Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer
File:                     2e0f6e77-78a4-4730-aa9b-3b5e019fed27.cer (raw, json)
Hash identifier:          YtdvFqk3Imuxb1P9H/KtH3Na0Bm+lgf0DHACH02e1dc=
Subject key identifier:   43:39:1E:B7:CC:05:79:26:C4:6F:20:C6:64:4F:A3:97:E6:85:9C:61
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858473BB907E210E4A19775407900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 16 Sep 2024 12:45:27 +0000
Certificate not after:    Sun 20 Dec 2026 13:45:27 +0000
Subordinate resources:    AS: 893
                          IP: 23.137.88.0/24
                          IP: 2602:fb61::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:b9:07:e2:10:e4:a1:97:75:40:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 16 12:45:27 2024 GMT
            Not After : Dec 20 13:45:27 2026 GMT
        Subject: CN=2e0f6e77-78a4-4730-aa9b-3b5e019fed27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b2:75:59:b0:87:7e:6a:6c:75:25:28:57:51:
                    b4:7c:e6:25:d9:9a:4b:f3:a5:e0:1c:81:13:59:6b:
                    e5:5e:53:ea:b2:61:74:13:4d:e1:b8:6e:2a:ca:19:
                    0a:e3:47:ff:b7:58:4e:76:27:4f:98:ac:d3:57:0e:
                    d2:64:ce:e9:c4:86:66:50:61:05:09:d3:0b:30:d4:
                    c5:6a:b4:71:48:03:62:e9:cb:39:2f:12:b3:41:f1:
                    ee:0d:e6:33:db:e7:d2:66:fe:a9:67:ce:d9:1d:aa:
                    3c:fc:26:a8:b0:58:10:86:74:c7:de:98:d2:ca:2b:
                    33:3c:69:22:dd:f8:31:f0:aa:2c:58:6a:d8:f5:e4:
                    c0:d1:0f:fb:f8:08:71:79:af:a2:2e:7b:19:3e:1f:
                    62:ca:33:92:bb:b5:90:f4:c4:37:ee:4d:30:2a:29:
                    1c:63:97:c3:b4:2e:bf:2d:84:e3:73:d4:fb:92:0b:
                    ec:bb:29:06:df:af:39:7c:03:6b:d5:18:b0:c5:14:
                    8c:25:31:d9:07:45:d4:85:8d:ba:94:57:b4:8c:dc:
                    2b:79:00:f0:71:3a:39:ec:e0:b7:68:0a:9f:b0:7e:
                    b9:a2:d7:bb:e9:89:82:05:21:f3:f5:cc:47:43:a9:
                    72:cc:4e:d3:ec:c1:47:e5:fe:ff:d0:b4:08:d6:99:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:39:1E:B7:CC:05:79:26:C4:6F:20:C6:64:4F:A3:97:E6:85:9C:61
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e0f6e77-78a4-4730-aa9b-3b5e019fed27/2e0f6e77-78a4-4730-aa9b-3b5e019fed27.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.88.0/24
                IPv6:
                  2602:fb61::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  893

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:89:c3:2e:ab:f5:ad:07:7a:a9:40:3e:d6:2a:5d:17:88:17:
         8a:2a:ce:ac:69:83:02:fa:dd:57:c2:85:a7:51:95:c8:b4:b1:
         67:1a:7b:53:15:c1:1c:b8:af:4f:c9:0c:18:f3:9a:dc:20:ab:
         f2:69:1b:74:1f:dc:53:b3:6d:e5:66:dc:a7:20:dc:30:14:07:
         40:1a:02:62:82:6e:2d:bd:4c:e6:98:12:8b:7d:7a:90:1a:b1:
         c9:55:91:ad:81:d8:9e:3e:77:c1:98:e7:62:b6:75:63:72:66:
         f5:6c:94:1b:25:ea:35:da:48:f1:4b:c6:f4:24:64:dc:41:01:
         ae:60:27:fc:5d:18:b5:80:65:09:a0:19:3d:c8:f7:63:82:62:
         9c:5a:70:69:b0:b4:b2:8e:19:e1:3f:ef:b6:40:63:61:bf:7c:
         18:e1:68:6f:7f:40:b8:bc:a3:cf:b4:6f:fb:55:01:54:d9:8d:
         f6:a1:ea:d9:3b:59:c6:14:2d:15:23:2e:5e:41:1b:48:d6:c0:
         c9:3d:8e:38:78:69:30:da:83:ab:d2:88:55:79:f3:77:cc:e0:
         ab:cd:81:ab:4f:36:e4:99:01:ad:76:64:bd:37:26:cc:44:9b:
         b9:65:f7:e9:12:42:31:1f:a1:5b:30:30:e7:9d:1e:f0:cd:e0:
         cd:8d:9e:e1
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEc7uQfiEOShl3VAeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MDkxNjEyNDUyN1oXDTI2MTIyMDEzNDUyN1owLzEtMCsGA1UEAxMk
MmUwZjZlNzctNzhhNC00NzMwLWFhOWItM2I1ZTAxOWZlZDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLJ1WbCHfmpsdSUoV1G0fOYl2ZpL86XgHIET
WWvlXlPqsmF0E03huG4qyhkK40f/t1hOdidPmKzTVw7SZM7pxIZmUGEFCdMLMNTF
arRxSANi6cs5LxKzQfHuDeYz2+fSZv6pZ87ZHao8/CaosFgQhnTH3pjSyiszPGki
3fgx8KosWGrY9eTA0Q/7+Ahxea+iLnsZPh9iyjOSu7WQ9MQ37k0wKikcY5fDtC6/
LYTjc9T7kgvsuykG3685fANr1RiwxRSMJTHZB0XUhY26lFe0jNwreQDwcTo57OC3
aAqfsH65ote76YmCBSHz9cxHQ6lyzE7T7MFH5f7/0LQI1pnb3wIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFEM5HrfMBXkmxG8gxmRPo5fmhZxhMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y
ZTBmNmU3Ny03OGE0LTQ3MzAtYWE5Yi0zYjVlMDE5ZmVkMjcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzJlMGY2ZTc3LTc4YTQtNDczMC1h
YTliLTNiNWUwMTlmZWQyNy8yZTBmNmU3Ny03OGE0LTQ3MzAtYWE5Yi0zYjVlMDE5
ZmVkMjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAAXiVgwDgQCAAIwCAMGACYC+2EAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAgN9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJKJwy6r9a0HeqlAPtYqXReIF4oq
zqxpgwL63VfChadRlci0sWcae1MVwRy4r0/JDBjzmtwgq/JpG3Qf3FOzbeVm3Kcg
3DAUB0AaAmKCbi29TOaYEot9epAasclVka2B2J4+d8GY52K2dWNyZvVslBsl6jXa
SPFLxvQkZNxBAa5gJ/xdGLWAZQmgGT3I92OCYpxacGmwtLKOGeE/77ZAY2G/fBjh
aG9/QLi8o8+0b/tVAVTZjfah6tk7WcYULRUjLl5BG0jWwMk9jjh4aTDag6vSiFV5
83fM4KvNgatPNuSZAa12ZL03JsxEm7ll9+kSQjEfoVswMOedHvDN4M2NnuE=
-----END CERTIFICATE-----