Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
File:                     7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer (raw, json)
Hash identifier:          enuP8qw5Ya/Y09e6UMKwCGpwbiyhZaomqS2ouZaEL+E=
Subject key identifier:   C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847E787EEF4362906D3709FD380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 17 Nov 2024 01:45:34 +0000
Certificate not after:    Sat 20 Feb 2027 01:45:34 +0000
Subordinate resources:    AS: 16436
                          IP: 66.187.12.0/23
                          IP: 207.174.100.0/22
                          IP: 2605:abc0::/32
                          IP: 2606:e6c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:87:ee:f4:36:29:06:d3:70:9f:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Nov 17 01:45:34 2024 GMT
            Not After : Feb 20 01:45:34 2027 GMT
        Subject: CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:cf:c5:67:9c:62:c5:25:4b:38:c8:f3:bf:
                    9d:df:4e:ff:47:04:c8:f8:58:26:fd:81:30:1c:16:
                    51:d9:fd:64:fc:02:97:0e:cc:28:ff:8a:bc:e4:6e:
                    56:7d:6b:85:8b:e2:a0:53:c4:83:50:5f:4c:db:9b:
                    bb:5d:ee:f7:04:6f:65:37:64:17:79:ce:51:ce:f9:
                    47:98:c0:4e:1e:e3:18:3b:59:73:ae:08:08:dc:27:
                    ea:6f:59:aa:5f:a8:c9:9f:b1:4d:d8:f9:7c:32:bd:
                    51:c0:5a:0b:ab:38:ba:3c:b8:3c:95:e9:50:ea:91:
                    be:f4:f5:eb:e2:bc:8f:59:a9:15:6b:dc:ba:eb:3f:
                    bb:49:a7:37:de:e9:cd:be:a6:26:28:09:bc:ac:46:
                    a1:6a:9c:df:ba:22:8d:f6:2b:fb:22:f5:24:2f:95:
                    a6:c7:b9:52:3e:e3:2f:14:c5:b7:ca:5e:37:d0:0b:
                    05:c4:0c:85:cf:93:8f:2d:c1:c7:17:30:a9:04:55:
                    2d:01:0d:d7:3c:a6:96:03:cf:73:3f:f2:77:36:3f:
                    4d:76:08:07:82:ae:e5:9f:13:7e:3c:38:a1:0d:18:
                    3b:d3:ee:04:93:96:30:f6:0e:0c:1a:07:f5:0f:ca:
                    8b:68:7b:c1:3a:bb:e1:74:30:44:2f:93:66:75:db:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.12.0/23
                  207.174.100.0/22
                IPv6:
                  2605:abc0::/32
                  2606:e6c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16436

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:2c:e0:cc:0b:ff:9a:62:97:0e:3f:04:20:57:bc:9b:2e:96:
         2d:6c:92:4d:91:a9:9a:59:88:ce:ed:93:4d:04:79:86:d7:71:
         db:b6:e2:62:21:a2:ea:43:c0:ac:c5:c3:9e:b8:94:92:35:40:
         36:6f:44:51:36:75:ec:47:3d:7f:c2:e0:ec:87:84:a1:33:5d:
         ee:29:50:18:f9:fc:4e:0f:58:61:ff:fa:0c:74:e4:5b:c8:fa:
         13:47:da:9e:7a:7d:ad:c6:b9:70:f0:25:6d:34:cf:f2:7a:51:
         c9:aa:bb:b5:5f:2e:55:e9:28:70:2b:d4:dd:b7:ed:e7:a5:5c:
         69:69:c8:50:83:86:f6:fc:9e:ad:f1:cb:f5:88:04:35:b8:38:
         be:52:76:4d:6a:14:55:0a:bd:1e:48:7b:32:fb:c9:27:27:54:
         19:f8:f6:0b:22:e4:49:25:66:70:03:97:6a:f3:41:04:80:92:
         da:11:63:5e:e6:92:57:1b:93:b3:85:91:ca:8c:de:d7:da:d6:
         94:9f:94:bb:f1:a8:35:0c:6f:c8:d9:94:83:56:2a:02:0f:8c:
         16:63:4b:63:0f:7c:7d:67:32:ee:f4:f2:04:e0:84:ed:25:47:
         75:f8:5b:42:de:06:76:8b:47:18:b9:3f:60:90:ea:74:e3:8b:
         38:70:fe:5a
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEfnh+70NikG03Cf04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTExNzAxNDUzNFoXDTI3MDIyMDAxNDUzNFowLzEtMCsGA1UEAxMk
N2NlMTZlMmYtOTZiNy00NGZmLTljNTMtOWRkZTE3ZTQ4NjIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotnPxWecYsUlSzjI87+d307/RwTI+Fgm/YEw
HBZR2f1k/AKXDswo/4q85G5WfWuFi+KgU8SDUF9M25u7Xe73BG9lN2QXec5RzvlH
mMBOHuMYO1lzrggI3Cfqb1mqX6jJn7FN2Pl8Mr1RwFoLqzi6PLg8lelQ6pG+9PXr
4ryPWakVa9y66z+7Sac33unNvqYmKAm8rEahapzfuiKN9iv7IvUkL5Wmx7lSPuMv
FMW3yl430AsFxAyFz5OPLcHHFzCpBFUtAQ3XPKaWA89zP/J3Nj9NdggHgq7lnxN+
PDihDRg70+4Ek5Yw9g4MGgf1D8qLaHvBOrvhdDBEL5NmddvvVQIDAQABo4IENjCC
BDIwHQYDVR0OBBYEFMcqJncggOtB25KLkpfV+KvqOBrLMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83
Y2UxNmUyZi05NmI3LTQ0ZmYtOWM1My05ZGRlMTdlNDg2MjIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzdjZTE2ZTJmLTk2YjctNDRmZi05
YzUzLTlkZGUxN2U0ODYyMi83Y2UxNmUyZi05NmI3LTQ0ZmYtOWM1My05ZGRlMTdl
NDg2MjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOwYIKwYBBQUH
AQcBAf8ELDAqMBIEAgABMAwDBAFCuwwDBALPrmQwFAQCAAIwDgMFACYFq8ADBQAm
BubAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAkA0MFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABgs4MwL/5pi
lw4/BCBXvJsuli1skk2RqZpZiM7tk00EeYbXcdu24mIhoupDwKzFw564lJI1QDZv
RFE2dexHPX/C4OyHhKEzXe4pUBj5/E4PWGH/+gx05FvI+hNH2p56fa3GuXDwJW00
z/J6Ucmqu7VfLlXpKHAr1N237eelXGlpyFCDhvb8nq3xy/WIBDW4OL5Sdk1qFFUK
vR5IezL7yScnVBn49gsi5EklZnADl2rzQQSAktoRY17mklcbk7OFkcqM3tfa1pSf
lLvxqDUMb8jZlINWKgIPjBZjS2MPfH1nMu708gTghO0lR3X4W0LeBnaLRxi5P2CQ
6nTjizhw/lo=
-----END CERTIFICATE-----