Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b764023-240e-4aca-bba2-b6a6a526e200.cer
File:                     5b764023-240e-4aca-bba2-b6a6a526e200.cer (raw, json)
Hash identifier:          iSgn4aAGGfBQ5+usqDPHONLOwPwme0r4c2H1bDtyP1g=
Subject key identifier:   80:38:17:CF:6E:82:92:18:26:85:64:27:26:16:CE:88:B3:AF:65:BE
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F432858432BCD2CA5582B2A33BD27EE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b764023-240e-4aca-bba2-b6a6a526e200/5b764023-240e-4aca-bba2-b6a6a526e200.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b764023-240e-4aca-bba2-b6a6a526e200/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Sep 2023 00:45:21 +0000
Certificate not after:    Sat 13 Dec 2025 01:45:21 +0000
Subordinate resources:    AS: 14901
                          IP: 209.188.112.0/20
                          IP: 2602:ff85::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:2b:cd:2c:a5:58:2b:2a:33:bd:27:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Sep 10 00:45:21 2023 GMT
            Not After : Dec 13 01:45:21 2025 GMT
        Subject: CN=5b764023-240e-4aca-bba2-b6a6a526e200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:da:ec:55:50:83:6b:6e:ae:b3:a6:a2:b2:61:
                    63:37:a1:3d:ee:a2:dc:88:ed:c5:9a:ad:17:d3:15:
                    6b:8a:45:52:46:80:83:17:1e:5f:62:ea:7c:03:13:
                    ab:18:7d:e7:c8:b7:95:97:7b:d2:d4:1d:ea:7a:18:
                    e0:2d:32:bc:00:ec:bc:88:f3:a6:a2:50:99:38:b6:
                    13:aa:20:96:5a:3f:35:26:68:33:67:9c:ec:76:38:
                    41:a7:11:c0:96:5d:f9:4d:af:0c:2f:53:3e:54:98:
                    fb:d5:67:9e:2f:49:e3:0b:39:ff:90:c4:5e:37:38:
                    b5:f1:87:17:7a:44:f3:a5:52:32:06:c0:9f:e1:71:
                    1f:c1:2e:c6:7a:db:e5:c0:38:06:f1:7e:f1:03:ec:
                    84:14:15:86:c9:56:de:34:74:cb:b7:fd:ce:23:87:
                    c9:38:da:40:2a:d6:c3:0f:2f:2f:97:ef:77:42:41:
                    c9:f3:dc:06:be:02:32:e1:f6:bb:cf:df:11:f6:86:
                    4a:9e:e5:7f:2e:f5:3e:bb:54:97:16:d2:75:d8:1b:
                    16:15:e1:20:29:55:83:92:37:7b:85:a0:32:b7:cb:
                    75:c9:aa:06:92:18:bd:33:c5:f1:50:90:89:cd:bb:
                    4e:6b:cb:bd:55:99:25:e1:29:7c:cc:4c:13:4b:28:
                    d0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:38:17:CF:6E:82:92:18:26:85:64:27:26:16:CE:88:B3:AF:65:BE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b764023-240e-4aca-bba2-b6a6a526e200/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b764023-240e-4aca-bba2-b6a6a526e200/5b764023-240e-4aca-bba2-b6a6a526e200.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.112.0/20
                IPv6:
                  2602:ff85::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14901

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b7:c5:b8:92:3d:99:f8:ab:b1:44:25:9e:b9:5c:99:50:e6:
         08:40:0b:69:63:cb:0f:26:d3:53:6c:cd:06:bf:f7:c3:5a:74:
         f5:ee:5f:a0:f0:b9:6c:ac:66:84:64:de:c8:dd:e9:7f:13:e7:
         73:67:e9:43:9c:20:e1:3d:c6:db:2c:57:8a:42:50:23:fb:ea:
         dd:2d:c6:c3:51:8a:73:42:30:b6:72:c3:40:b9:9e:d3:9e:11:
         9c:55:e9:a8:e4:b9:7a:4b:d1:64:60:06:d8:e0:c5:23:3b:01:
         1c:36:1a:42:36:3e:44:34:e2:28:ed:47:88:72:72:2c:83:68:
         28:c5:45:7b:e1:63:b6:99:7d:35:53:22:b6:ae:61:1f:61:93:
         d5:7a:ed:17:14:5d:3c:a2:dd:52:03:33:8b:3d:16:12:69:bb:
         99:53:1f:1a:ca:f0:cb:de:b3:53:ff:bb:1c:34:fe:e1:95:eb:
         75:75:45:99:73:7e:54:8c:e2:6d:77:2d:17:d8:ff:90:79:6b:
         df:28:72:60:d6:fd:bd:01:1a:e6:3f:d7:09:4f:d5:60:79:5c:
         05:a0:e9:3e:ec:ec:6d:33:f4:30:c6:68:52:7f:dc:cd:26:bb:
         86:1f:6b:f4:d9:4d:76:11:66:1d:f1:cb:b4:33:cd:55:a4:2f:
         e7:c8:ba:b3
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEMrzSylWCsqM70n7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMDkxMDAwNDUyMVoXDTI1MTIxMzAxNDUyMVowLzEtMCsGA1UEAxMk
NWI3NjQwMjMtMjQwZS00YWNhLWJiYTItYjZhNmE1MjZlMjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4trsVVCDa26us6aismFjN6E97qLciO3Fmq0X
0xVrikVSRoCDFx5fYup8AxOrGH3nyLeVl3vS1B3qehjgLTK8AOy8iPOmolCZOLYT
qiCWWj81JmgzZ5zsdjhBpxHAll35Ta8ML1M+VJj71WeeL0njCzn/kMReNzi18YcX
ekTzpVIyBsCf4XEfwS7GetvlwDgG8X7xA+yEFBWGyVbeNHTLt/3OI4fJONpAKtbD
Dy8vl+93QkHJ89wGvgIy4fa7z98R9oZKnuV/LvU+u1SXFtJ12BsWFeEgKVWDkjd7
haAyt8t1yaoGkhi9M8XxUJCJzbtOa8u9VZkl4Sl8zEwTSyjQdQIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFIA4F89ugpIYJoVkJyYWzoizr2W+MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81
Yjc2NDAyMy0yNDBlLTRhY2EtYmJhMi1iNmE2YTUyNmUyMDAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzViNzY0MDIzLTI0MGUtNGFjYS1i
YmEyLWI2YTZhNTI2ZTIwMC81Yjc2NDAyMy0yNDBlLTRhY2EtYmJhMi1iNmE2YTUy
NmUyMDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBATRvHAwDgQCAAIwCAMGBCYC/4UAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAjo1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADi3xbiSPZn4q7FEJZ65XJlQ5ghA
C2ljyw8m01NszQa/98NadPXuX6DwuWysZoRk3sjd6X8T53Nn6UOcIOE9xtssV4pC
UCP76t0txsNRinNCMLZyw0C5ntOeEZxV6ajkuXpL0WRgBtjgxSM7ARw2GkI2PkQ0
4ijtR4hyciyDaCjFRXvhY7aZfTVTIrauYR9hk9V67RcUXTyi3VIDM4s9FhJpu5lT
HxrK8Mves1P/uxw0/uGV63V1RZlzflSM4m13LRfY/5B5a98ocmDW/b0BGuY/1wlP
1WB5XAWg6T7s7G0z9DDGaFJ/3M0mu4Yfa/TZTXYRZh3xy7QzzVWkL+fIurM=
-----END CERTIFICATE-----