Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer
File:                     1f2c87d8-024d-4346-b284-d9791df623fe.cer (raw, json)
Hash identifier:          p0+A34hQdlunqvwqnPX/5N3sZnD9R+Ua8AEbNRrqqUE=
Subject key identifier:   BA:74:4B:3C:63:17:17:CD:C7:38:71:9D:91:B6:85:59:BE:39:1D:6B
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844CE28B1F2E413B40D55050900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 06 Feb 2024 21:17:39 +0000
Certificate not after:    Mon 11 May 2026 20:17:39 +0000
Subordinate resources:    AS: 46961
                          IP: 65.61.52.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ce:28:b1:f2:e4:13:b4:0d:55:05:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Feb  6 21:17:39 2024 GMT
            Not After : May 11 20:17:39 2026 GMT
        Subject: CN=1f2c87d8-024d-4346-b284-d9791df623fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:c2:08:23:48:b0:dc:c6:49:db:c2:0f:7e:
                    bd:ee:ac:39:e1:4a:90:75:17:06:5c:49:f1:e7:61:
                    d9:11:00:34:05:28:d6:4b:25:66:0a:7c:ab:9b:33:
                    9c:9f:71:76:a4:db:06:a3:52:38:b7:ff:a5:20:fe:
                    b8:78:e8:4e:1f:9e:a5:a6:55:8a:6e:10:b9:70:ec:
                    99:2e:7c:f1:16:f1:db:c4:27:20:46:f4:17:fb:65:
                    af:89:03:96:4c:2f:30:3c:1b:62:4c:34:ff:8a:8d:
                    f8:94:e4:30:67:df:34:f3:73:34:13:f7:00:88:9a:
                    e3:4d:14:b3:2a:4e:6b:28:c6:dd:f9:be:13:e2:9b:
                    50:7c:00:83:79:b3:85:e5:8e:4c:94:85:4f:db:c7:
                    b3:79:eb:55:9d:59:f8:30:52:36:a5:8a:5e:3a:c1:
                    43:52:43:a3:a3:d3:27:2e:d4:30:8c:b8:9b:0e:98:
                    0d:e6:6e:69:87:bd:99:e8:3a:76:55:0d:3c:2c:fe:
                    ca:28:f6:5a:87:a6:57:d9:76:d9:50:df:26:cd:c7:
                    e4:b7:cf:b0:87:b1:a9:23:0f:d9:38:4b:9b:7e:a0:
                    f4:1f:33:b2:23:df:10:78:f4:56:35:26:f7:aa:58:
                    72:f1:73:44:ae:98:80:91:6b:c9:65:60:8c:de:6c:
                    8d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:74:4B:3C:63:17:17:CD:C7:38:71:9D:91:B6:85:59:BE:39:1D:6B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.61.52.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46961

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:21:de:e8:5c:06:46:d2:2a:c7:31:e0:63:2f:7b:f4:3a:2b:
         14:68:75:4c:38:78:81:8e:e2:d6:26:37:50:38:72:9b:dd:de:
         b6:79:63:00:05:ae:97:1c:82:3a:c8:39:2f:bd:11:f1:90:fc:
         cc:f1:a3:c6:2a:f2:ff:cc:bf:a1:36:22:40:6a:8c:a3:f8:bf:
         b2:f5:16:dc:99:e0:ed:84:cf:22:4b:75:ef:56:e3:bf:f8:3a:
         83:ca:1a:3a:35:d0:a3:be:8f:93:a3:95:75:a2:8f:27:e3:d9:
         fa:45:c1:e1:8a:b3:9f:7d:aa:9f:04:a9:8b:12:ce:a4:54:1c:
         c7:81:5b:3e:b6:44:df:6d:5d:3f:51:ba:a8:25:d1:0a:a6:6c:
         2e:da:9f:60:95:50:28:17:7e:4f:c3:0b:0a:88:fd:29:53:50:
         9e:f6:27:aa:b6:ad:83:a4:35:cb:79:a5:45:2c:64:4b:95:72:
         d1:e5:c7:14:34:e7:c9:3f:91:23:88:a1:94:e8:95:fd:87:9b:
         9f:a6:2f:3c:a8:0e:4e:7d:0f:e8:9a:09:a7:ae:12:d9:e5:2b:
         e4:68:10:3f:24:d6:15:33:1e:34:9c:ce:bd:5a:d1:02:c8:cf:
         4a:2c:f7:cb:c6:bf:f0:6e:da:2b:aa:24:84:0e:21:69:c9:43:
         8a:d6:65:b5
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWETOKLHy5BO0DVUFCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDIwNjIxMTczOVoXDTI2MDUxMTIwMTczOVowLzEtMCsGA1UEAxMk
MWYyYzg3ZDgtMDI0ZC00MzQ2LWIyODQtZDk3OTFkZjYyM2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTXCCCNIsNzGSdvCD3697qw54UqQdRcGXEnx
52HZEQA0BSjWSyVmCnyrmzOcn3F2pNsGo1I4t/+lIP64eOhOH56lplWKbhC5cOyZ
LnzxFvHbxCcgRvQX+2WviQOWTC8wPBtiTDT/io34lOQwZ98083M0E/cAiJrjTRSz
Kk5rKMbd+b4T4ptQfACDebOF5Y5MlIVP28ezeetVnVn4MFI2pYpeOsFDUkOjo9Mn
LtQwjLibDpgN5m5ph72Z6Dp2VQ08LP7KKPZah6ZX2XbZUN8mzcfkt8+wh7GpIw/Z
OEubfqD0HzOyI98QePRWNSb3qlhy8XNErpiAkWvJZWCM3myNewIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFLp0SzxjFxfNxzhxnZG2hVm+OR1rMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8x
ZjJjODdkOC0wMjRkLTQzNDYtYjI4NC1kOTc5MWRmNjIzZmUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzFmMmM4N2Q4LTAyNGQtNDM0Ni1i
Mjg0LWQ5NzkxZGY2MjNmZS8xZjJjODdkOC0wMjRkLTQzNDYtYjI4NC1kOTc5MWRm
NjIzZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAJBPTQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
ALdxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHkh3uhcBkbSKscx4GMve/Q6KxRodUw4eIGO4tYmN1A4cpvd
3rZ5YwAFrpccgjrIOS+9EfGQ/Mzxo8Yq8v/Mv6E2IkBqjKP4v7L1FtyZ4O2EzyJL
de9W47/4OoPKGjo10KO+j5OjlXWijyfj2fpFweGKs599qp8EqYsSzqRUHMeBWz62
RN9tXT9Ruqgl0QqmbC7an2CVUCgXfk/DCwqI/SlTUJ72J6q2rYOkNct5pUUsZEuV
ctHlxxQ058k/kSOIoZTolf2Hm5+mLzyoDk59D+iaCaeuEtnlK+RoED8k1hUzHjSc
zr1a0QLIz0os98vGv/Bu2iuqJIQOIWnJQ4rWZbU=
-----END CERTIFICATE-----