Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924.cer
File:                     fba57140-a369-4a3a-8edc-69732d179924.cer (raw, json)
Hash identifier:          6FgtWFBL90lxLgbKnfZS7rnH9p+2/5TyylDEzOwQT2A=
Subject key identifier:   0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
Authority key identifier: 67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35
Certificate issuer:       /CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
Certificate serial:       010D0C9F43285844A2DBECEBE3291963BF924F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 Jan 2024 09:03:13 +0000
Certificate not after:    Sun 26 Apr 2026 08:03:13 +0000
Subordinate resources:    IP: 134.199.32.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:a2:db:ec:eb:e3:29:19:63:bf:92:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d
        Validity
            Not Before: Jan 22 09:03:13 2024 GMT
            Not After : Apr 26 08:03:13 2026 GMT
        Subject: CN=fba57140-a369-4a3a-8edc-69732d179924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:90:4d:03:93:d8:d6:c1:cc:30:5f:c9:f2:
                    62:49:cf:19:71:58:67:23:91:27:57:93:2b:11:ed:
                    4b:8e:ad:ba:3e:0f:28:7b:fa:ca:5d:fe:02:5c:24:
                    ef:45:15:7d:5f:b0:80:dc:16:23:cd:d9:19:b8:18:
                    0b:17:e9:76:63:8f:d4:b5:5e:99:38:ef:18:8b:94:
                    b7:22:67:d8:4f:7a:ae:a8:05:a9:cb:f8:16:67:b8:
                    9f:af:00:5e:f5:23:ab:25:59:80:7e:ad:dc:c6:bd:
                    bb:64:13:3d:bb:2c:be:e3:99:bc:d6:d3:23:ab:3f:
                    d5:7d:f4:bc:14:3b:8d:4e:69:45:48:fb:dd:86:5f:
                    9a:02:80:7d:1b:f6:84:c0:2e:4f:bb:b6:31:41:c9:
                    15:24:77:0f:8e:20:e2:17:b1:56:f4:a3:10:cd:8e:
                    b9:ae:3c:93:3f:e0:8f:d1:f9:e4:e9:91:89:0e:8e:
                    07:be:f3:59:d0:24:52:63:0d:4a:b6:4a:aa:6a:eb:
                    37:fb:3d:4d:9f:33:8d:0e:72:24:1d:78:0d:df:40:
                    f8:6e:36:1c:66:27:79:e0:b5:2a:f1:db:8a:d5:3f:
                    02:aa:1e:b5:9d:34:75:c6:a4:88:3f:b8:b2:f8:9a:
                    ec:3e:09:e1:3a:74:45:fc:e4:f2:14:c9:4b:38:f9:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:62:F8:D3:71:60:6D:A8:44:A4:7C:AB:CE:08:71:66:07:93:95:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fba57140-a369-4a3a-8edc-69732d179924/fba57140-a369-4a3a-8edc-69732d179924.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl

            X509v3 Authority Key Identifier:
                keyid:67:50:4B:EA:D7:AC:EC:DB:30:49:F0:FF:9C:B2:FE:12:6C:F6:35:35

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.199.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:19:10:84:58:d7:fc:41:06:ea:fe:de:b3:3e:46:79:53:91:
         ea:d6:43:4f:8f:6d:d5:69:a9:f8:ee:8b:06:eb:0c:11:88:5c:
         73:c4:bf:7a:bc:f0:86:40:bb:de:b9:b2:25:10:9e:db:46:25:
         36:7f:d8:d1:31:4c:12:c3:e9:ed:74:a5:09:80:5d:32:a0:a5:
         31:39:31:4b:7e:ec:fb:8d:79:b5:97:d7:bb:58:3e:f4:84:83:
         40:6e:43:4f:02:34:85:a7:39:a6:ee:7a:9e:d4:65:f6:34:2b:
         ff:88:31:a7:36:12:8c:0d:1f:cd:26:19:2d:51:eb:53:f6:1a:
         7f:d0:b0:15:38:4b:d2:16:f5:bb:9f:0d:6c:b0:df:dd:6d:67:
         e3:05:e9:95:d4:0f:fa:4f:03:91:fa:64:57:29:15:73:96:ec:
         aa:74:c6:17:03:53:05:bd:af:0e:09:fb:83:18:ea:45:da:89:
         0e:7d:31:64:f2:26:a6:a3:ea:32:6a:6d:c7:a4:cd:74:9e:b8:
         48:8c:1e:96:d4:5d:4e:3a:ca:02:bd:23:d8:6f:5b:6d:df:b1:
         d6:8e:c5:74:c4:1f:5c:b8:54:02:b7:3f:82:9a:da:e2:aa:2b:
         48:48:e1:3f:67:fd:c7:92:8c:7c:e6:10:b3:c7:3c:7d:bd:5f:
         ba:00:db:1b
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWESi2+zr4ykZY7+STwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgz
MzdkMB4XDTI0MDEyMjA5MDMxM1oXDTI2MDQyNjA4MDMxM1owLzEtMCsGA1UEAxMk
ZmJhNTcxNDAtYTM2OS00YTNhLThlZGMtNjk3MzJkMTc5OTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonCQTQOT2NbBzDBfyfJiSc8ZcVhnI5EnV5Mr
Ee1Ljq26Pg8oe/rKXf4CXCTvRRV9X7CA3BYjzdkZuBgLF+l2Y4/UtV6ZOO8Yi5S3
ImfYT3quqAWpy/gWZ7ifrwBe9SOrJVmAfq3cxr27ZBM9uyy+45m81tMjqz/VffS8
FDuNTmlFSPvdhl+aAoB9G/aEwC5Pu7YxQckVJHcPjiDiF7FW9KMQzY65rjyTP+CP
0fnk6ZGJDo4HvvNZ0CRSYw1Ktkqqaus3+z1NnzONDnIkHXgN30D4bjYcZid54LUq
8duK1T8Cqh61nTR1xqSIP7iy+JrsPgnhOnRF/OTyFMlLOPnImwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFA1i+NNxYG2oRKR8q84IcWYHk5UDMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9m
YmE1NzE0MC1hMzY5LTRhM2EtOGVkYy02OTczMmQxNzk5MjQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQt
YmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkL2ZiYTU3MTQwLWEzNjktNGEzYS04
ZWRjLTY5NzMyZDE3OTkyNC9mYmE1NzE0MC1hMzY5LTRhM2EtOGVkYy02OTczMmQx
Nzk5MjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdh
ZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YWI3YWU0ZC1iZDdiLTRi
MzMtOWE4OC01YjIyZDJhODMzN2QuY3JsMB8GA1UdIwQYMBaAFGdQS+rXrOzbMEnw
/5yy/hJs9jU1MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRh
YjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWGxyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKhkQhFjX/EEG6v7esz5G
eVOR6tZDT49t1Wmp+O6LBusMEYhcc8S/erzwhkC73rmyJRCe20YlNn/Y0TFMEsPp
7XSlCYBdMqClMTkxS37s+415tZfXu1g+9ISDQG5DTwI0hac5pu56ntRl9jQr/4gx
pzYSjA0fzSYZLVHrU/Yaf9CwFThL0hb1u58NbLDf3W1n4wXpldQP+k8DkfpkVykV
c5bsqnTGFwNTBb2vDgn7gxjqRdqJDn0xZPImpqPqMmptx6TNdJ64SIweltRdTjrK
Ar0j2G9bbd+x1o7FdMQfXLhUArc/gpra4qorSEjhP2f9x5KMfOYQs8c8fb1fugDb
Gw==
-----END CERTIFICATE-----