Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6.cer
File:                     c4165474-62cf-4b37-bc57-9023a15cf4d6.cer (raw, json)
Hash identifier:          MrNBOccY7rFtP8l+zpBEN4Kop1CdLPA/DF+R8X314Ow=
Subject key identifier:   EB:AB:55:2F:E7:1C:AD:22:9C:6B:C8:76:F4:DB:59:F4:3F:D3:95:5B
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858428946963AD96C14E6875D08E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/c4165474-62cf-4b37-bc57-9023a15cf4d6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 13 Jul 2023 19:33:14 +0000
Certificate not after:    Wed 15 Oct 2025 19:33:14 +0000
Subordinate resources:    AS: 13552
                          IP: 2620:7f:8000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:89:46:96:3a:d9:6c:14:e6:87:5d:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 13 19:33:14 2023 GMT
            Not After : Oct 15 19:33:14 2025 GMT
        Subject: CN=c4165474-62cf-4b37-bc57-9023a15cf4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:81:23:b3:d2:1b:20:74:37:c8:82:75:3e:
                    ad:fb:29:a4:0f:f6:13:cd:6f:de:21:db:ba:8f:bc:
                    cd:52:35:0f:ad:b9:eb:fb:8d:d8:1b:c8:32:31:b2:
                    50:d0:d5:50:c0:72:e1:b3:7d:53:31:b6:02:0c:4d:
                    52:0d:aa:60:64:12:88:66:1a:cb:fb:58:92:1a:27:
                    77:38:7b:56:07:89:99:8c:e3:27:01:45:83:cb:f1:
                    a0:7d:b0:02:9b:ab:6d:5d:40:78:20:86:85:d8:29:
                    18:0b:5f:3e:84:3d:7c:66:48:69:26:5f:96:69:78:
                    0d:9c:49:c4:1c:da:25:85:02:48:d0:3d:52:b6:c8:
                    c4:0f:bf:f4:5e:0b:8c:13:0d:53:24:f9:98:06:e8:
                    9c:3e:ca:91:3c:20:7f:92:0e:0c:43:1d:7b:43:b0:
                    bb:3d:f7:af:e6:3f:cf:f1:d5:d7:a9:a2:a5:1f:3d:
                    83:40:85:92:e3:e2:2e:51:0f:e8:a9:72:73:c6:64:
                    58:2a:bc:98:a1:8b:a7:66:e7:2d:2e:c5:72:5e:04:
                    16:6a:5f:6c:42:b8:be:34:96:73:61:6b:22:7f:bf:
                    fd:1f:67:b7:33:58:3d:17:cf:20:81:02:0f:78:ce:
                    fc:1a:35:cb:c3:39:3e:06:8c:cb:43:08:31:cb:d3:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AB:55:2F:E7:1C:AD:22:9C:6B:C8:76:F4:DB:59:F4:3F:D3:95:5B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/c4165474-62cf-4b37-bc57-9023a15cf4d6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7f:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13552

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:77:3b:fa:2d:47:55:d7:53:36:c8:72:89:06:74:c8:08:28:
         1a:9b:4b:15:e1:51:16:94:5a:06:42:12:f2:11:89:ee:07:b1:
         85:34:85:38:0f:d2:46:1b:ea:a4:53:67:8f:5b:51:03:d5:a7:
         29:ed:0d:05:7e:6c:14:07:fb:03:0f:4d:0e:40:39:41:9e:d1:
         31:6c:0e:52:d7:0e:12:74:b1:24:1a:5e:b5:3e:c8:8a:cd:d3:
         3d:82:24:80:3a:5f:ef:dd:94:92:ca:f3:7a:44:60:e7:06:c8:
         a4:86:2a:85:10:d1:ac:b1:da:f5:f7:78:18:26:b0:63:02:db:
         36:38:0f:72:0c:7c:cd:0c:8e:77:70:88:f4:2c:b9:91:96:e7:
         36:9d:6f:12:78:84:56:ea:b2:99:99:3d:34:1f:c3:a7:2a:bc:
         4d:07:97:3f:84:bd:e8:66:d7:74:9e:b0:07:64:12:f2:6c:4f:
         ea:85:37:69:09:b0:88:e8:64:e6:61:0c:f0:1f:a9:c1:e9:b5:
         24:de:ba:ff:e3:1f:57:df:11:9b:5c:ed:01:4f:8a:d2:b9:12:
         5b:52:25:1b:1c:44:94:12:94:c3:1b:d8:c9:f7:4d:5f:1f:aa:
         23:5d:c8:1e:61:b7:5d:5a:3e:75:aa:1c:4b:85:1b:25:eb:09:
         33:ab:76:30
-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEKJRpY62WwU5oddCOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDcxMzE5MzMxNFoXDTI1MTAxNTE5MzMxNFowLzEtMCsGA1UEAxMk
YzQxNjU0NzQtNjJjZi00YjM3LWJjNTctOTAyM2ExNWNmNGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGaBI7PSGyB0N8iCdT6t+ymkD/YTzW/eIdu6
j7zNUjUPrbnr+43YG8gyMbJQ0NVQwHLhs31TMbYCDE1SDapgZBKIZhrL+1iSGid3
OHtWB4mZjOMnAUWDy/GgfbACm6ttXUB4IIaF2CkYC18+hD18ZkhpJl+WaXgNnEnE
HNolhQJI0D1StsjED7/0XguMEw1TJPmYBuicPsqRPCB/kg4MQx17Q7C7Pfev5j/P
8dXXqaKlHz2DQIWS4+IuUQ/oqXJzxmRYKryYoYunZuctLsVyXgQWal9sQri+NJZz
YWsif7/9H2e3M1g9F88ggQIPeM78GjXLwzk+BozLQwgxy9NTIQIDAQABo4IEHTCC
BBkwHQYDVR0OBBYEFOurVS/nHK0inGvIdvTbWfQ/05VbMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j
NDE2NTQ3NC02MmNmLTRiMzctYmM1Ny05MDIzYTE1Y2Y0ZDYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2M0MTY1NDc0LTYyY2YtNGIzNy1i
YzU3LTkwMjNhMTVjZjRkNi9jNDE2NTQ3NC02MmNmLTRiMzctYmM1Ny05MDIzYTE1
Y2Y0ZDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmIAB/gAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw
BAICNPAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAJ3c7+i1HVddTNshyiQZ0yAgoGptLFeFRFpRaBkIS8hGJ
7gexhTSFOA/SRhvqpFNnj1tRA9WnKe0NBX5sFAf7Aw9NDkA5QZ7RMWwOUtcOEnSx
JBpetT7Iis3TPYIkgDpf792UksrzekRg5wbIpIYqhRDRrLHa9fd4GCawYwLbNjgP
cgx8zQyOd3CI9Cy5kZbnNp1vEniEVuqymZk9NB/Dpyq8TQeXP4S96GbXdJ6wB2QS
8mxP6oU3aQmwiOhk5mEM8B+pwem1JN66/+MfV98Rm1ztAU+K0rkSW1IlGxxElBKU
wxvYyfdNXx+qI13IHmG3XVo+daocS4UbJesJM6t2MA==
-----END CERTIFICATE-----