Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212.cer
File:                     c2bc323a-eaca-4811-9f31-5631f5ae8212.cer (raw, json)
Hash identifier:          gL0UEegmc1KzlRhEraj0P2QN0cu42ylQTMt5g6oi5B8=
Subject key identifier:   DA:BD:30:48:0F:12:EB:9F:EF:F2:14:C3:88:92:54:EE:C6:3E:50:73
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584237CD799BCFC1A09399EF2980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/c2bc323a-eaca-4811-9f31-5631f5ae8212.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 14 Jun 2023 15:08:44 +0000
Certificate not after:    Tue 16 Sep 2025 15:08:44 +0000
Subordinate resources:    AS: 46262
                          IP: 50.93.208.0/20
                          IP: 2604:2b40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:37:cd:79:9b:cf:c1:a0:93:99:ef:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jun 14 15:08:44 2023 GMT
            Not After : Sep 16 15:08:44 2025 GMT
        Subject: CN=c2bc323a-eaca-4811-9f31-5631f5ae8212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:cb:e3:71:df:57:2e:d9:77:2d:a7:6a:8b:
                    b5:6b:08:f4:f2:6f:3e:42:4b:57:bb:3d:a6:4c:ed:
                    53:7b:e3:fd:a3:e5:ca:32:ad:0f:5c:24:77:b3:0e:
                    bb:7a:a2:41:87:34:f6:93:6a:7b:7b:fa:f0:3f:9d:
                    93:d2:da:f6:5f:bd:bf:a2:37:28:19:7a:6f:92:13:
                    ec:71:82:18:74:c3:ae:1f:8c:cd:9e:2c:cb:91:69:
                    a3:47:e4:97:73:b2:0a:f8:fd:4a:36:55:ee:1d:75:
                    f0:8f:cd:5e:c8:5b:1a:c5:77:19:49:a8:df:de:e2:
                    00:4d:a7:3a:d1:1d:1e:8f:d9:c0:6b:30:fc:aa:ae:
                    71:e2:1f:83:50:00:55:f9:61:bb:a5:d0:72:c1:54:
                    52:ab:f0:aa:12:64:6f:c0:75:a5:b6:b9:fb:45:43:
                    3f:1d:29:f2:c3:7a:16:b5:47:b5:f3:7c:ff:49:64:
                    2f:bf:50:e8:61:23:0b:35:5a:ce:81:f4:18:4c:53:
                    16:d9:b2:1a:b1:48:b9:70:81:22:4e:33:c4:c3:ee:
                    9f:d2:88:d3:b2:d3:b9:6b:e7:16:0c:4e:c9:54:77:
                    97:43:ac:d9:53:09:6a:4f:1e:be:6a:9a:33:63:2d:
                    3a:d6:45:54:ef:29:66:63:a0:3a:f2:66:25:51:83:
                    c8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BD:30:48:0F:12:EB:9F:EF:F2:14:C3:88:92:54:EE:C6:3E:50:73
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/c2bc323a-eaca-4811-9f31-5631f5ae8212.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.93.208.0/20
                IPv6:
                  2604:2b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46262

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:c3:fe:1b:71:67:21:56:35:76:b3:a1:54:69:1f:aa:ff:
         49:9c:24:1a:cc:fc:e4:bc:ed:1e:a9:e8:76:cb:bb:88:c1:67:
         4d:04:38:dd:1b:28:85:37:b0:fb:cc:83:bf:51:ea:fa:69:57:
         04:6f:9a:42:c5:91:4f:cf:f5:8e:d3:fe:5b:a8:c0:8a:ad:7f:
         c3:d4:29:62:fd:ea:f1:9c:c5:74:c7:87:40:28:31:c7:4b:10:
         25:2c:70:80:c3:ba:17:79:3a:fd:a8:24:ba:70:01:f4:9d:6e:
         e1:d0:2b:7f:57:87:cd:e4:86:1d:ba:1c:e8:e0:22:40:b4:36:
         fd:20:8c:85:f9:16:40:52:4f:fe:88:d1:1f:c7:4c:10:73:89:
         66:bf:e8:8f:c4:8f:1a:50:fa:82:b1:fb:6f:9c:c9:89:87:0a:
         95:2b:77:f1:53:44:c8:15:54:d2:da:8e:e2:ef:ba:ab:b2:55:
         ce:92:b9:1f:be:8a:99:31:92:63:fb:59:e7:60:9a:85:44:8e:
         96:c0:68:81:72:25:a5:f4:e9:08:52:ca:93:e6:ee:c8:83:0b:
         1d:d9:4d:0a:c9:dc:6a:9a:a8:65:4e:0c:80:74:ca:ee:55:17:
         a2:ad:e0:ad:23:b4:ea:11:ca:62:ca:02:15:05:ae:7f:c7:54:
         f6:4c:2a:8d
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEI3zXmbz8Ggk5nvKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDYxNDE1MDg0NFoXDTI1MDkxNjE1MDg0NFowLzEtMCsGA1UEAxMk
YzJiYzMyM2EtZWFjYS00ODExLTlmMzEtNTYzMWY1YWU4MjEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFfL43HfVy7Zdy2naou1awj08m8+QktXuz2m
TO1Te+P9o+XKMq0PXCR3sw67eqJBhzT2k2p7e/rwP52T0tr2X72/ojcoGXpvkhPs
cYIYdMOuH4zNnizLkWmjR+SXc7IK+P1KNlXuHXXwj81eyFsaxXcZSajf3uIATac6
0R0ej9nAazD8qq5x4h+DUABV+WG7pdBywVRSq/CqEmRvwHWltrn7RUM/HSnyw3oW
tUe183z/SWQvv1DoYSMLNVrOgfQYTFMW2bIasUi5cIEiTjPEw+6f0ojTstO5a+cW
DE7JVHeXQ6zZUwlqTx6+apozYy061kVU7ylmY6A68mYlUYPI9QIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFNq9MEgPEuuf7/IUw4iSVO7GPlBzMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j
MmJjMzIzYS1lYWNhLTQ4MTEtOWYzMS01NjMxZjVhZTgyMTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2MyYmMzMjNhLWVhY2EtNDgxMS05
ZjMxLTU2MzFmNWFlODIxMi9jMmJjMzIzYS1lYWNhLTQ4MTEtOWYzMS01NjMxZjVh
ZTgyMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAQyXdAwDQQCAAIwBwMFACYEK0AwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDALS2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAETNw/4bcWchVjV2s6FUaR+q/0mc
JBrM/OS87R6p6HbLu4jBZ00EON0bKIU3sPvMg79R6vppVwRvmkLFkU/P9Y7T/luo
wIqtf8PUKWL96vGcxXTHh0AoMcdLECUscIDDuhd5Ov2oJLpwAfSdbuHQK39Xh83k
hh26HOjgIkC0Nv0gjIX5FkBST/6I0R/HTBBziWa/6I/EjxpQ+oKx+2+cyYmHCpUr
d/FTRMgVVNLajuLvuquyVc6SuR++ipkxkmP7WedgmoVEjpbAaIFyJaX06QhSypPm
7siDCx3ZTQrJ3GqaqGVODIB0yu5VF6Kt4K0jtOoRymLKAhUFrn/HVPZMKo0=
-----END CERTIFICATE-----