Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3.cer
File:                     1bc7982a-669a-4674-a6b4-663e3d77bfe3.cer (raw, json)
Hash identifier:          RxFI3I2I0Br3IoyRBDh/Bac8xxijfpBP799L5jGaW5o=
Subject key identifier:   FC:BC:FD:25:98:FA:A1:90:1B:88:0D:A2:25:B8:E8:5F:E2:07:90:3D
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847A19EFDBA1F0BB39C66742200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/1bc7982a-669a-4674-a6b4-663e3d77bfe3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 23 Oct 2024 00:45:26 +0000
Certificate not after:    Tue 26 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 54400
                          AS: 401076

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a1:9e:fd:ba:1f:0b:b3:9c:66:74:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 23 00:45:26 2024 GMT
            Not After : Jan 26 01:45:26 2027 GMT
        Subject: CN=1bc7982a-669a-4674-a6b4-663e3d77bfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:d0:9b:da:e7:d3:f5:bb:23:81:6f:24:83:
                    b1:e0:00:b8:0d:8b:14:40:49:ef:a9:2b:17:1e:0a:
                    b4:6c:fe:23:3d:4b:9e:72:f3:8d:c7:39:6c:70:04:
                    5e:c9:a1:c7:fa:ed:ca:16:59:79:33:fe:7f:48:d8:
                    2f:c8:e1:20:d9:f0:29:4c:1e:6d:55:f1:49:10:fb:
                    ff:7c:43:2d:1a:00:a8:c2:df:db:e4:25:b0:45:02:
                    ca:ae:d4:bc:7b:3b:69:ba:15:fc:5d:e2:90:03:62:
                    72:1d:43:15:27:2d:85:54:52:b6:8a:16:f4:e6:8f:
                    de:73:e0:93:dd:95:5d:e5:1d:df:ce:90:37:0d:5c:
                    d2:ad:88:df:78:7a:a9:cc:49:93:8f:2e:83:8b:6b:
                    67:67:b4:0b:82:32:3e:6d:c1:f5:14:5f:44:f6:88:
                    2b:62:70:29:32:e9:f8:7f:dc:df:0a:d2:a2:5e:79:
                    94:b0:b2:a3:bf:82:c7:85:14:27:39:5a:93:3b:d0:
                    6e:dd:5c:5e:27:45:e6:35:b9:d8:80:89:ce:1f:82:
                    44:1c:f6:33:a1:cf:e5:e2:ef:4c:39:6a:ed:51:33:
                    54:8e:62:9f:88:77:ca:0d:2b:47:07:1d:67:28:3f:
                    89:31:8a:46:f9:e3:3b:c8:10:0d:ce:d1:c2:aa:4f:
                    0d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:FD:25:98:FA:A1:90:1B:88:0D:A2:25:B8:E8:5F:E2:07:90:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/1bc7982a-669a-4674-a6b4-663e3d77bfe3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54400
                  401076

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9e:0f:c8:60:da:98:3a:ab:06:3a:85:95:72:8e:2a:ab:57:
         df:ec:3d:32:b7:8e:e6:a7:a6:62:1e:5d:f2:12:57:95:09:4c:
         97:d0:a8:24:63:d7:f6:99:77:45:f8:9a:74:cd:b8:c1:af:a9:
         21:84:b5:5f:3c:ce:5f:41:03:34:80:38:3f:12:ef:c9:79:f9:
         bd:69:c0:36:49:2b:f9:06:c2:ec:97:41:77:1e:34:37:7c:85:
         10:cc:24:bb:aa:60:6a:2a:34:54:5b:82:62:d2:ac:b9:0d:fc:
         f0:f7:17:eb:de:cc:b7:5c:07:ba:81:51:1d:7e:2d:3f:fa:bc:
         b4:97:10:5c:7d:aa:1d:ca:23:ef:df:28:57:86:0c:f1:9a:ce:
         0f:3d:a5:57:54:c4:fc:31:7a:d3:5c:ed:0b:4c:fe:6c:0a:b2:
         ee:b9:f1:b4:75:cd:19:cd:73:a4:4f:81:b3:7c:69:bb:87:71:
         b6:8d:1e:95:0a:25:a2:24:d1:0c:5e:79:3d:e9:89:a7:d9:8a:
         e0:4d:b6:52:fc:1c:0f:6a:60:27:cb:d4:9c:1f:54:4c:4d:36:
         03:ad:e6:06:48:07:80:f3:f5:06:87:83:df:8d:00:54:eb:98:
         1e:4c:51:3b:d1:8e:9f:8f:1f:fc:eb:7d:d1:0d:13:ac:e1:95:
         be:b6:80:cf
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEehnv26HwuznGZ0IgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTAyMzAwNDUyNloXDTI3MDEyNjAxNDUyNlowLzEtMCsGA1UEAxMk
MWJjNzk4MmEtNjY5YS00Njc0LWE2YjQtNjYzZTNkNzdiZmUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKnQm9rn0/W7I4FvJIOx4AC4DYsUQEnvqSsX
Hgq0bP4jPUuecvONxzlscAReyaHH+u3KFll5M/5/SNgvyOEg2fApTB5tVfFJEPv/
fEMtGgCowt/b5CWwRQLKrtS8eztpuhX8XeKQA2JyHUMVJy2FVFK2ihb05o/ec+CT
3ZVd5R3fzpA3DVzSrYjfeHqpzEmTjy6Di2tnZ7QLgjI+bcH1FF9E9ogrYnApMun4
f9zfCtKiXnmUsLKjv4LHhRQnOVqTO9Bu3VxeJ0XmNbnYgInOH4JEHPYzoc/l4u9M
OWrtUTNUjmKfiHfKDStHBx1nKD+JMYpG+eM7yBANztHCqk8NqwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFPy8/SWY+qGQG4gNoiW46F/iB5A9MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x
YmM3OTgyYS02NjlhLTQ2NzQtYTZiNC02NjNlM2Q3N2JmZTMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFiYzc5ODJhLTY2OWEtNDY3NC1h
NmI0LTY2M2UzZDc3YmZlMy8xYmM3OTgyYS02NjlhLTQ2NzQtYTZiNC02NjNlM2Q3
N2JmZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH
AQgBAf8EEDAOoAwwCgIDANSAAgMGHrQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWp4PyGDamDqrBjqFlXKO
KqtX3+w9MreO5qemYh5d8hJXlQlMl9CoJGPX9pl3RfiadM24wa+pIYS1XzzOX0ED
NIA4PxLvyXn5vWnANkkr+QbC7JdBdx40N3yFEMwku6pgaio0VFuCYtKsuQ388PcX
697Mt1wHuoFRHX4tP/q8tJcQXH2qHcoj798oV4YM8ZrODz2lV1TE/DF601ztC0z+
bAqy7rnxtHXNGc1zpE+Bs3xpu4dxto0elQoloiTRDF55PemJp9mK4E22UvwcD2pg
J8vUnB9UTE02A63mBkgHgPP1BoeD340AVOuYHkxRO9GOn48f/Ot90Q0TrOGVvraA
zw==
-----END CERTIFICATE-----