Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer
File:                     ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer (raw, json)
Hash identifier:          yTsgbcxsqw1ol3joYqMR3CBbSY8AEq4rA76vk4+R3jk=
Subject key identifier:   FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285847B7F4767A447193A6A15DA710
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 31 Oct 2024 00:45:26 +0000
Certificate not after:    Wed 03 Feb 2027 01:45:26 +0000
Subordinate resources:    IP: 216.126.214.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b7:f4:76:7a:44:71:93:a6:a1:5d:a7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 31 00:45:26 2024 GMT
            Not After : Feb  3 01:45:26 2027 GMT
        Subject: CN=ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2e:10:d9:bf:f9:4d:80:4f:3d:e3:e4:3d:63:
                    40:f4:b9:cc:82:53:2a:05:ba:4d:4e:22:69:4c:d7:
                    3a:b8:ca:0f:ec:c8:d4:fc:cb:04:68:af:a1:3c:9f:
                    5d:3a:df:01:fd:13:eb:85:32:f1:a9:81:00:13:8d:
                    89:eb:a5:6f:bb:a5:70:5b:60:c6:fa:26:b2:8f:3e:
                    98:87:48:89:e9:0c:c9:ca:23:53:e4:b7:21:32:65:
                    f1:9a:b3:b4:22:3b:5f:b1:33:1e:ac:d8:a5:52:4a:
                    d5:70:6b:ed:f0:09:33:7b:fb:17:21:1e:47:24:60:
                    ae:6c:ea:f0:8c:e5:89:91:28:22:17:f9:9d:ad:19:
                    48:2d:cf:1d:61:af:0c:a6:30:f9:69:50:18:18:f8:
                    b0:75:88:75:05:13:09:70:0d:b0:b1:17:39:b2:97:
                    c3:a6:53:06:5e:84:e8:3c:db:fd:46:b8:b7:36:ba:
                    72:94:7f:ad:97:50:07:e0:39:15:0f:c8:e9:ea:34:
                    45:b4:7d:2a:29:64:ae:9c:67:f4:44:58:5c:f1:ab:
                    6e:8a:18:32:f7:8c:1f:eb:b6:22:52:85:2d:e1:8a:
                    db:33:42:04:24:f8:c4:69:9e:bd:97:9b:e8:12:41:
                    e0:a1:7c:13:b2:57:f5:7f:4d:3d:8f:ba:32:25:14:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:fc:b7:15:26:7f:ae:b1:53:31:df:d6:41:c5:1f:a3:a6:0f:
         4b:63:a3:04:63:b4:70:85:a6:61:dc:4f:fe:c9:b2:e1:05:ca:
         fd:51:22:aa:1c:37:47:32:27:0c:96:30:1e:80:bc:22:66:75:
         8e:b2:e3:d5:fe:cf:cf:01:a1:88:cb:0d:94:b3:75:00:7c:a5:
         09:9d:e9:c5:24:96:88:f0:4a:3a:8f:30:a5:30:61:79:2e:5a:
         cd:0d:ee:23:60:64:8e:5b:1d:93:8a:70:4b:c2:42:d0:09:8e:
         1b:b7:45:d8:b9:db:df:16:2d:1e:dc:39:2e:a2:4f:c0:07:f5:
         eb:31:a7:36:88:7c:60:9c:4b:56:6b:87:d2:6b:1f:ce:a8:6a:
         3b:7a:3e:1b:08:6e:1a:cf:f4:79:70:d9:2e:8d:0e:2e:43:32:
         56:45:71:af:63:85:7c:8e:f5:5b:03:49:fd:8a:60:6c:50:b0:
         1f:81:dd:9a:c2:d1:70:9e:42:97:25:83:56:ec:76:98:95:d2:
         f2:ea:6a:47:1d:90:2f:3c:db:96:b1:c5:e6:4f:ff:5e:b0:ed:
         21:0d:ea:3a:96:a4:68:88:67:32:2b:34:72:1a:98:41:76:2c:
         bb:58:4b:6e:a7:ed:7b:66:28:f0:5a:32:f1:ee:3a:35:37:ce:
         4c:88:50:71
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEe39HZ6RHGTpqFdpxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTAzMTAwNDUyNloXDTI3MDIwMzAxNDUyNlowLzEtMCsGA1UEAxMk
YWQ2YzcwMDUtZjBmZS00NDExLTg1MzEtMGE5YzViOWIxYWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC4Q2b/5TYBPPePkPWNA9LnMglMqBbpNTiJp
TNc6uMoP7MjU/MsEaK+hPJ9dOt8B/RPrhTLxqYEAE42J66Vvu6VwW2DG+iayjz6Y
h0iJ6QzJyiNT5LchMmXxmrO0IjtfsTMerNilUkrVcGvt8Akze/sXIR5HJGCubOrw
jOWJkSgiF/mdrRlILc8dYa8MpjD5aVAYGPiwdYh1BRMJcA2wsRc5spfDplMGXoTo
PNv9Rri3NrpylH+tl1AH4DkVD8jp6jRFtH0qKWSunGf0RFhc8atuihgy94wf67Yi
UoUt4YrbM0IEJPjEaZ69l5voEkHgoXwTslf1f009j7oyJRRjswIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFP5gVSeTAv+sQECK4ZxeGFxS8IeWMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h
ZDZjNzAwNS1mMGZlLTQ0MTEtODUzMS0wYTljNWI5YjFhYTcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FkNmM3MDA1LWYwZmUtNDQxMS04
NTMxLTBhOWM1YjliMWFhNy9hZDZjNzAwNS1mMGZlLTQ0MTEtODUzMS0wYTljNWI5
YjFhYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADYftYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJvy3FSZ/rrFTMd/WQcUf
o6YPS2OjBGO0cIWmYdxP/smy4QXK/VEiqhw3RzInDJYwHoC8ImZ1jrLj1f7PzwGh
iMsNlLN1AHylCZ3pxSSWiPBKOo8wpTBheS5azQ3uI2Bkjlsdk4pwS8JC0AmOG7dF
2Lnb3xYtHtw5LqJPwAf16zGnNoh8YJxLVmuH0msfzqhqO3o+GwhuGs/0eXDZLo0O
LkMyVkVxr2OFfI71WwNJ/YpgbFCwH4HdmsLRcJ5ClyWDVux2mJXS8upqRx2QLzzb
lrHF5k//XrDtIQ3qOpakaIhnMis0chqYQXYsu1hLbqfte2Yo8Foy8e46NTfOTIhQ
cQ==
-----END CERTIFICATE-----