Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3.cer
File:                     764e6cce-009d-4ab5-89d3-96e0c12500b3.cer (raw, json)
Hash identifier:          u1qgVKA5aWwoVHFlOMvfS/0aDyTPzhNJhVnDtJT9P7I=
Subject key identifier:   18:8B:2D:45:11:18:1C:1B:43:F4:60:08:D3:0E:DF:00:F8:75:47:E9
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285847D3FD23D77CF23E5B42995B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/764e6cce-009d-4ab5-89d3-96e0c12500b3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Nov 2024 01:45:33 +0000
Certificate not after:    Sat 13 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 53414
                          IP: 74.121.244.0/22
                          IP: 192.155.69.0/24
                          IP: 2606:16c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d3:fd:23:d7:7c:f2:3e:5b:42:99:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 10 01:45:33 2024 GMT
            Not After : Feb 13 01:45:33 2027 GMT
        Subject: CN=764e6cce-009d-4ab5-89d3-96e0c12500b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ef:71:15:c4:73:10:8d:3f:bb:f2:6d:56:ac:
                    83:49:7d:27:0c:01:aa:d5:6b:21:7a:7d:04:94:99:
                    ce:18:eb:36:c0:20:42:e3:3c:db:01:a1:73:b2:3d:
                    d2:ad:23:96:e1:a1:aa:12:6c:8c:95:35:32:f2:1b:
                    7e:f0:9c:3e:2f:13:2d:79:7e:6b:66:24:d4:12:86:
                    1e:aa:8b:ce:3a:c5:11:9a:3e:c6:b4:3f:54:3e:4d:
                    9a:bc:88:03:84:d9:e5:cd:52:68:17:c8:13:f9:ca:
                    0d:63:0e:e0:82:ca:5c:5a:c0:c9:af:a5:35:37:49:
                    38:e5:fe:4a:5b:b8:f0:18:d5:c5:1f:53:82:84:e7:
                    3e:67:36:c8:8c:49:ae:f6:04:09:de:a4:83:a3:2e:
                    de:4a:3f:56:b6:0a:97:2a:00:8b:87:2e:ee:c8:29:
                    80:a4:8a:42:de:73:af:aa:c9:55:f7:f1:59:ce:8a:
                    fa:ca:c6:c9:05:b5:5a:28:a4:24:34:f3:f4:8e:b5:
                    92:77:37:c1:32:15:3c:54:ba:0e:dd:05:cb:cf:95:
                    e3:f8:72:6b:92:04:52:a1:95:3b:7c:14:e7:8c:b7:
                    b1:f8:5e:b8:76:de:4f:3e:dc:9f:ec:5a:13:80:0d:
                    09:1b:da:9b:c6:9a:5e:2f:79:03:09:36:58:18:6a:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8B:2D:45:11:18:1C:1B:43:F4:60:08:D3:0E:DF:00:F8:75:47:E9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/764e6cce-009d-4ab5-89d3-96e0c12500b3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.121.244.0/22
                  192.155.69.0/24
                IPv6:
                  2606:16c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53414

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4e:a5:66:36:08:95:75:68:e6:53:ac:18:ab:92:de:84:fa:
         3d:fd:0c:f5:da:3e:23:f5:64:49:04:37:4e:49:92:24:ce:f1:
         76:25:f4:16:b7:e3:01:3f:68:a2:9d:57:29:d0:c0:14:bd:7f:
         3a:ed:e6:23:ca:c6:8c:40:64:a2:3f:51:2a:99:47:62:22:70:
         06:d4:01:ef:7b:18:98:e6:3d:ac:36:7a:ef:a9:e2:82:a5:6a:
         14:20:ef:f0:7a:a0:73:17:53:57:bc:cb:42:d1:c3:59:db:f4:
         72:9b:29:38:0b:2a:c1:51:b8:84:8e:bf:9e:50:15:af:0d:0a:
         ca:5c:db:59:3a:82:a3:9b:39:c7:30:80:d5:ad:9a:49:0b:18:
         14:05:18:12:b1:1b:93:ff:5c:f5:a8:70:60:3a:6f:07:2d:9d:
         32:79:e6:b8:7e:e6:c1:11:d6:d9:0b:f7:e4:ce:7b:99:ce:fb:
         14:5a:38:84:f9:06:2d:8c:dd:a7:02:d5:df:26:cc:81:56:40:
         3d:b8:70:c1:ef:62:4b:5d:c4:92:ee:a5:de:0d:6e:71:73:79:
         64:86:b7:04:78:3f:70:67:3e:07:87:87:5c:a9:89:7b:30:c0:
         78:d4:6e:dc:91:90:d4:6c:cd:5d:3f:eb:24:14:1a:a6:7f:06:
         d5:a3:39:57
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEfT/SPXfPI+W0KZWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MTExMDAxNDUzM1oXDTI3MDIxMzAxNDUzM1owLzEtMCsGA1UEAxMk
NzY0ZTZjY2UtMDA5ZC00YWI1LTg5ZDMtOTZlMGMxMjUwMGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu9xFcRzEI0/u/JtVqyDSX0nDAGq1Wshen0E
lJnOGOs2wCBC4zzbAaFzsj3SrSOW4aGqEmyMlTUy8ht+8Jw+LxMteX5rZiTUEoYe
qovOOsURmj7GtD9UPk2avIgDhNnlzVJoF8gT+coNYw7ggspcWsDJr6U1N0k45f5K
W7jwGNXFH1OChOc+ZzbIjEmu9gQJ3qSDoy7eSj9WtgqXKgCLhy7uyCmApIpC3nOv
qslV9/FZzor6ysbJBbVaKKQkNPP0jrWSdzfBMhU8VLoO3QXLz5Xj+HJrkgRSoZU7
fBTnjLex+F64dt5PPtyf7FoTgA0JG9qbxppeL3kDCTZYGGrIFwIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFBiLLUURGBwbQ/RgCNMO3wD4dUfpMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83
NjRlNmNjZS0wMDlkLTRhYjUtODlkMy05NmUwYzEyNTAwYjMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc2NGU2Y2NlLTAwOWQtNGFiNS04
OWQzLTk2ZTBjMTI1MDBiMy83NjRlNmNjZS0wMDlkLTRhYjUtODlkMy05NmUwYzEy
NTAwYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBAJKefQDBADAm0UwDQQCAAIwBwMFACYGFsAwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDANCmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHNOpWY2CJV1aOZTrBir
kt6E+j39DPXaPiP1ZEkEN05JkiTO8XYl9Ba34wE/aKKdVynQwBS9fzrt5iPKxoxA
ZKI/USqZR2IicAbUAe97GJjmPaw2eu+p4oKlahQg7/B6oHMXU1e8y0LRw1nb9HKb
KTgLKsFRuISOv55QFa8NCspc21k6gqObOccwgNWtmkkLGBQFGBKxG5P/XPWocGA6
bwctnTJ55rh+5sER1tkL9+TOe5nO+xRaOIT5Bi2M3acC1d8mzIFWQD24cMHvYktd
xJLupd4NbnFzeWSGtwR4P3BnPgeHh1ypiXswwHjUbtyRkNRszV0/6yQUGqZ/BtWj
OVc=
-----END CERTIFICATE-----