Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
File:                     77b56428-9b52-416f-b279-bbae14422de2.cer (raw, json)
Hash identifier:          LO/WOZFwiJnEhk+E0G2MN5gsy/ZiSUNXgR2SRrdDXs8=
Subject key identifier:   0D:A4:EB:AC:C3:42:B9:9B:12:D5:DA:6A:55:68:C3:4F:BA:DA:2A:BF
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858438D8311F5AF8FD6691F939900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 15 Oct 2023 00:45:16 +0000
Certificate not after:    Sat 17 Jan 2026 01:45:16 +0000
Subordinate resources:    IP: 96.127.0.0/17
                          IP: 2620:108:d000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:8d:83:11:f5:af:8f:d6:69:1f:93:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Oct 15 00:45:16 2023 GMT
            Not After : Jan 17 01:45:16 2026 GMT
        Subject: CN=77b56428-9b52-416f-b279-bbae14422de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:c5:25:11:e9:8e:fd:95:b6:e4:42:77:37:
                    22:5c:fe:81:76:05:e9:45:2f:10:df:d9:84:91:f0:
                    91:6a:8a:84:ce:21:24:34:12:2e:a1:e7:7d:d3:e9:
                    c8:95:9f:f8:7b:39:81:1e:f4:14:bf:64:ee:ec:e6:
                    02:3f:1a:8a:3f:7c:d9:e8:3e:5b:66:3d:15:ca:72:
                    35:9e:f0:a7:0c:4a:30:59:ef:7d:4d:32:3f:3d:6e:
                    f9:dd:c3:5a:c8:15:1a:96:ad:51:08:a0:d4:46:98:
                    74:10:88:f8:a0:07:69:e2:35:e4:51:90:55:15:50:
                    68:4d:99:61:05:e5:d4:0a:d3:2d:e3:26:04:89:b6:
                    5a:27:32:d0:f2:af:8b:df:35:5f:8e:4e:f2:ed:68:
                    d5:1b:af:3e:4b:80:40:2b:4a:34:26:75:e8:f1:89:
                    ea:fa:71:00:e7:f6:b5:c0:45:b4:49:7d:20:7f:45:
                    73:6e:0a:0f:77:7c:63:41:dd:5d:3a:7d:5c:06:52:
                    f7:6d:7f:d1:08:fd:ab:7d:29:82:c3:4e:48:26:fb:
                    fd:38:91:76:d7:6e:c8:57:b4:45:e0:cc:59:5e:4a:
                    fb:17:ee:87:c4:4c:a6:01:07:65:be:28:0a:6c:9d:
                    f4:5c:f5:47:c5:d1:42:d9:be:c7:33:75:22:11:75:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A4:EB:AC:C3:42:B9:9B:12:D5:DA:6A:55:68:C3:4F:BA:DA:2A:BF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.127.0.0/17
                IPv6:
                  2620:108:d000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:35:de:c9:d0:34:ef:14:b4:b2:c4:c3:5c:59:b1:9a:1b:9f:
         35:87:ae:a9:11:93:13:e6:0e:a3:73:e0:b2:d8:a3:fb:d3:f2:
         b3:99:98:ec:61:28:f5:14:d8:d3:7a:e5:19:fe:53:17:5f:2b:
         eb:b1:3e:f6:e0:35:8b:ed:6e:07:07:e0:aa:06:ee:6c:ff:58:
         1c:f7:57:5d:07:1d:29:17:b7:82:b4:a9:5b:15:bf:b1:ad:a5:
         78:a2:e8:50:5a:9f:2e:d6:9a:a9:60:91:41:61:8e:84:f5:d7:
         18:e2:e9:63:fc:a1:10:b4:a2:fe:9d:6e:31:ce:98:8b:45:4d:
         62:03:d7:3f:0d:a4:44:05:76:d0:ca:f6:6d:1a:21:c2:1d:66:
         d3:5f:fa:ab:c9:0b:58:ea:87:15:4a:9d:24:81:0d:72:e1:ed:
         64:c0:c7:e6:a5:ea:9b:1e:80:e1:07:86:00:e6:76:a6:ad:2f:
         03:af:fe:87:a4:c1:14:47:82:4f:79:76:24:47:9b:7d:d4:9f:
         f9:dd:fe:88:ef:a6:ba:de:18:c4:4e:e2:ae:71:74:c7:90:4d:
         f4:da:59:7a:4b:d9:25:01:52:c8:be:30:9a:b7:36:3c:f6:c4:
         e2:1e:08:4e:6a:3f:70:db:ca:fa:25:37:06:24:22:46:b8:82:
         39:fa:c6:ab
-----BEGIN CERTIFICATE-----
MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEONgxH1r4/WaR+TmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMTAxNTAwNDUxNloXDTI2MDExNzAxNDUxNlowLzEtMCsGA1UEAxMk
NzdiNTY0MjgtOWI1Mi00MTZmLWIyNzktYmJhZTE0NDIyZGUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIDFJRHpjv2VtuRCdzciXP6BdgXpRS8Q39mE
kfCRaoqEziEkNBIuoed90+nIlZ/4ezmBHvQUv2Tu7OYCPxqKP3zZ6D5bZj0VynI1
nvCnDEowWe99TTI/PW753cNayBUalq1RCKDURph0EIj4oAdp4jXkUZBVFVBoTZlh
BeXUCtMt4yYEibZaJzLQ8q+L3zVfjk7y7WjVG68+S4BAK0o0JnXo8Ynq+nEA5/a1
wEW0SX0gf0VzbgoPd3xjQd1dOn1cBlL3bX/RCP2rfSmCw05IJvv9OJF2127IV7RF
4MxZXkr7F+6HxEymAQdlvigKbJ30XPVHxdFC2b7HM3UiEXWYlQIDAQABo4IEEDCC
BAwwHQYDVR0OBBYEFA2k66zDQrmbEtXaalVow0+62iq/MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83
N2I1NjQyOC05YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzc3YjU2NDI4LTliNTItNDE2Zi1i
Mjc5LWJiYWUxNDQyMmRlMi83N2I1NjQyOC05YjUyLTQxNmYtYjI3OS1iYmFlMTQ0
MjJkZTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAdgfwAwDwQCAAIwCQMHBCYgAQjQADBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQB3Nd7J0DTvFLSyxMNcWbGaG581h66pEZMT5g6jc+Cy2KP70/KzmZjsYSj1FNjT
euUZ/lMXXyvrsT724DWL7W4HB+CqBu5s/1gc91ddBx0pF7eCtKlbFb+xraV4ouhQ
Wp8u1pqpYJFBYY6E9dcY4ulj/KEQtKL+nW4xzpiLRU1iA9c/DaREBXbQyvZtGiHC
HWbTX/qryQtY6ocVSp0kgQ1y4e1kwMfmpeqbHoDhB4YA5namrS8Dr/6HpMEUR4JP
eXYkR5t91J/53f6I76a63hjETuKucXTHkE302ll6S9klAVLIvjCatzY89sTiHghO
aj9w28r6JTcGJCJGuII5+sar
-----END CERTIFICATE-----