Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a.cer
File:                     b3a75266-06ce-463f-bfbd-1da0c867f18a.cer (raw, json)
Hash identifier:          2VeUEThzIM4ANIfIKPN1AMMd88F99RZOAm933VacEkQ=
Subject key identifier:   BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285847BD89D58B8FBA80CD767C2DE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/b3a75266-06ce-463f-bfbd-1da0c867f18a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 02 Nov 2024 00:45:27 +0000
Certificate not after:    Fri 05 Feb 2027 01:45:27 +0000
Subordinate resources:    AS: 55041
                          IP: 198.177.255.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bd:89:d5:8b:8f:ba:80:cd:76:7c:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov  2 00:45:27 2024 GMT
            Not After : Feb  5 01:45:27 2027 GMT
        Subject: CN=b3a75266-06ce-463f-bfbd-1da0c867f18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:26:09:f9:5b:40:32:03:d1:ba:33:8f:c2:
                    8e:17:2c:39:01:8d:eb:44:b8:2d:75:ab:54:88:2e:
                    91:9a:f8:73:6e:8d:f4:d1:c1:ae:bc:83:06:a6:94:
                    f3:ea:9d:e7:db:f0:bc:43:29:03:ae:a2:2e:a6:40:
                    76:86:77:c9:88:5c:c5:d8:0e:8c:2a:0c:7d:d5:eb:
                    dc:19:71:83:7b:14:1b:88:a7:41:3e:b2:25:11:86:
                    b3:3a:78:42:47:d9:28:b2:49:b0:08:83:b7:1a:75:
                    93:58:1e:0d:7c:4a:6a:88:c7:0f:4c:57:71:9b:73:
                    26:86:ba:20:4b:7b:f9:a2:26:83:02:aa:32:b0:1b:
                    1f:14:2a:e3:77:ee:ea:76:23:99:41:88:9d:2f:ef:
                    8d:dc:dd:08:be:6b:4e:ed:d3:2a:1b:6a:65:bf:37:
                    75:18:d3:f2:0a:55:50:16:5a:1e:64:6f:97:46:db:
                    8d:b2:1d:2a:a6:0c:24:3b:8c:1b:af:21:63:54:c4:
                    6b:45:e4:9f:54:c3:de:db:1e:c6:0d:cf:dd:be:59:
                    e2:15:8b:56:bb:78:21:1a:ce:0e:ca:88:07:2f:0e:
                    22:1b:48:db:1f:42:0b:ea:aa:e5:c8:36:5a:40:30:
                    51:e4:8b:90:32:4b:74:d4:5e:24:f4:43:72:0e:94:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:30:9A:65:E0:81:49:49:64:B4:87:E8:4C:93:36:77:10:84:CC:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b3a75266-06ce-463f-bfbd-1da0c867f18a/b3a75266-06ce-463f-bfbd-1da0c867f18a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.255.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55041

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:75:d2:d4:23:01:7d:93:db:06:04:41:d9:b6:24:e2:36:15:
         bc:d5:52:55:7a:3f:d3:e0:bf:6f:0f:6d:11:cf:ff:ba:03:3a:
         55:8b:fa:c6:ee:19:b6:6b:cb:3d:a8:f5:cc:05:d7:93:5f:f0:
         62:de:88:56:09:ef:87:18:43:8f:c6:d3:8b:f6:c1:0d:e4:34:
         5a:4a:79:f6:e3:bc:72:30:29:2b:f9:10:19:79:6c:22:25:e9:
         1a:93:7b:a5:4c:19:81:15:19:aa:69:6f:5b:0b:d2:62:24:e7:
         39:62:d0:78:c3:88:1a:4d:34:61:17:8f:2e:9b:1c:79:dd:36:
         1f:f1:3d:ed:e7:3f:c2:58:11:c1:b8:2f:63:35:f7:ba:d7:8c:
         d4:7f:7a:1a:dc:4a:4a:5b:8e:7c:d9:5e:d8:9d:d1:de:f9:55:
         95:e0:1c:6c:9f:17:6a:be:2d:aa:b5:37:a1:25:d7:30:26:33:
         bb:38:12:33:b3:b5:3b:4b:73:bd:b7:7b:61:ad:35:43:da:9f:
         9d:08:11:f1:81:03:2a:73:5a:46:7f:da:fe:7d:62:e3:e3:1d:
         cb:ae:79:7b:39:7a:da:4f:3b:bf:13:db:98:32:d2:c6:30:89:
         44:b7:bf:4c:e2:19:45:42:1b:4e:31:c8:41:be:53:39:f3:af:
         a4:db:91:33
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEe9idWLj7qAzXZ8LeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MTEwMjAwNDUyN1oXDTI3MDIwNTAxNDUyN1owLzEtMCsGA1UEAxMk
YjNhNzUyNjYtMDZjZS00NjNmLWJmYmQtMWRhMGM4NjdmMThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubImCflbQDID0bozj8KOFyw5AY3rRLgtdatU
iC6Rmvhzbo300cGuvIMGppTz6p3n2/C8QykDrqIupkB2hnfJiFzF2A6MKgx91evc
GXGDexQbiKdBPrIlEYazOnhCR9koskmwCIO3GnWTWB4NfEpqiMcPTFdxm3Mmhrog
S3v5oiaDAqoysBsfFCrjd+7qdiOZQYidL++N3N0IvmtO7dMqG2plvzd1GNPyClVQ
FloeZG+XRtuNsh0qpgwkO4wbryFjVMRrReSfVMPe2x7GDc/dvlniFYtWu3ghGs4O
yogHLw4iG0jbH0IL6qrlyDZaQDBR5IuQMkt01F4k9ENyDpT4SQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFLswmmXggUlJZLSH6EyTNncQhMz1MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9i
M2E3NTI2Ni0wNmNlLTQ2M2YtYmZiZC0xZGEwYzg2N2YxOGEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2IzYTc1MjY2LTA2Y2UtNDYzZi1i
ZmJkLTFkYTBjODY3ZjE4YS9iM2E3NTI2Ni0wNmNlLTQ2M2YtYmZiZC0xZGEwYzg2
N2YxOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADGsf8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
ANcBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAId10tQjAX2T2wYEQdm2JOI2FbzVUlV6P9Pgv28PbRHP/7oD
OlWL+sbuGbZryz2o9cwF15Nf8GLeiFYJ74cYQ4/G04v2wQ3kNFpKefbjvHIwKSv5
EBl5bCIl6RqTe6VMGYEVGappb1sL0mIk5zli0HjDiBpNNGEXjy6bHHndNh/xPe3n
P8JYEcG4L2M197rXjNR/ehrcSkpbjnzZXtid0d75VZXgHGyfF2q+Laq1N6El1zAm
M7s4EjOztTtLc723e2GtNUPan50IEfGBAypzWkZ/2v59YuPjHcuueXs5etpPO78T
25gy0sYwiUS3v0ziGUVCG04xyEG+Uznzr6TbkTM=
-----END CERTIFICATE-----