Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
File:                     ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer (raw, json)
Hash identifier:          RkwOBDQI07VR9sILdBStS9pjhmyHHa5VpWBUHsmL7Yc=
Subject key identifier:   0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285843301BE227E833B92CAE180480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 11 Sep 2023 13:47:11 +0000
Certificate not after:    Sun 14 Dec 2025 14:47:11 +0000
Subordinate resources:    AS: 26744
                          IP: 150.252.192.0/20
                          IP: 206.180.128.0/19
                          IP: 2605:7780::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:30:1b:e2:27:e8:33:b9:2c:ae:18:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep 11 13:47:11 2023 GMT
            Not After : Dec 14 14:47:11 2025 GMT
        Subject: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ad:61:9b:e3:4c:6a:6a:f1:e1:ff:eb:bc:6c:
                    d5:9b:f9:d1:37:76:48:d5:26:9b:9e:00:9d:8d:ca:
                    49:5e:84:34:0c:24:db:30:40:0f:46:21:23:43:12:
                    aa:30:1b:4c:ab:1d:7e:66:dd:2b:6e:25:84:42:3b:
                    68:a4:e3:53:2d:9d:14:78:b4:2f:3d:82:b6:d6:8e:
                    4b:a2:88:cd:0e:8a:32:fe:2b:68:06:43:d1:56:17:
                    a6:f1:b8:83:a3:41:2f:10:1a:52:82:59:62:c7:21:
                    43:b5:5f:4e:a8:b1:49:9b:6f:98:f9:10:92:4d:a1:
                    e7:14:9d:72:39:6e:54:76:d5:7c:ef:68:b3:ff:06:
                    b2:dd:e4:b4:2c:4b:e7:41:69:f7:cf:d9:4e:eb:2b:
                    25:94:99:a5:b8:0a:e4:b1:33:a4:0a:ed:ad:28:8a:
                    23:07:7e:01:2e:3f:ea:6c:b9:db:bd:7f:52:32:b3:
                    a4:91:0b:07:9f:88:3a:7b:dd:53:e2:95:f4:a3:01:
                    ce:ec:2c:5b:d1:80:ce:9e:69:ce:96:de:04:64:e2:
                    42:14:9d:2a:3d:36:2a:a3:65:b5:10:17:f2:df:9a:
                    37:e1:e8:ad:38:ee:8c:48:6a:11:ae:62:8b:bd:c0:
                    b9:a5:c4:39:ae:25:10:40:5b:65:b5:9d:e8:c3:a4:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.192.0/20
                  206.180.128.0/19
                IPv6:
                  2605:7780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26744

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:74:06:a8:de:09:ba:56:f3:fd:47:b7:74:0f:f6:27:c3:f8:
         2c:59:b0:61:2d:ad:50:67:0e:8d:e3:bf:22:9f:6f:ae:63:41:
         84:01:1b:93:57:c0:90:9e:cf:82:62:1b:a4:b8:e2:ae:2c:e6:
         e3:77:bd:a4:38:de:6d:7d:2e:75:17:9f:ce:f8:2c:49:f8:38:
         67:40:6b:38:24:a7:9e:cb:62:01:fb:e2:88:59:73:8f:42:23:
         38:e1:21:1f:23:12:66:d7:02:21:bd:1c:02:61:97:4d:0c:35:
         e0:dc:6f:9f:bd:53:52:9a:bb:4b:46:ea:9e:65:2d:93:a6:31:
         2a:89:9d:e1:db:6f:ef:90:10:01:f5:fd:e5:ca:15:f0:da:81:
         e7:ee:1e:fe:71:b9:e2:31:69:db:46:57:d6:90:ad:35:bb:9b:
         da:b9:76:df:46:3e:83:97:dc:9a:79:68:c2:aa:b6:93:88:f7:
         d1:d1:6b:7d:4b:08:d9:9b:03:5e:76:1c:72:b8:27:f2:37:60:
         f6:4f:23:c1:f5:b2:63:50:7f:2d:c1:62:ba:0f:8b:4c:52:d7:
         ad:bf:11:61:41:33:05:37:e6:ce:2b:cb:df:82:ae:77:06:43:
         0b:0d:09:d4:67:e2:49:cc:83:d0:32:9d:0b:01:35:8a:8e:86:
         f4:75:e8:5c
-----BEGIN CERTIFICATE-----
MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEMwG+In6DO5LK4YBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDkxMTEzNDcxMVoXDTI1MTIxNDE0NDcxMVowLzEtMCsGA1UEAxMk
YWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEzZjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh61hm+NMamrx4f/rvGzVm/nRN3ZI1SabngCd
jcpJXoQ0DCTbMEAPRiEjQxKqMBtMqx1+Zt0rbiWEQjtopONTLZ0UeLQvPYK21o5L
oojNDooy/itoBkPRVhem8biDo0EvEBpSgllixyFDtV9OqLFJm2+Y+RCSTaHnFJ1y
OW5UdtV872iz/way3eS0LEvnQWn3z9lO6ysllJmluArksTOkCu2tKIojB34BLj/q
bLnbvX9SMrOkkQsHn4g6e91T4pX0owHO7Cxb0YDOnmnOlt4EZOJCFJ0qPTYqo2W1
EBfy35o34eitOO6MSGoRrmKLvcC5pcQ5riUQQFtltZ3ow6RTzwIDAQABo4IELzCC
BCswHQYDVR0OBBYEFAtK1p9Vqz4xM7NFFXDSHDKvoSwDMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h
YjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FiOWZlOTJhLTQ5MDUtNGNiMy1h
ZmRjLTBiNWNlNTcxM2Y4Yy9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3
MTNmOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBASW/MADBAXOtIAwDQQCAAIwBwMFACYFd4AwGQYI
KwYBBQUHAQgBAf8ECjAIoAYwBAICaHgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXnQGqN4Julbz/Ue3dA/2
J8P4LFmwYS2tUGcOjeO/Ip9vrmNBhAEbk1fAkJ7PgmIbpLjirizm43e9pDjebX0u
dRefzvgsSfg4Z0BrOCSnnstiAfviiFlzj0IjOOEhHyMSZtcCIb0cAmGXTQw14Nxv
n71TUpq7S0bqnmUtk6YxKomd4dtv75AQAfX95coV8NqB5+4e/nG54jFp20ZX1pCt
Nbub2rl230Y+g5fcmnlowqq2k4j30dFrfUsI2ZsDXnYccrgn8jdg9k8jwfWyY1B/
LcFiug+LTFLXrb8RYUEzBTfmzivL34KudwZDCw0J1GfiScyD0DKdCwE1io6G9HXo
XA==
-----END CERTIFICATE-----