Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754.cer
File:                     54ef2b12-4c16-4f8f-88fb-0070607e9754.cer (raw, json)
Hash identifier:          zOy/oHL+gUet0vTACR5qlmrxuqdESzYXCumDF+6S/cM=
Subject key identifier:   B5:EB:90:83:FB:F9:3B:9E:18:AF:9D:0D:3D:A1:19:5C:C8:C9:94:A9
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842AD9C7DEF1D3F35E52BCD8780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/54ef2b12-4c16-4f8f-88fb-0070607e9754.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Jul 2023 19:55:25 +0000
Certificate not after:    Tue 28 Oct 2025 19:55:25 +0000
Subordinate resources:    IP: 136.143.131.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ad:9c:7d:ef:1d:3f:35:e5:2b:cd:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 26 19:55:25 2023 GMT
            Not After : Oct 28 19:55:25 2025 GMT
        Subject: CN=54ef2b12-4c16-4f8f-88fb-0070607e9754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:00:da:23:22:7c:4e:de:b5:70:6d:5a:f5:82:
                    5b:62:11:50:c3:44:25:2e:2b:8a:c1:f9:83:43:ca:
                    5c:ca:1d:3c:7d:02:9e:83:2d:13:41:fa:66:95:1c:
                    76:69:c6:6c:e4:2d:e3:b5:22:47:6c:9b:12:e0:fb:
                    10:b2:a3:9e:ac:a9:3b:b9:fe:ef:0b:ca:c9:ac:4d:
                    50:66:45:6a:c4:d2:8a:c2:67:24:d8:2c:d6:3c:84:
                    0d:60:6c:af:ca:57:6b:06:ea:88:a1:1e:35:46:6c:
                    36:f1:c1:c7:e9:67:71:11:b3:bc:ce:60:06:c1:23:
                    67:89:62:0d:08:8b:2a:bb:12:8b:28:2f:de:c2:50:
                    6b:96:b0:21:d1:1c:ec:14:79:df:e4:95:29:43:fd:
                    b2:f0:61:9d:09:00:e2:f6:a6:d7:ea:fa:c0:7b:2b:
                    d7:79:72:16:3b:12:36:3a:43:37:81:78:65:b8:64:
                    f5:a1:2e:fb:4b:39:fd:ee:8f:33:9c:09:02:69:29:
                    fe:de:66:fb:5b:b4:16:fd:77:26:2f:f9:f2:94:83:
                    f3:cd:a7:80:89:a3:dd:a6:a5:04:0a:03:99:d8:90:
                    fd:f1:10:d8:5f:c6:6b:c6:59:46:5b:7f:92:23:2f:
                    c2:12:6c:93:76:fa:74:5f:72:65:7c:19:7a:07:8a:
                    35:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EB:90:83:FB:F9:3B:9E:18:AF:9D:0D:3D:A1:19:5C:C8:C9:94:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/54ef2b12-4c16-4f8f-88fb-0070607e9754/54ef2b12-4c16-4f8f-88fb-0070607e9754.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:cd:66:3b:57:97:ac:e5:1a:b7:d8:e4:bd:83:ba:68:b2:3f:
         18:dd:45:ec:1a:a6:a4:8f:03:67:2d:62:7e:c8:83:ce:e2:95:
         d9:5d:3e:3a:3c:b3:f3:b0:ad:56:6b:24:0d:cd:f3:4c:56:39:
         36:b1:bc:47:f6:49:99:2d:0f:5f:b4:20:11:16:85:33:59:5f:
         ad:43:d0:09:83:ca:45:e2:cf:84:63:4d:65:f2:f8:69:48:71:
         95:1a:e1:b7:b2:a7:33:4a:72:ae:86:b6:61:ba:16:ea:50:28:
         98:43:57:46:1a:b2:43:7f:b7:a1:e2:14:35:23:36:cd:e4:7a:
         98:ad:81:1f:6a:56:c4:86:d4:78:df:0a:17:e4:d5:c9:4f:aa:
         1d:56:c2:25:9e:5e:b4:69:bf:47:c7:76:81:73:13:71:1d:3e:
         bb:47:e9:29:99:ac:11:a1:2c:14:cf:53:87:f0:42:cc:b3:8f:
         6d:76:ac:43:5e:58:30:a9:e0:de:47:7a:59:90:f4:c5:9a:19:
         f2:d6:b4:af:dc:9f:f2:c0:81:c7:b8:d3:e7:78:31:57:a1:c7:
         d9:c0:68:95:d4:93:7b:37:e9:b4:a2:9d:6b:b2:bb:70:e8:30:
         da:85:fd:b0:28:13:72:2a:5d:ae:49:25:60:48:3b:21:bc:d3:
         9a:93:d7:48
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEKtnH3vHT815SvNh4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDcyNjE5NTUyNVoXDTI1MTAyODE5NTUyNVowLzEtMCsGA1UEAxMk
NTRlZjJiMTItNGMxNi00ZjhmLTg4ZmItMDA3MDYwN2U5NzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmADaIyJ8Tt61cG1a9YJbYhFQw0QlLiuKwfmD
Q8pcyh08fQKegy0TQfpmlRx2acZs5C3jtSJHbJsS4PsQsqOerKk7uf7vC8rJrE1Q
ZkVqxNKKwmck2CzWPIQNYGyvyldrBuqIoR41Rmw28cHH6WdxEbO8zmAGwSNniWIN
CIsquxKLKC/ewlBrlrAh0RzsFHnf5JUpQ/2y8GGdCQDi9qbX6vrAeyvXeXIWOxI2
OkM3gXhluGT1oS77Szn97o8znAkCaSn+3mb7W7QW/XcmL/nylIPzzaeAiaPdpqUE
CgOZ2JD98RDYX8ZrxllGW3+SIy/CEmyTdvp0X3JlfBl6B4o1PQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFLXrkIP7+TueGK+dDT2hGVzIyZSpMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81
NGVmMmIxMi00YzE2LTRmOGYtODhmYi0wMDcwNjA3ZTk3NTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzU0ZWYyYjEyLTRjMTYtNGY4Zi04
OGZiLTAwNzA2MDdlOTc1NC81NGVmMmIxMi00YzE2LTRmOGYtODhmYi0wMDcwNjA3
ZTk3NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACIj4MwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmM1mO1eXrOUat9jkvYO6
aLI/GN1F7BqmpI8DZy1ifsiDzuKV2V0+Ojyz87CtVmskDc3zTFY5NrG8R/ZJmS0P
X7QgERaFM1lfrUPQCYPKReLPhGNNZfL4aUhxlRrht7KnM0pyroa2YboW6lAomENX
RhqyQ3+3oeIUNSM2zeR6mK2BH2pWxIbUeN8KF+TVyU+qHVbCJZ5etGm/R8d2gXMT
cR0+u0fpKZmsEaEsFM9Th/BCzLOPbXasQ15YMKng3kd6WZD0xZoZ8ta0r9yf8sCB
x7jT53gxV6HH2cBoldSTezfptKKda7K7cOgw2oX9sCgTcipdrkklYEg7IbzTmpPX
SA==
-----END CERTIFICATE-----