Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
File:                     09c51633-340e-4eac-820c-a36b33746085.cer (raw, json)
Hash identifier:          S84FtR31LCAcMm6ZQfXdYOz6lDPWd6naUzuz4VQk/F8=
Subject key identifier:   58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858423AC03339C989FD57777541C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Jun 2023 16:29:24 +0000
Certificate not after:    Wed 17 Sep 2025 16:29:24 +0000
Subordinate resources:    AS: 13928
                          IP: 199.21.128.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:3a:c0:33:39:c9:89:fd:57:77:75:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 15 16:29:24 2023 GMT
            Not After : Sep 17 16:29:24 2025 GMT
        Subject: CN=09c51633-340e-4eac-820c-a36b33746085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:69:14:b9:4b:7d:c3:1c:da:46:f5:04:90:0c:
                    15:cf:9a:3d:47:8e:f2:44:ff:b3:f2:c7:8a:f2:06:
                    d9:c2:e5:48:21:30:fb:7b:3d:41:64:c1:88:6a:b4:
                    36:c5:85:6f:da:22:71:c7:19:0a:9b:ac:e9:78:aa:
                    f6:54:a3:d8:d9:b3:55:6c:89:cd:0e:98:bc:0f:48:
                    0e:47:11:c8:bf:e6:48:ec:0b:b0:0d:20:28:14:c8:
                    f9:cd:84:c1:74:10:42:94:dc:f8:5a:61:25:de:00:
                    79:8d:9a:92:5a:fe:09:69:a0:ce:8c:fc:dd:23:36:
                    8b:57:99:c3:6d:50:b5:05:e9:1b:6e:47:17:48:4c:
                    77:69:ad:52:4e:6b:3b:09:0c:b0:a8:8f:e8:6e:36:
                    13:5b:bf:b6:10:11:ed:ee:7b:e1:d9:64:6c:dd:e8:
                    ff:cf:b4:0a:81:86:fe:d9:45:8e:15:c7:e5:ed:b7:
                    fe:23:3d:c1:2f:87:70:3c:09:6e:98:dd:ea:42:cc:
                    5c:d1:db:07:c3:d1:99:46:67:95:d7:d0:c4:d4:bb:
                    ae:24:a8:8b:f0:ac:f9:de:a3:1d:71:6d:7c:3e:bc:
                    50:3d:86:6a:f7:c2:f2:fd:f0:d3:c0:35:f4:da:b2:
                    81:72:dc:7e:e8:c3:55:b1:4a:e7:c3:76:f4:1b:fd:
                    2b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.128.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13928

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:ad:f9:0e:37:08:72:1d:80:a8:93:17:93:68:0a:d6:52:
         51:93:83:5b:00:1b:44:20:39:ba:20:f2:3e:d6:74:e6:85:b1:
         53:b6:6a:70:9f:34:d6:c3:dd:29:76:d0:7f:b7:4a:90:fb:f3:
         0f:de:7e:6b:dc:06:b6:d0:05:6f:c8:c4:22:f1:f9:4a:22:a2:
         46:f3:80:94:39:d2:42:1b:8b:83:55:87:ec:81:89:23:6c:3a:
         a1:1d:d6:af:7c:f6:0c:e6:cc:78:79:c5:f9:02:1f:11:f5:79:
         96:55:84:53:e7:b3:20:58:fb:4b:b5:8e:5f:91:b9:ef:ac:3e:
         43:fb:3f:bc:84:90:d7:b9:7b:da:5f:58:fb:58:b9:78:6d:8a:
         12:b5:6f:db:36:df:97:64:8c:a7:39:47:83:ec:b4:ef:3a:67:
         7d:32:7a:87:a2:0e:05:64:2a:82:5b:f2:51:19:e0:10:f3:00:
         36:dd:c5:e5:f2:28:73:72:04:49:48:3f:c7:14:fd:b5:77:bb:
         9e:7d:7c:10:69:8e:20:ea:bd:c9:30:1a:8a:c8:27:32:2a:ce:
         25:d1:16:2e:b0:de:2d:0b:58:92:ab:95:05:05:d6:97:0e:9f:
         db:52:09:bc:56:bb:9a:99:e1:0e:c9:d5:43:af:8d:04:84:5c:
         5a:eb:07:44
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEI6wDM5yYn9V3d1QcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDYxNTE2MjkyNFoXDTI1MDkxNzE2MjkyNFowLzEtMCsGA1UEAxMk
MDljNTE2MzMtMzQwZS00ZWFjLTgyMGMtYTM2YjMzNzQ2MDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWkUuUt9wxzaRvUEkAwVz5o9R47yRP+z8seK
8gbZwuVIITD7ez1BZMGIarQ2xYVv2iJxxxkKm6zpeKr2VKPY2bNVbInNDpi8D0gO
RxHIv+ZI7AuwDSAoFMj5zYTBdBBClNz4WmEl3gB5jZqSWv4JaaDOjPzdIzaLV5nD
bVC1BekbbkcXSEx3aa1STms7CQywqI/objYTW7+2EBHt7nvh2WRs3ej/z7QKgYb+
2UWOFcfl7bf+Iz3BL4dwPAlumN3qQsxc0dsHw9GZRmeV19DE1LuuJKiL8Kz53qMd
cW18PrxQPYZq98Ly/fDTwDX02rKBctx+6MNVsUrnw3b0G/0rIwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFFjbRFtkVAhpejljaLFp8aL4isE0MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w
OWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3NDYwODUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzA5YzUxNjMzLTM0MGUtNGVhYy04
MjBjLWEzNmIzMzc0NjA4NS8wOWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3
NDYwODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALHFYAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
NmgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAO3qt+Q43CHIdgKiTF5NoCtZSUZODWwAbRCA5uiDyPtZ05oWx
U7ZqcJ801sPdKXbQf7dKkPvzD95+a9wGttAFb8jEIvH5SiKiRvOAlDnSQhuLg1WH
7IGJI2w6oR3Wr3z2DObMeHnF+QIfEfV5llWEU+ezIFj7S7WOX5G576w+Q/s/vISQ
17l72l9Y+1i5eG2KErVv2zbfl2SMpzlHg+y07zpnfTJ6h6IOBWQqglvyURngEPMA
Nt3F5fIoc3IESUg/xxT9tXe7nn18EGmOIOq9yTAaisgnMirOJdEWLrDeLQtYkquV
BQXWlw6f21IJvFa7mpnhDsnVQ6+NBIRcWusHRA==
-----END CERTIFICATE-----