Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/424ca99e-61db-453c-8a64-a3bd9294a791.cer
File:                     424ca99e-61db-453c-8a64-a3bd9294a791.cer (raw, json)
Hash identifier:          3ui+yNAPCkiyLp/uylt1E2yrR218F3UDyc6nK34EbVs=
Subject key identifier:   3E:7C:F2:FE:58:7C:15:83:8F:FD:69:5B:FC:E3:42:C4:D6:69:FC:3C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847ACC9BAB4B0D231DD707DFB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/424ca99e-61db-453c-8a64-a3bd9294a791/424ca99e-61db-453c-8a64-a3bd9294a791.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/424ca99e-61db-453c-8a64-a3bd9294a791/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 27 Oct 2024 00:45:26 +0000
Certificate not after:    Sat 30 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 17369

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ac:c9:ba:b4:b0:d2:31:dd:70:7d:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 27 00:45:26 2024 GMT
            Not After : Jan 30 01:45:26 2027 GMT
        Subject: CN=424ca99e-61db-453c-8a64-a3bd9294a791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:96:02:4d:6e:d2:ea:64:97:f7:8e:d3:48:
                    20:1c:13:b3:d5:8f:68:21:8f:6a:7b:e4:7a:da:d9:
                    3f:f2:37:18:59:f7:93:48:20:ed:ad:f6:18:11:ec:
                    67:f6:b7:fb:ab:71:b6:7d:c6:50:53:88:e1:9a:02:
                    d3:d0:32:63:f1:46:c4:fc:12:67:20:b5:d6:91:eb:
                    51:5f:8a:ee:4a:c5:70:1f:1c:05:97:49:2e:01:fb:
                    e2:2f:73:c9:4c:84:41:26:40:0b:1a:91:28:53:18:
                    fd:69:ff:c3:ea:8f:4f:32:bb:3c:be:a9:87:fe:f1:
                    8f:9b:3f:c2:8f:d4:e0:4f:2e:ae:7b:33:7b:8b:48:
                    ba:d9:72:ba:c9:7e:fd:b7:97:8a:22:d3:31:8f:77:
                    26:a3:83:12:74:94:d7:58:0d:f2:1c:c6:90:9e:45:
                    62:45:06:c5:72:05:d1:b6:b6:e6:24:e4:d4:16:e6:
                    9d:02:e7:25:c9:13:5e:77:16:62:0e:1d:a7:6f:65:
                    19:a3:c6:6e:07:bd:3a:c2:62:63:7f:be:4e:bd:f2:
                    f8:70:b2:e5:bc:f3:56:e4:c3:6e:6d:e8:08:a8:6f:
                    2a:0f:18:0d:cb:a0:8f:fe:4d:f4:2b:3e:8d:3b:11:
                    77:87:41:f4:79:e7:a7:b2:2b:7f:81:a6:43:32:28:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7C:F2:FE:58:7C:15:83:8F:FD:69:5B:FC:E3:42:C4:D6:69:FC:3C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/424ca99e-61db-453c-8a64-a3bd9294a791/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/424ca99e-61db-453c-8a64-a3bd9294a791/424ca99e-61db-453c-8a64-a3bd9294a791.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17369

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:16:d2:c6:92:d4:7d:4d:df:bf:26:a3:44:5c:7a:32:bc:
         9e:85:68:3c:a5:95:5c:ca:e7:36:a4:a9:48:dd:d9:a7:01:bd:
         aa:74:c5:54:26:4a:b2:c1:39:ab:07:4d:f9:f0:99:44:c3:ab:
         27:fc:63:4f:77:4f:f5:f4:b0:08:bb:0b:7a:32:ce:22:7f:a4:
         b1:d0:14:57:32:6e:1c:ae:32:57:89:66:cf:39:54:dc:15:4a:
         5c:4b:5c:7d:77:e4:65:ca:e1:b2:f3:e8:3b:41:96:00:24:d0:
         11:6b:63:11:32:c9:64:78:2e:52:0b:c9:c1:59:de:4f:0c:81:
         ee:71:56:c0:34:a7:f8:c5:7d:62:a5:e2:d9:53:dd:53:bb:e6:
         bc:5e:b6:ae:a5:63:ec:79:89:b7:30:f3:7e:13:86:dc:04:b7:
         f4:71:37:95:89:0b:ea:78:64:91:af:9a:d9:d7:92:16:3b:85:
         60:ad:66:18:d6:52:71:a2:46:34:9c:a1:28:83:58:c2:c7:b8:
         ac:bf:8e:42:06:85:72:4e:c9:b4:65:dc:02:a7:6f:4c:b3:e4:
         cd:59:73:4f:b5:e2:16:14:ad:fc:9a:46:e0:c0:5d:b0:34:61:
         c4:a0:d7:96:7f:85:1c:f1:58:60:6b:8c:93:82:93:7c:ea:54:
         3c:de:ed:50
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEesybq0sNIx3XB9+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTAyNzAwNDUyNloXDTI3MDEzMDAxNDUyNlowLzEtMCsGA1UEAxMk
NDI0Y2E5OWUtNjFkYi00NTNjLThhNjQtYTNiZDkyOTRhNzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbuWAk1u0upkl/eO00ggHBOz1Y9oIY9qe+R6
2tk/8jcYWfeTSCDtrfYYEexn9rf7q3G2fcZQU4jhmgLT0DJj8UbE/BJnILXWketR
X4ruSsVwHxwFl0kuAfviL3PJTIRBJkALGpEoUxj9af/D6o9PMrs8vqmH/vGPmz/C
j9TgTy6uezN7i0i62XK6yX79t5eKItMxj3cmo4MSdJTXWA3yHMaQnkViRQbFcgXR
trbmJOTUFuadAuclyRNedxZiDh2nb2UZo8ZuB706wmJjf75OvfL4cLLlvPNW5MNu
begIqG8qDxgNy6CP/k30Kz6NOxF3h0H0eeensit/gaZDMijKhwIDAQABo4ID+TCC
A/UwHQYDVR0OBBYEFD588v5YfBWDj/1pW/zjQsTWafw8MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80
MjRjYTk5ZS02MWRiLTQ1M2MtOGE2NC1hM2JkOTI5NGE3OTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzQyNGNhOTllLTYxZGItNDUzYy04
YTY0LWEzYmQ5Mjk0YTc5MS80MjRjYTk5ZS02MWRiLTQ1M2MtOGE2NC1hM2JkOTI5
NGE3OTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICQ9kwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaOEW0saS1H1N378mo0RcejK8noVo
PKWVXMrnNqSpSN3ZpwG9qnTFVCZKssE5qwdN+fCZRMOrJ/xjT3dP9fSwCLsLejLO
In+ksdAUVzJuHK4yV4lmzzlU3BVKXEtcfXfkZcrhsvPoO0GWACTQEWtjETLJZHgu
UgvJwVneTwyB7nFWwDSn+MV9YqXi2VPdU7vmvF62rqVj7HmJtzDzfhOG3AS39HE3
lYkL6nhkka+a2deSFjuFYK1mGNZScaJGNJyhKINYwse4rL+OQgaFck7JtGXcAqdv
TLPkzVlzT7XiFhSt/JpG4MBdsDRhxKDXln+FHPFYYGuMk4KTfOpUPN7tUA==
-----END CERTIFICATE-----