Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer
File:                     5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.cer (raw, json)
Hash identifier:          G653Wves/S4SQuGIsZMw0KPTWnw6QR6xpt7bLVnQom8=
Subject key identifier:   CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E48352E08BD06B1B478CA500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sat 26 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 54911
                          IP: 104.171.32.0/20
                          IP: 2607:10c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:52:e0:8b:d0:6b:1b:47:8c:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 26 19:06:39 2025 GMT
        Subject: CN=5bb89f91-a9a1-4d88-b9d0-f7882ea134a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:b4:a0:71:e7:30:e2:68:e7:54:f3:2e:39:
                    b7:25:db:f0:64:bc:ec:52:b9:e0:53:bf:2a:5c:6b:
                    3f:67:fe:bc:90:d0:66:6f:de:33:d8:98:e7:07:6a:
                    ab:19:37:c2:b2:cb:17:e1:04:fa:fd:fc:76:1c:fb:
                    24:cd:35:e1:67:dc:bc:d6:2f:fc:8a:db:94:fb:ab:
                    76:11:27:cb:96:c2:cb:8b:d5:82:16:29:8a:b0:aa:
                    7a:2e:7f:21:8f:70:74:5e:50:65:21:74:a4:49:7b:
                    35:55:03:4b:62:e3:d8:c2:9f:f7:fb:c6:eb:54:f1:
                    07:5c:ab:59:4c:29:f2:c1:cf:b4:f5:b1:ce:cc:b5:
                    51:a7:ca:1d:eb:a4:07:12:6c:20:c4:71:84:f5:42:
                    62:0a:9f:6c:c1:94:fe:3a:58:04:ec:c2:30:bc:18:
                    a2:b5:7e:87:7b:ea:17:b1:4d:e5:e3:c3:de:03:c6:
                    42:2b:67:1e:21:3e:58:41:d1:b7:9f:fa:9a:8e:5d:
                    a5:3e:6a:c7:b2:08:6e:0a:3d:f0:51:2a:aa:aa:64:
                    9e:fc:f5:82:47:62:6a:0e:36:a9:a1:7a:05:e0:be:
                    f9:89:53:a5:6d:ae:9a:d8:cc:38:93:ee:dd:8f:01:
                    48:f6:c4:db:a5:e1:b5:b1:80:e2:7e:21:73:3a:1b:
                    6d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3A:6A:1D:7B:CD:04:74:BB:B3:D6:43:72:CF:AE:22:23:D4:A8:74
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9/5bb89f91-a9a1-4d88-b9d0-f7882ea134a9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.32.0/20
                IPv6:
                  2607:10c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54911

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:8d:69:96:60:58:04:2a:c0:56:1a:0e:4a:65:4a:07:c2:
         ab:4d:b4:90:4c:2f:64:cc:b0:00:e1:e0:01:73:61:05:33:57:
         40:ff:b8:5e:32:01:82:60:b9:03:9d:c7:3e:79:d3:b9:d5:15:
         98:ca:a1:cc:4d:52:b2:86:ab:ca:9a:67:1f:dc:2e:5c:9a:4d:
         f2:aa:b7:0f:c0:9a:a5:fa:b0:ca:e4:8a:3c:26:a0:3c:e4:66:
         90:01:70:7e:96:14:af:a1:c8:50:d0:52:46:6b:c5:eb:ba:e1:
         6f:61:bf:b9:1f:47:40:9a:8a:26:c0:e5:b2:48:26:f3:da:d9:
         b2:c1:49:30:d9:18:39:ea:53:e8:53:45:66:56:cd:99:84:62:
         25:2a:65:0e:0e:a5:9f:57:57:23:55:a9:74:1b:95:06:11:4d:
         7a:28:2f:75:3f:49:fc:b8:8c:d7:d3:5e:81:a1:da:f3:ad:56:
         6a:6b:50:4a:db:46:6f:a8:0a:97:b2:fa:65:eb:67:92:63:a5:
         27:60:6f:68:6f:5a:93:3f:20:b8:fd:43:e8:76:57:3d:bd:1e:
         b0:e9:67:5a:88:10:81:27:04:eb:fa:e2:29:9e:2d:5b:35:d3:
         0e:be:28:74:fb:67:83:f4:fa:a3:06:bc:29:00:4b:11:e9:0d:
         f8:10:73:16
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEHkg1Lgi9BrG0eMpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcyNjE5MDYzOVowLzEtMCsGA1UEAxMk
NWJiODlmOTEtYTlhMS00ZDg4LWI5ZDAtZjc4ODJlYTEzNGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQS0oHHnMOJo51TzLjm3JdvwZLzsUrngU78q
XGs/Z/68kNBmb94z2JjnB2qrGTfCsssX4QT6/fx2HPskzTXhZ9y81i/8ituU+6t2
ESfLlsLLi9WCFimKsKp6Ln8hj3B0XlBlIXSkSXs1VQNLYuPYwp/3+8brVPEHXKtZ
TCnywc+09bHOzLVRp8od66QHEmwgxHGE9UJiCp9swZT+OlgE7MIwvBiitX6He+oX
sU3l48PeA8ZCK2ceIT5YQdG3n/qajl2lPmrHsghuCj3wUSqqqmSe/PWCR2JqDjap
oXoF4L75iVOlba6a2Mw4k+7djwFI9sTbpeG1sYDifiFzOhttTwIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFM46ah17zQR0u7PWQ3LPriIj1Kh0MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81
YmI4OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4MmVhMTM0YTkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzViYjg5ZjkxLWE5YTEtNGQ4OC1i
OWQwLWY3ODgyZWExMzRhOS81YmI4OWY5MS1hOWExLTRkODgtYjlkMC1mNzg4MmVh
MTM0YTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBARoqyAwDQQCAAIwBwMFACYHEMAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDANZ/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC04jWmWYFgEKsBWGg5KZUoHwqtN
tJBML2TMsADh4AFzYQUzV0D/uF4yAYJguQOdxz5507nVFZjKocxNUrKGq8qaZx/c
LlyaTfKqtw/AmqX6sMrkijwmoDzkZpABcH6WFK+hyFDQUkZrxeu64W9hv7kfR0Ca
iibA5bJIJvPa2bLBSTDZGDnqU+hTRWZWzZmEYiUqZQ4OpZ9XVyNVqXQblQYRTXoo
L3U/Sfy4jNfTXoGh2vOtVmprUErbRm+oCpey+mXrZ5JjpSdgb2hvWpM/ILj9Q+h2
Vz29HrDpZ1qIEIEnBOv64imeLVs10w6+KHT7Z4P0+qMGvCkASxHpDfgQcxY=
-----END CERTIFICATE-----