Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6.cer
File:                     c4165474-62cf-4b37-bc57-9023a15cf4d6.cer (raw, json)
Hash identifier:          oGKG4TfCi+NI2bXGpG/zMZAKCSN5ymhpQ7oHiBrnRtg=
Subject key identifier:   EB:AB:55:2F:E7:1C:AD:22:9C:6B:C8:76:F4:DB:59:F4:3F:D3:95:5B
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858478E1433DC1AAE7692AEB30160
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/c4165474-62cf-4b37-bc57-9023a15cf4d6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 16 Oct 2024 00:45:26 +0000
Certificate not after:    Tue 19 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 13552
                          IP: 2620:7f:8000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:14:33:dc:1a:ae:76:92:ae:b3:01:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Oct 16 00:45:26 2024 GMT
            Not After : Jan 19 01:45:26 2027 GMT
        Subject: CN=c4165474-62cf-4b37-bc57-9023a15cf4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:81:23:b3:d2:1b:20:74:37:c8:82:75:3e:
                    ad:fb:29:a4:0f:f6:13:cd:6f:de:21:db:ba:8f:bc:
                    cd:52:35:0f:ad:b9:eb:fb:8d:d8:1b:c8:32:31:b2:
                    50:d0:d5:50:c0:72:e1:b3:7d:53:31:b6:02:0c:4d:
                    52:0d:aa:60:64:12:88:66:1a:cb:fb:58:92:1a:27:
                    77:38:7b:56:07:89:99:8c:e3:27:01:45:83:cb:f1:
                    a0:7d:b0:02:9b:ab:6d:5d:40:78:20:86:85:d8:29:
                    18:0b:5f:3e:84:3d:7c:66:48:69:26:5f:96:69:78:
                    0d:9c:49:c4:1c:da:25:85:02:48:d0:3d:52:b6:c8:
                    c4:0f:bf:f4:5e:0b:8c:13:0d:53:24:f9:98:06:e8:
                    9c:3e:ca:91:3c:20:7f:92:0e:0c:43:1d:7b:43:b0:
                    bb:3d:f7:af:e6:3f:cf:f1:d5:d7:a9:a2:a5:1f:3d:
                    83:40:85:92:e3:e2:2e:51:0f:e8:a9:72:73:c6:64:
                    58:2a:bc:98:a1:8b:a7:66:e7:2d:2e:c5:72:5e:04:
                    16:6a:5f:6c:42:b8:be:34:96:73:61:6b:22:7f:bf:
                    fd:1f:67:b7:33:58:3d:17:cf:20:81:02:0f:78:ce:
                    fc:1a:35:cb:c3:39:3e:06:8c:cb:43:08:31:cb:d3:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AB:55:2F:E7:1C:AD:22:9C:6B:C8:76:F4:DB:59:F4:3F:D3:95:5B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c4165474-62cf-4b37-bc57-9023a15cf4d6/c4165474-62cf-4b37-bc57-9023a15cf4d6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:7f:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13552

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:dc:d5:c7:6c:46:94:03:01:2e:fa:69:ee:b8:1e:87:bc:94:
         33:f6:f3:fa:08:2a:f5:5b:4c:87:57:a3:f5:94:f0:65:59:fc:
         86:90:a5:d8:de:ed:e7:7c:70:be:df:42:1b:cd:ac:19:ea:99:
         a6:3b:ca:0b:4c:7f:c0:a5:3f:24:66:65:87:97:71:9c:98:cc:
         fb:0f:23:14:cd:1f:9c:c3:8c:6c:84:af:1d:5c:96:e5:43:e9:
         f5:48:15:68:8e:15:56:13:1d:a0:cd:90:09:c3:53:94:31:8c:
         b6:49:cd:81:b3:88:0d:35:4d:31:68:50:64:06:12:67:8b:e8:
         a9:25:ff:e0:52:34:e5:03:e0:7d:11:7e:65:ab:61:87:55:16:
         29:d8:b2:f1:47:0b:40:d7:44:8a:45:1f:c2:55:f5:27:2b:00:
         df:15:bf:f9:3a:c4:8e:19:7a:f5:63:fe:45:ab:f6:76:79:5d:
         a9:17:66:d6:e5:b3:a8:66:ee:de:18:5c:6f:bd:cc:b2:c8:38:
         0d:03:6d:50:de:37:30:24:17:9c:b5:e9:27:f7:94:54:09:28:
         e5:ad:23:0f:c7:e9:4a:b2:66:48:db:09:f3:e4:d3:62:61:89:
         04:41:10:47:be:91:93:e3:24:37:bb:28:ef:10:d2:59:68:a7:
         e5:4b:e6:64
-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEeOFDPcGq52kq6zAWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MTAxNjAwNDUyNloXDTI3MDExOTAxNDUyNlowLzEtMCsGA1UEAxMk
YzQxNjU0NzQtNjJjZi00YjM3LWJjNTctOTAyM2ExNWNmNGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGaBI7PSGyB0N8iCdT6t+ymkD/YTzW/eIdu6
j7zNUjUPrbnr+43YG8gyMbJQ0NVQwHLhs31TMbYCDE1SDapgZBKIZhrL+1iSGid3
OHtWB4mZjOMnAUWDy/GgfbACm6ttXUB4IIaF2CkYC18+hD18ZkhpJl+WaXgNnEnE
HNolhQJI0D1StsjED7/0XguMEw1TJPmYBuicPsqRPCB/kg4MQx17Q7C7Pfev5j/P
8dXXqaKlHz2DQIWS4+IuUQ/oqXJzxmRYKryYoYunZuctLsVyXgQWal9sQri+NJZz
YWsif7/9H2e3M1g9F88ggQIPeM78GjXLwzk+BozLQwgxy9NTIQIDAQABo4IEHTCC
BBkwHQYDVR0OBBYEFOurVS/nHK0inGvIdvTbWfQ/05VbMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j
NDE2NTQ3NC02MmNmLTRiMzctYmM1Ny05MDIzYTE1Y2Y0ZDYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2M0MTY1NDc0LTYyY2YtNGIzNy1i
YzU3LTkwMjNhMTVjZjRkNi9jNDE2NTQ3NC02MmNmLTRiMzctYmM1Ny05MDIzYTE1
Y2Y0ZDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmIAB/gAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw
BAICNPAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEApdzVx2xGlAMBLvpp7rgeh7yUM/bz+ggq9VtMh1ej9ZTw
ZVn8hpCl2N7t53xwvt9CG82sGeqZpjvKC0x/wKU/JGZlh5dxnJjM+w8jFM0fnMOM
bISvHVyW5UPp9UgVaI4VVhMdoM2QCcNTlDGMtknNgbOIDTVNMWhQZAYSZ4voqSX/
4FI05QPgfRF+Zathh1UWKdiy8UcLQNdEikUfwlX1JysA3xW/+TrEjhl69WP+Rav2
dnldqRdm1uWzqGbu3hhcb73Mssg4DQNtUN43MCQXnLXpJ/eUVAko5a0jD8fpSrJm
SNsJ8+TTYmGJBEEQR76Rk+MkN7so7xDSWWin5UvmZA==
-----END CERTIFICATE-----