Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer
File:                     5cab4920-f916-4f6e-89be-328cbbe66f94.cer (raw, json)
Hash identifier:          Al4feaZ7GEVqBUBCcTMGGv0QJxNG39h0yWWjknxgbXQ=
Subject key identifier:   EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858449B0970F1853ECE9DDEC83600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 Jan 2024 13:48:27 +0000
Certificate not after:    Thu 23 Apr 2026 12:48:27 +0000
Subordinate resources:    AS: 15261
                          IP: 162.222.108.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:9b:09:70:f1:85:3e:ce:9d:de:c8:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jan 19 13:48:27 2024 GMT
            Not After : Apr 23 12:48:27 2026 GMT
        Subject: CN=5cab4920-f916-4f6e-89be-328cbbe66f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:ec:ef:eb:dd:35:8f:25:40:23:03:39:80:
                    0d:fc:a7:2e:6c:35:2d:d8:f6:fb:69:f6:1f:f2:6c:
                    a8:42:6d:64:46:5b:6b:43:11:04:f4:33:78:f3:f1:
                    5f:bc:d1:23:c0:be:4d:0c:f0:90:4b:d1:69:4d:c7:
                    40:11:0c:10:79:31:32:0d:aa:b7:61:93:a1:be:2b:
                    b3:57:02:68:ce:7a:fb:1e:af:7a:0d:ee:aa:5b:15:
                    53:59:56:af:97:b0:53:bb:35:ec:62:e3:a5:d5:31:
                    88:7c:28:6d:b1:9e:25:f4:d1:36:15:c2:d0:35:0f:
                    82:08:f1:a8:c0:76:41:5a:16:36:24:72:b9:0a:8c:
                    2c:ff:9b:a7:fb:b3:16:52:93:cc:89:da:1c:27:57:
                    c6:ec:f4:56:82:68:5b:2c:31:5c:a9:dc:96:e1:88:
                    a5:57:3d:a2:e9:dd:b2:9a:57:53:3b:d3:d5:79:7c:
                    55:68:af:82:7c:63:46:b4:b4:7b:96:51:74:58:d5:
                    d8:b6:9a:49:5d:e8:b6:c8:9c:05:69:9e:5f:b0:91:
                    3c:f7:d3:8e:ea:fb:57:f7:3c:54:bc:ae:20:57:9d:
                    c3:87:ff:6f:3f:24:f0:2a:93:27:0d:9b:58:23:81:
                    b4:89:e2:69:ca:2b:94:74:41:e7:31:c9:b9:6f:bc:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.108.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15261

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e7:46:4b:f1:7b:6d:e2:8b:51:9a:2e:b4:5e:dd:c8:e7:92:
         86:74:f8:a9:62:cc:a2:7d:ef:9f:0c:39:77:61:5a:28:0b:8f:
         6e:ad:70:a6:07:67:0c:13:aa:28:bf:00:4f:c0:46:7f:8f:8f:
         88:ac:c5:1f:13:fc:b7:fb:1f:be:2a:e0:a6:6a:6f:43:4f:f1:
         8a:3a:93:69:a1:e7:92:59:ca:c8:8b:e6:68:65:13:aa:e9:87:
         8e:a7:84:ae:b1:d9:d3:ac:37:68:99:fb:a2:80:1a:9a:68:17:
         17:0a:08:ac:20:06:d2:73:c6:ef:4c:6b:05:16:39:9c:74:b8:
         99:e7:fd:e4:44:2d:70:21:be:cd:6c:52:0d:b6:cd:b1:41:1d:
         32:94:50:f9:bc:ef:24:12:80:c3:66:12:11:a7:09:bd:13:9f:
         95:eb:08:d6:66:0c:41:c3:a6:bc:d0:92:0e:7a:35:9c:65:8c:
         31:cb:68:10:03:35:5e:6b:6b:4f:e5:00:fa:0a:ce:bf:8e:a5:
         59:02:a5:f7:f2:a1:e4:92:04:40:0c:8c:c9:dc:47:d5:f9:08:
         be:b4:08:22:26:be:76:c4:76:3b:a2:87:e7:d0:21:cd:6c:ef:
         93:9b:43:11:8c:95:53:a8:51:40:b3:72:30:77:dd:4c:f1:38:
         bd:53:e3:95
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWESbCXDxhT7Ond7INgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MDExOTEzNDgyN1oXDTI2MDQyMzEyNDgyN1owLzEtMCsGA1UEAxMk
NWNhYjQ5MjAtZjkxNi00ZjZlLTg5YmUtMzI4Y2JiZTY2Zjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSbs7+vdNY8lQCMDOYAN/KcubDUt2Pb7afYf
8myoQm1kRltrQxEE9DN48/FfvNEjwL5NDPCQS9FpTcdAEQwQeTEyDaq3YZOhviuz
VwJoznr7Hq96De6qWxVTWVavl7BTuzXsYuOl1TGIfChtsZ4l9NE2FcLQNQ+CCPGo
wHZBWhY2JHK5Cows/5un+7MWUpPMidocJ1fG7PRWgmhbLDFcqdyW4YilVz2i6d2y
mldTO9PVeXxVaK+CfGNGtLR7llF0WNXYtppJXei2yJwFaZ5fsJE899OO6vtX9zxU
vK4gV53Dh/9vPyTwKpMnDZtYI4G0ieJpyiuUdEHnMcm5b7z1SwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFOtOznjX3XBjeLzEV8SLBl8KMmYWMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81
Y2FiNDkyMC1mOTE2LTRmNmUtODliZS0zMjhjYmJlNjZmOTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzVjYWI0OTIwLWY5MTYtNGY2ZS04
OWJlLTMyOGNiYmU2NmY5NC81Y2FiNDkyMC1mOTE2LTRmNmUtODliZS0zMjhjYmJl
NjZmOTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKi3mwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
O50wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAQ+dGS/F7beKLUZoutF7dyOeShnT4qWLMon3vnww5d2FaKAuP
bq1wpgdnDBOqKL8AT8BGf4+PiKzFHxP8t/sfvirgpmpvQ0/xijqTaaHnklnKyIvm
aGUTqumHjqeErrHZ06w3aJn7ooAammgXFwoIrCAG0nPG70xrBRY5nHS4mef95EQt
cCG+zWxSDbbNsUEdMpRQ+bzvJBKAw2YSEacJvROflesI1mYMQcOmvNCSDno1nGWM
MctoEAM1XmtrT+UA+grOv46lWQKl9/Kh5JIEQAyMydxH1fkIvrQIIia+dsR2O6KH
59AhzWzvk5tDEYyVU6hRQLNyMHfdTPE4vVPjlQ==
-----END CERTIFICATE-----