Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer
File:                     c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer (raw, json)
Hash identifier:          hXkNtD7SWF3ZvUUmemd3mf5GcoOM5RYPN6PS36qu5SI=
Subject key identifier:   7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285845950592B761D43E792C317D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 Apr 2024 02:52:45 +0000
Certificate not after:    Wed 22 Jul 2026 02:52:45 +0000
Subordinate resources:    AS: 393731
                          IP: 148.170.224.0/20
                          IP: 199.88.52.0/22
                          IP: 204.156.160.0/21
                          IP: 2607:7940::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:95:05:92:b7:61:d4:3e:79:2c:31:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Apr 18 02:52:45 2024 GMT
            Not After : Jul 22 02:52:45 2026 GMT
        Subject: CN=c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:88:f7:d3:9c:a4:86:b1:ee:e1:c4:08:1e:4e:
                    4f:ed:9a:44:52:f4:74:35:84:41:5f:7d:12:b1:8c:
                    13:02:2c:8f:f6:b1:f9:a7:61:45:a9:a7:2c:24:84:
                    18:fa:e3:e8:5d:6e:08:8c:59:87:e4:ee:13:d1:fa:
                    8d:e1:a9:86:f4:26:c1:1d:4e:b6:cb:82:1f:f0:3b:
                    c2:ab:22:f8:00:9a:36:58:2b:cf:bf:32:f0:20:c3:
                    dd:66:64:9b:bc:97:1a:8e:28:51:f4:df:e3:29:10:
                    70:dc:92:86:2d:b6:ab:f2:77:3a:9e:e2:6f:d7:4c:
                    f2:7e:2e:7b:e9:68:2a:88:28:95:7f:f0:c9:a4:d9:
                    47:55:5e:e5:78:fb:a2:2c:c7:3a:45:79:cd:44:07:
                    98:0b:ff:d0:26:af:bb:8c:12:e7:4f:27:cf:e4:ea:
                    cb:67:23:67:34:48:f1:b0:2e:b2:67:b0:66:49:7e:
                    5a:46:f2:49:56:86:de:99:f5:07:9e:07:51:56:1a:
                    be:41:9b:45:18:67:fe:6d:23:da:50:93:f1:5b:99:
                    70:a3:b1:78:cc:06:dd:ce:e0:8d:85:2a:ea:bf:10:
                    1c:1e:2e:27:a6:1b:43:2e:cd:f6:4f:50:d8:0b:a5:
                    2a:61:b2:d0:1e:9a:c7:0a:89:24:b8:04:a8:dc:96:
                    9b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.170.224.0/20
                  199.88.52.0/22
                  204.156.160.0/21
                IPv6:
                  2607:7940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393731

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e6:04:da:2f:6a:ec:39:7c:63:2f:ec:e5:d3:6d:84:8f:c0:
         87:a7:a4:7b:81:c6:22:51:7a:7d:ff:49:c2:df:06:53:04:de:
         58:60:be:41:b2:8a:8e:ba:de:f7:6b:3b:c6:80:44:e1:39:c4:
         97:95:03:b1:3f:85:20:59:59:2e:dd:fa:7d:85:00:a0:49:2f:
         22:7d:f8:0e:6a:ad:77:ff:12:f9:1b:35:fb:7e:d8:f3:97:31:
         6b:55:ae:fa:33:11:69:45:c6:f5:24:eb:37:10:7a:fa:1d:f9:
         6e:e4:51:19:2b:9f:79:66:06:f9:54:e4:4b:1b:f4:d6:e2:50:
         cd:ed:45:2b:47:e5:bc:27:81:3d:d6:48:0a:e2:77:6f:25:44:
         43:3c:e4:a3:d8:27:33:82:06:a8:d4:54:06:0a:53:2a:69:6b:
         13:b0:40:7f:95:dd:bc:e5:d0:fc:44:61:0a:8b:bc:5d:e7:b7:
         80:eb:b6:76:7a:fb:96:9f:89:c5:33:26:63:6f:26:bc:e7:f5:
         d8:64:c2:8c:ed:1d:c3:db:f9:02:d0:74:8a:83:bb:5b:57:05:
         43:d3:36:38:f2:b7:a2:70:ab:a4:81:37:65:86:b1:e0:2b:52:
         08:5f:83:51:be:00:2a:ad:a5:c6:47:b9:80:62:82:5b:76:2e:
         8a:a9:38:3f
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEWVBZK3YdQ+eSwxfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDQxODAyNTI0NVoXDTI2MDcyMjAyNTI0NVowLzEtMCsGA1UEAxMk
YzVmZDRhNjItZDhjYy00ZTQ0LWI1Y2ItNTNhOTNjMmI3NTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIj305ykhrHu4cQIHk5P7ZpEUvR0NYRBX30S
sYwTAiyP9rH5p2FFqacsJIQY+uPoXW4IjFmH5O4T0fqN4amG9CbBHU62y4If8DvC
qyL4AJo2WCvPvzLwIMPdZmSbvJcajihR9N/jKRBw3JKGLbar8nc6nuJv10zyfi57
6WgqiCiVf/DJpNlHVV7lePuiLMc6RXnNRAeYC//QJq+7jBLnTyfP5OrLZyNnNEjx
sC6yZ7BmSX5aRvJJVobemfUHngdRVhq+QZtFGGf+bSPaUJPxW5lwo7F4zAbdzuCN
hSrqvxAcHi4nphtDLs32T1DYC6UqYbLQHprHCokkuASo3Jab7QIDAQABo4IENjCC
BDIwHQYDVR0OBBYEFH5DkYnRgn8pkjH9EfxepZQelpTbMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9j
NWZkNGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5M2MyYjc1NjkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2M1ZmQ0YTYyLWQ4Y2MtNGU0NC1i
NWNiLTUzYTkzYzJiNzU2OS9jNWZkNGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5M2My
Yjc1NjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwOgYIKwYBBQUH
AQcBAf8EKzApMBgEAgABMBIDBASUquADBALHWDQDBAPMnKAwDQQCAAIwBwMFACYH
eUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgIDMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADTmBNovauw5
fGMv7OXTbYSPwIenpHuBxiJRen3/ScLfBlME3lhgvkGyio663vdrO8aAROE5xJeV
A7E/hSBZWS7d+n2FAKBJLyJ9+A5qrXf/EvkbNft+2POXMWtVrvozEWlFxvUk6zcQ
evod+W7kURkrn3lmBvlU5Esb9NbiUM3tRStH5bwngT3WSArid28lREM85KPYJzOC
BqjUVAYKUyppaxOwQH+V3bzl0PxEYQqLvF3nt4DrtnZ6+5aficUzJmNvJrzn9dhk
woztHcPb+QLQdIqDu1tXBUPTNjjyt6Jwq6SBN2WGseArUghfg1G+ACqtpcZHuYBi
glt2LoqpOD8=
-----END CERTIFICATE-----