Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d.cer
File:                     901bd122-193b-490a-b1a9-e65fca4c589d.cer (raw, json)
Hash identifier:          luW4KtfJEPU+c7KXCpfqU/Gk9Spq9iPJbPcK79iSbb4=
Subject key identifier:   10:D4:6B:F7:7F:13:EC:FA:03:35:06:08:F5:65:3B:82:0F:8C:59:F9
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285846BF7D8DFD1E26C5DFE9392930
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d/901bd122-193b-490a-b1a9-e65fca4c589d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 03 Aug 2024 00:45:23 +0000
Certificate not after:    Fri 06 Nov 2026 01:45:23 +0000
Subordinate resources:    AS: 55175
                          IP: 162.208.56.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:bf:7d:8d:fd:1e:26:c5:df:e9:39:29:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Aug  3 00:45:23 2024 GMT
            Not After : Nov  6 01:45:23 2026 GMT
        Subject: CN=901bd122-193b-490a-b1a9-e65fca4c589d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8b:bc:50:51:fe:4e:69:c0:29:67:78:61:39:
                    65:db:dc:51:8e:67:40:87:c7:4b:5e:93:05:a7:10:
                    a7:66:e3:f1:4a:27:7d:03:63:30:2a:44:8e:32:52:
                    2a:39:47:44:9d:a4:2a:79:91:de:ff:02:1f:98:69:
                    57:b6:25:42:7c:b0:2b:17:13:09:6d:25:3d:d7:cc:
                    07:d6:8d:af:d6:2f:ce:44:67:af:83:bc:57:d9:d7:
                    25:7b:ba:3a:85:d2:c3:db:88:70:53:58:60:a6:31:
                    58:9e:5d:70:02:d2:b1:74:9b:e7:ea:fb:a1:f3:bb:
                    02:76:1c:64:a2:bd:5f:68:f2:6c:46:45:59:e6:1f:
                    1a:be:7b:eb:2d:68:bb:e7:bd:2b:85:f8:15:eb:3c:
                    da:d9:9f:32:fb:73:ce:d4:8f:50:4a:23:9e:9e:a8:
                    b7:a5:ac:e3:df:4a:7f:e8:25:95:94:b6:4b:05:59:
                    fe:1a:ba:a6:4a:91:c6:85:03:7f:42:ce:99:4b:25:
                    cd:3a:9b:37:1c:15:38:68:b3:9b:a4:c6:a4:27:4a:
                    90:7a:6a:ce:6c:b0:24:81:ec:c6:93:54:a4:af:b1:
                    d1:d1:e1:08:d1:5d:85:fe:9a:c3:00:f1:80:8a:2b:
                    5f:ae:8e:cd:d8:04:84:34:e7:db:cf:00:08:5b:12:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D4:6B:F7:7F:13:EC:FA:03:35:06:08:F5:65:3B:82:0F:8C:59:F9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/901bd122-193b-490a-b1a9-e65fca4c589d/901bd122-193b-490a-b1a9-e65fca4c589d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.56.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55175

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:5c:48:be:14:8f:d6:02:d5:fa:ce:92:c4:98:f7:c5:40:
         37:8c:63:70:ca:44:20:48:bf:11:f5:37:20:a6:fc:36:a0:4e:
         52:d6:4d:a4:1e:dc:14:93:5a:c0:6e:74:0a:4c:ed:30:30:da:
         2c:08:14:49:60:a8:51:6b:fd:28:bd:66:dc:66:ed:b6:20:0a:
         da:c6:ba:63:81:43:4d:11:2c:8b:d5:6e:31:4f:7e:f8:37:39:
         5c:21:37:90:ce:cc:71:9c:f3:74:e2:68:31:f8:a2:24:36:65:
         78:f2:81:c8:b5:b1:a6:fb:4d:d1:42:43:e0:b0:b2:04:76:41:
         7b:51:66:c9:39:57:94:ba:19:6d:92:0c:1c:02:a1:f4:43:a7:
         b4:fc:97:bd:f2:46:c7:64:5a:b0:ab:58:de:95:33:28:20:fc:
         52:c6:1c:ba:18:fa:e5:2d:d0:e9:e8:e2:89:51:26:12:9c:2d:
         d8:a1:31:bd:f4:b7:7e:2c:81:de:42:56:ee:0f:0b:43:d4:9d:
         44:59:84:5e:24:00:08:04:75:3c:bc:54:32:97:b9:34:f9:11:
         86:8d:c0:0a:76:b7:78:a7:78:17:b1:7b:87:ce:d0:21:c3:0b:
         e9:78:ce:21:7e:bd:d6:3b:3c:32:6e:80:a7:57:dd:2c:04:33:
         ad:e0:2f:af
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEa/fY39HibF3+k5KTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MDgwMzAwNDUyM1oXDTI2MTEwNjAxNDUyM1owLzEtMCsGA1UEAxMk
OTAxYmQxMjItMTkzYi00OTBhLWIxYTktZTY1ZmNhNGM1ODlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24u8UFH+TmnAKWd4YTll29xRjmdAh8dLXpMF
pxCnZuPxSid9A2MwKkSOMlIqOUdEnaQqeZHe/wIfmGlXtiVCfLArFxMJbSU918wH
1o2v1i/ORGevg7xX2dcle7o6hdLD24hwU1hgpjFYnl1wAtKxdJvn6vuh87sCdhxk
or1faPJsRkVZ5h8avnvrLWi7570rhfgV6zza2Z8y+3PO1I9QSiOenqi3pazj30p/
6CWVlLZLBVn+GrqmSpHGhQN/Qs6ZSyXNOps3HBU4aLObpMakJ0qQemrObLAkgezG
k1Skr7HR0eEI0V2F/prDAPGAiitfro7N2ASENOfbzwAIWxIjOwIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFBDUa/d/E+z6AzUGCPVlO4IPjFn5MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85
MDFiZDEyMi0xOTNiLTQ5MGEtYjFhOS1lNjVmY2E0YzU4OWQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzkwMWJkMTIyLTE5M2ItNDkwYS1i
MWE5LWU2NWZjYTRjNTg5ZC85MDFiZDEyMi0xOTNiLTQ5MGEtYjFhOS1lNjVmY2E0
YzU4OWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKi0DgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
ANeHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFA7XEi+FI/WAtX6zpLEmPfFQDeMY3DKRCBIvxH1NyCm/Dag
TlLWTaQe3BSTWsBudApM7TAw2iwIFElgqFFr/Si9Ztxm7bYgCtrGumOBQ00RLIvV
bjFPfvg3OVwhN5DOzHGc83TiaDH4oiQ2ZXjygci1sab7TdFCQ+CwsgR2QXtRZsk5
V5S6GW2SDBwCofRDp7T8l73yRsdkWrCrWN6VMygg/FLGHLoY+uUt0Ono4olRJhKc
LdihMb30t34sgd5CVu4PC0PUnURZhF4kAAgEdTy8VDKXuTT5EYaNwAp2t3ineBex
e4fO0CHDC+l4ziF+vdY7PDJugKdX3SwEM63gL68=
-----END CERTIFICATE-----