Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer
File:                     1a74d4fe-43d0-4bc2-83fe-f1908308e46c.cer (raw, json)
Hash identifier:          4Ur0pmDZSEvqbpkjxdo30tnYUS19asQtM4N5OpPskms=
Subject key identifier:   B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847563E8835F2F2B6C27E353180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 26 Sep 2024 00:45:28 +0000
Certificate not after:    Wed 30 Dec 2026 01:45:28 +0000
Subordinate resources:    AS: 567
                          AS: 11162
                          AS: 16408
                          AS: 16499
                          IP: 192.124.99.0 -- 192.124.100.255
                          IP: 2001:1878::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:3e:88:35:f2:f2:b6:c2:7e:35:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 26 00:45:28 2024 GMT
            Not After : Dec 30 01:45:28 2026 GMT
        Subject: CN=1a74d4fe-43d0-4bc2-83fe-f1908308e46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:31:c5:21:58:d6:ac:66:ef:86:eb:fe:c1:
                    36:b5:e7:be:de:51:fa:43:6e:a6:7a:09:91:7a:ae:
                    9c:77:a1:e4:38:c0:c3:3e:91:65:7f:12:88:29:f7:
                    c1:8b:f9:28:71:5a:5b:f4:83:aa:09:28:5e:05:40:
                    6d:8b:f3:5f:0a:70:93:a4:c0:9f:de:74:b6:d2:f1:
                    a2:7a:87:d8:a5:98:e6:58:8e:c5:77:3d:64:2f:e3:
                    ea:80:06:3e:6d:48:7c:e1:9a:88:da:6d:38:a8:37:
                    0c:f9:fe:9c:93:55:54:79:c9:05:fc:b3:65:b9:89:
                    1c:c9:7d:49:91:ea:02:e3:a3:27:37:f7:a9:a0:4f:
                    b5:33:a3:45:24:f0:71:8b:cc:55:d3:40:80:2a:6c:
                    24:46:b0:78:af:91:4d:45:d8:f3:57:d2:32:41:37:
                    5b:45:be:6b:b6:63:05:69:65:6e:2d:ed:c4:c7:45:
                    6f:4e:02:c9:54:27:f3:e9:03:d0:ca:cc:d6:3d:e5:
                    da:6d:03:66:1b:ad:db:d4:d3:10:64:d1:9e:24:1d:
                    f5:62:cd:f4:5f:ef:7a:0b:9d:9b:57:2e:80:41:94:
                    52:d3:68:30:ed:5a:10:73:17:4e:20:cb:9b:e2:b4:
                    a7:d0:2d:17:e9:af:f1:85:d6:95:d6:5f:49:de:3d:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:ED:9F:BD:D4:7E:67:B8:ED:9F:5B:BF:99:2B:78:41:F4:02:8C:9E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a74d4fe-43d0-4bc2-83fe-f1908308e46c/1a74d4fe-43d0-4bc2-83fe-f1908308e46c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.99.0-192.124.100.255
                IPv6:
                  2001:1878::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  567
                  11162
                  16408
                  16499

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8c:71:02:13:df:b6:2f:c3:2c:3a:6d:a1:5b:b7:ab:67:5b:
         16:4f:7c:86:8e:60:7f:a8:95:05:9e:1b:0d:bc:05:bb:67:8f:
         25:e9:04:2a:20:e4:0c:c4:f1:da:29:8f:82:42:b5:d7:08:6f:
         b6:7a:34:be:fe:58:96:36:6b:b6:ba:c5:28:e9:35:02:b7:eb:
         60:21:cd:fa:b5:e8:e6:28:b1:19:b7:f9:38:f7:a5:0e:8d:98:
         eb:43:36:b6:e1:f7:61:8e:e6:2f:d3:63:74:f2:7c:dc:99:45:
         15:67:07:8d:4d:f4:e5:d2:e4:f8:ef:2f:ba:33:62:4d:18:62:
         72:8a:bc:ac:3d:cf:d9:1d:f0:23:8c:a5:f8:34:62:75:19:c8:
         ea:03:da:1f:79:cc:ab:fd:fa:d1:56:ef:59:36:9f:9f:e0:a0:
         4c:b5:dd:8c:40:a5:d7:f7:80:64:bd:06:31:5c:60:61:ca:40:
         ad:72:71:23:cc:85:93:19:d0:db:91:31:e1:81:91:c9:3b:e1:
         45:db:25:04:55:de:62:d6:e1:e6:14:a2:88:1c:76:1c:83:3d:
         bf:31:ed:fc:59:c3:7e:9c:cc:98:97:3e:b9:e7:90:96:13:a6:
         93:0b:2d:33:b0:88:65:0e:d6:dc:68:7d:35:32:31:d7:3d:ef:
         bd:ad:3b:85
-----BEGIN CERTIFICATE-----
MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEdWPog18vK2wn41MYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MDkyNjAwNDUyOFoXDTI2MTIzMDAxNDUyOFowLzEtMCsGA1UEAxMk
MWE3NGQ0ZmUtNDNkMC00YmMyLTgzZmUtZjE5MDgzMDhlNDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksIxxSFY1qxm74br/sE2tee+3lH6Q26megmR
eq6cd6HkOMDDPpFlfxKIKffBi/kocVpb9IOqCSheBUBti/NfCnCTpMCf3nS20vGi
eofYpZjmWI7Fdz1kL+PqgAY+bUh84ZqI2m04qDcM+f6ck1VUeckF/LNluYkcyX1J
keoC46MnN/epoE+1M6NFJPBxi8xV00CAKmwkRrB4r5FNRdjzV9IyQTdbRb5rtmMF
aWVuLe3Ex0VvTgLJVCfz6QPQyszWPeXabQNmG63b1NMQZNGeJB31Ys30X+96C52b
Vy6AQZRS02gw7VoQcxdOIMub4rSn0C0X6a/xhdaV1l9J3j25ZQIDAQABo4IEPTCC
BDkwHQYDVR0OBBYEFLHtn73Ufme47Z9bv5kreEH0AoyeMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x
YTc0ZDRmZS00M2QwLTRiYzItODNmZS1mMTkwODMwOGU0NmMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFhNzRkNGZlLTQzZDAtNGJjMi04
M2ZlLWYxOTA4MzA4ZTQ2Yy8xYTc0ZDRmZS00M2QwLTRiYzItODNmZS1mMTkwODMw
OGU0NmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNgYIKwYBBQUH
AQcBAf8EJzAlMBQEAgABMA4wDAMEAMB8YwMEAMB8ZDANBAIAAjAHAwUAIAEYeDAl
BggrBgEFBQcBCAEB/wQWMBSgEjAQAgICNwICK5oCAkAYAgJAczBUBgNVHSABAf8E
SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u
bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBc
jHECE9+2L8MsOm2hW7erZ1sWT3yGjmB/qJUFnhsNvAW7Z48l6QQqIOQMxPHaKY+C
QrXXCG+2ejS+/liWNmu2usUo6TUCt+tgIc36tejmKLEZt/k496UOjZjrQza24fdh
juYv02N08nzcmUUVZweNTfTl0uT47y+6M2JNGGJyirysPc/ZHfAjjKX4NGJ1Gcjq
A9ofecyr/frRVu9ZNp+f4KBMtd2MQKXX94BkvQYxXGBhykCtcnEjzIWTGdDbkTHh
gZHJO+FF2yUEVd5i1uHmFKKIHHYcgz2/Me38WcN+nMyYlz6555CWE6aTCy0zsIhl
DtbcaH01MjHXPe+9rTuF
-----END CERTIFICATE-----