67:04:fb:a3:56:32:5c:13:93:
         d8:47:a2:79:e4:b9:38:73:f5:05:3b:6c:c7:03:98:03:3f:31:
         47:35:34:57:8e:93:8b:82:60:47:29:eb:5c:94:cb:ba:23:9e:
         fb:67:e4:5d:65:14:dc:71:f0:98:03:a1:a6:9a:b4:83:cb:55:
         9e:a2:e0:62:ea:85:43:38:ee:34:e0:e9:03:d3:56:30:38:47:
         ec:66:61:7e
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEWaW7fEkzgzBY144IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDQyMDAwNDUyMVoXDTI2MDcyNDAwNDUyMVowLzEtMCsGA1UEAxMk
NzhlYmExYjYtODU1Yy00YjRjLThlY2MtMjM3NDZjYWQxYWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1IlAB9Q0h9PwUhgTHSuCw0jvbJz6FNFPXfV
Qxk8UDd5n+K5ino0xS5YFi8nKhdV8JjBb63hP8SCRrthoQ0P/6Qi5hrNIL5EQVXh
y+RVtE+rGOZ5UCAZOCw1QPIjFPaE7V3j5LQBsDUy7Uqmo6Zn0Np4XVne+rWa3fq2
30fXIQk16toJmx9MUR5PWOZkyHB5fbWK71jgVlHclf0EpiGaM+RwsZyaTKPy55d+
eomRYKDGVSo2tl6YIszkjOIqAGIf34BkogwQ27o7DruFGB8Pq6EhIzwnwq7I4zEs
V5I4aTHPppskfdh/Rsz727fRIyXgJCSND/IowFxOvf4rofWuEQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFP5Kx+5zRXB+XUXmPrQAyY8ZZj63MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83
OGViYTFiNi04NTVjLTRiNGMtOGVjYy0yMzc0NmNhZDFhZTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc4ZWJhMWI2LTg1NWMtNGI0Yy04
ZWNjLTIzNzQ2Y2FkMWFlOS83OGViYTFiNi04NTVjLTRiNGMtOGVjYy0yMzc0NmNh
ZDFhZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIX98gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIu5yDstRlVs/n59FD1l9
VrKIAWT/Pq518LpdZgwqWcpsMGl17viC9bSZL1Pez/muLXNbTzulSiJSPEm1B1QF
ViR4yIUlq87brKnfap6GQxlnSoOEF6sHXSrosILIduWrwYtryohO76IheYI4wuO3
wjBAy5FIMgyo8fWI08ayK5z3UbMQAKA/W/0RhMKg/2RY9M698WJfeO/Fm9VUDafg
QjmuRgN6Y/qFFwhBZwT7o1YyXBOT2EeieeS5OHP1BTtsxwOYAz8xRzU0V46Ti4Jg
RynrXJTLuiOe+2fkXWUU3HHwmAOhppq0g8tVnqLgYuqFQzjuNODpA9NWMDhH7GZh
fg==
-----END CERTIFICATE-----