Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35e5abbc-d049-4f24-b1e7-96dde9bf811b.cer
File:                     35e5abbc-d049-4f24-b1e7-96dde9bf811b.cer (raw, json)
Hash identifier:          oJNwGRaWOFA49ZKU/KcneLD/Cm2HJoLLyekX8hNU+aE=
Subject key identifier:   DD:D0:05:E4:FB:45:62:2F:02:F7:3E:C8:68:1E:48:AB:C9:78:C2:A6
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858431497B2D64554D82B032E9390
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35e5abbc-d049-4f24-b1e7-96dde9bf811b/35e5abbc-d049-4f24-b1e7-96dde9bf811b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35e5abbc-d049-4f24-b1e7-96dde9bf811b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 01 Sep 2023 17:14:01 +0000
Certificate not after:    Thu 04 Dec 2025 18:14:01 +0000
Subordinate resources:    IP: 129.93.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:14:97:b2:d6:45:54:d8:2b:03:2e:93:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep  1 17:14:01 2023 GMT
            Not After : Dec  4 18:14:01 2025 GMT
        Subject: CN=35e5abbc-d049-4f24-b1e7-96dde9bf811b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:60:13:d8:9b:34:dc:da:ee:f1:44:6a:cb:
                    c4:49:2b:13:21:2d:54:19:51:0a:2c:c7:70:b6:e2:
                    4e:60:7c:db:54:1c:d6:ce:d6:60:a9:4e:0f:65:1b:
                    f6:7c:be:9b:43:f5:92:2d:3b:ac:b2:81:b5:fc:74:
                    3b:a7:b3:1f:02:bd:38:22:a0:0b:f8:41:f0:af:04:
                    ce:87:8e:52:10:e4:a7:55:35:00:2d:eb:23:68:f9:
                    87:86:c0:aa:12:5a:c7:fd:db:46:44:1a:4e:59:74:
                    bc:f9:53:55:6c:3a:75:b3:96:c6:e8:e1:6a:31:48:
                    d5:61:c4:65:e2:d5:e2:0b:d3:2f:c6:d4:55:ce:ca:
                    fe:a2:73:9c:36:46:df:ff:47:e4:f3:78:1d:c3:55:
                    1b:ed:09:ed:8c:5b:67:1f:f1:35:a0:e3:55:da:6f:
                    8f:f4:c2:35:33:63:d3:6f:11:7e:ac:98:7f:7e:98:
                    c3:60:da:91:5e:4e:e3:9a:01:91:0d:0a:e0:3d:74:
                    06:d2:bf:73:7e:e3:20:bf:21:49:02:74:18:ea:c5:
                    3c:bc:6f:e8:70:4e:ea:b2:45:ec:c3:83:58:b9:59:
                    c8:b9:fa:5f:c1:b6:f7:58:f2:16:4f:06:71:c7:95:
                    4e:65:4e:59:b3:db:cd:0c:4f:8c:5c:f3:cf:9c:4a:
                    3e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D0:05:E4:FB:45:62:2F:02:F7:3E:C8:68:1E:48:AB:C9:78:C2:A6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35e5abbc-d049-4f24-b1e7-96dde9bf811b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35e5abbc-d049-4f24-b1e7-96dde9bf811b/35e5abbc-d049-4f24-b1e7-96dde9bf811b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.93.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:02:24:c9:30:93:e0:2c:a1:9b:65:b2:6b:f5:b0:da:02:e5:
         59:6b:2b:64:e6:e8:71:0d:1c:fe:ad:ac:61:0d:c1:70:15:1e:
         01:97:dd:56:fd:83:89:3e:d4:a6:f1:5f:48:15:03:29:c4:c3:
         5d:a9:de:c5:9e:c3:da:42:59:26:0f:a2:78:5f:c8:88:a7:66:
         d4:d3:b6:f2:a3:58:43:b7:9c:d3:04:a9:a5:6b:62:2b:f1:ff:
         d6:52:ac:13:bd:94:e1:d5:8a:62:db:b4:f7:23:5f:11:2b:eb:
         f9:a8:5a:6f:7d:b4:fe:e2:02:a7:a4:3a:95:98:90:be:16:dc:
         92:c2:41:6f:8f:72:cd:14:3a:36:9d:d2:cc:b5:0c:74:65:7b:
         f2:3b:ed:a3:10:d2:a0:e5:71:ff:80:52:df:cc:96:c7:5b:87:
         75:74:85:32:a2:9f:a8:87:77:54:7f:ed:6b:ff:75:2b:1a:a9:
         7e:05:fb:a4:8c:35:c2:5e:bc:c8:7c:72:c4:4b:5a:b0:13:d3:
         94:81:d2:2f:4b:64:84:63:80:11:29:41:81:08:10:3e:bd:d3:
         51:ae:55:a9:7f:f8:82:90:12:70:e9:cc:f3:ac:04:6a:95:1c:
         4c:67:1d:a1:77:9a:3d:90:c7:cc:14:91:d5:95:c3:3d:d5:6c:
         f4:ce:10:ed
-----BEGIN CERTIFICATE-----
MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEMUl7LWRVTYKwMuk5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDkwMTE3MTQwMVoXDTI1MTIwNDE4MTQwMVowLzEtMCsGA1UEAxMk
MzVlNWFiYmMtZDA0OS00ZjI0LWIxZTctOTZkZGU5YmY4MTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+FgE9ibNNza7vFEasvESSsTIS1UGVEKLMdw
tuJOYHzbVBzWztZgqU4PZRv2fL6bQ/WSLTussoG1/HQ7p7MfAr04IqAL+EHwrwTO
h45SEOSnVTUALesjaPmHhsCqElrH/dtGRBpOWXS8+VNVbDp1s5bG6OFqMUjVYcRl
4tXiC9MvxtRVzsr+onOcNkbf/0fk83gdw1Ub7QntjFtnH/E1oONV2m+P9MI1M2PT
bxF+rJh/fpjDYNqRXk7jmgGRDQrgPXQG0r9zfuMgvyFJAnQY6sU8vG/ocE7qskXs
w4NYuVnIufpfwbb3WPIWTwZxx5VOZU5Zs9vNDE+MXPPPnEo+QQIDAQABo4ID/jCC
A/owHQYDVR0OBBYEFN3QBeT7RWIvAvc+yGgeSKvJeMKmMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z
NWU1YWJiYy1kMDQ5LTRmMjQtYjFlNy05NmRkZTliZjgxMWIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzM1ZTVhYmJjLWQwNDktNGYyNC1i
MWU3LTk2ZGRlOWJmODExYi8zNWU1YWJiYy1kMDQ5LTRmMjQtYjFlNy05NmRkZTli
ZjgxMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCBXTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjAiTJMJPgLKGbZbJr9bDa
AuVZaytk5uhxDRz+raxhDcFwFR4Bl91W/YOJPtSm8V9IFQMpxMNdqd7FnsPaQlkm
D6J4X8iIp2bU07byo1hDt5zTBKmla2Ir8f/WUqwTvZTh1Ypi27T3I18RK+v5qFpv
fbT+4gKnpDqVmJC+FtySwkFvj3LNFDo2ndLMtQx0ZXvyO+2jENKg5XH/gFLfzJbH
W4d1dIUyop+oh3dUf+1r/3UrGql+BfukjDXCXrzIfHLES1qwE9OUgdIvS2SEY4AR
KUGBCBA+vdNRrlWpf/iCkBJw6czzrARqlRxMZx2hd5o9kMfMFJHVlcM91Wz0zhDt
-----END CERTIFICATE-----