Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879.cer
File:                     d84d90bc-9144-4684-9270-edf2e53d3879.cer (raw, json)
Hash identifier:          w64YEYFX47BcxUP+4eSKNxZmdK/E3XZqusRuNJ+5oQQ=
Subject key identifier:   9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842A3B1CED29DF05DE5D6636D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 23 Jul 2023 06:40:17 +0000
Certificate not after:    Sat 25 Oct 2025 06:40:17 +0000
Subordinate resources:    AS: 399674
                          IP: 104.247.104.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a3:b1:ce:d2:9d:f0:5d:e5:d6:63:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 23 06:40:17 2023 GMT
            Not After : Oct 25 06:40:17 2025 GMT
        Subject: CN=d84d90bc-9144-4684-9270-edf2e53d3879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:23:58:14:37:90:0e:92:ca:11:dc:34:4b:96:
                    38:f3:1e:09:26:b4:33:af:40:13:b9:6e:9c:b5:15:
                    4e:83:eb:d7:50:7e:da:66:ed:1c:69:0e:af:2d:12:
                    2d:b0:6e:75:ea:60:f0:c4:08:b8:8d:7e:3f:9d:b0:
                    ad:e0:47:4c:32:67:88:51:21:cd:1f:56:75:53:39:
                    97:e2:db:6f:61:5e:22:2a:7d:4a:4b:06:81:df:c9:
                    85:25:31:64:75:87:ba:67:6e:38:fb:d9:86:86:da:
                    05:7a:73:ab:ba:d6:93:b5:33:2f:be:cd:6a:61:54:
                    fd:4c:1d:50:c7:45:10:c2:d6:53:85:42:0c:bd:d8:
                    c7:02:3c:3d:31:c6:6a:e7:6e:f6:80:18:59:d6:f8:
                    91:f7:a3:3d:84:c2:20:af:10:90:de:96:9e:63:7f:
                    3d:ae:d2:f0:f8:58:47:6b:5d:42:b3:f6:4e:10:b5:
                    ba:e6:24:3b:8a:14:ad:ec:3d:e4:c5:ac:44:5b:c1:
                    6e:31:44:e1:da:89:a5:4d:76:f1:1a:45:29:d9:9f:
                    97:7d:67:00:41:2b:07:b8:6d:d1:fc:26:b3:ef:71:
                    95:e8:d6:1c:2a:ef:c3:c1:d4:af:a7:35:31:c0:6d:
                    13:aa:cb:23:7b:e2:40:20:23:a7:c8:6e:61:01:be:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A3:EB:05:F2:7C:77:DC:14:D8:1E:03:7C:31:03:FA:8B:B5:12:D0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d84d90bc-9144-4684-9270-edf2e53d3879/d84d90bc-9144-4684-9270-edf2e53d3879.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.104.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399674

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c3:e6:59:d3:7b:87:f3:14:ca:7c:1f:1f:3a:ec:8f:b9:d7:
         ff:d6:bf:fb:76:6e:27:fc:75:8b:13:aa:38:79:97:7e:d3:e6:
         d6:8d:a3:72:e2:11:b3:04:2f:ed:42:af:a5:1b:ea:27:3d:9d:
         a7:18:4f:e1:25:76:b2:61:f9:01:cf:22:14:a1:39:1b:69:a9:
         d6:54:64:ba:c9:7e:24:d1:5c:73:50:d0:fe:a1:da:65:ac:fd:
         55:6c:e6:30:07:f2:3f:9b:5e:e6:73:f4:4c:66:1f:ca:80:c9:
         39:c1:f8:4b:63:b7:a9:b7:b5:a2:92:9e:bc:83:16:cf:8a:6f:
         5f:82:eb:7f:e9:7e:8a:0b:fe:e6:84:4e:7c:13:9e:30:3e:74:
         00:ae:1e:09:52:e8:82:eb:12:de:04:a9:cb:6d:8f:f0:45:a8:
         4f:43:05:9a:01:48:43:1c:e0:21:50:b9:fe:1d:bb:b0:45:a7:
         5d:3b:5f:39:0a:be:fe:e3:50:52:4e:30:f3:8b:e9:cd:7f:4a:
         75:74:28:54:3a:9a:6a:de:63:ab:85:26:06:3e:c3:6e:d7:00:
         ce:4f:b1:bc:8a:b7:28:74:be:4c:bf:b6:12:68:70:68:1a:b7:
         15:6e:ba:7e:e6:0e:65:4b:7e:13:b9:db:3b:71:b6:97:57:ca:
         0e:ca:5c:e4
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEKjsc7SnfBd5dZjbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDcyMzA2NDAxN1oXDTI1MTAyNTA2NDAxN1owLzEtMCsGA1UEAxMk
ZDg0ZDkwYmMtOTE0NC00Njg0LTkyNzAtZWRmMmU1M2QzODc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSNYFDeQDpLKEdw0S5Y48x4JJrQzr0ATuW6c
tRVOg+vXUH7aZu0caQ6vLRItsG516mDwxAi4jX4/nbCt4EdMMmeIUSHNH1Z1UzmX
4ttvYV4iKn1KSwaB38mFJTFkdYe6Z244+9mGhtoFenOrutaTtTMvvs1qYVT9TB1Q
x0UQwtZThUIMvdjHAjw9McZq5272gBhZ1viR96M9hMIgrxCQ3paeY389rtLw+FhH
a11Cs/ZOELW65iQ7ihSt7D3kxaxEW8FuMUTh2omlTXbxGkUp2Z+XfWcAQSsHuG3R
/Caz73GV6NYcKu/DwdSvpzUxwG0Tqssje+JAICOnyG5hAb4NhQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFJyj6wXyfHfcFNgeA3wxA/qLtRLQMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k
ODRkOTBiYy05MTQ0LTQ2ODQtOTI3MC1lZGYyZTUzZDM4NzkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Q4NGQ5MGJjLTkxNDQtNDY4NC05
MjcwLWVkZjJlNTNkMzg3OS9kODRkOTBiYy05MTQ0LTQ2ODQtOTI3MC1lZGYyZTUz
ZDM4NzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAJo92gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
Bhk6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAELD5lnTe4fzFMp8Hx867I+51//Wv/t2bif8dYsTqjh5l37T
5taNo3LiEbMEL+1Cr6Ub6ic9nacYT+EldrJh+QHPIhShORtpqdZUZLrJfiTRXHNQ
0P6h2mWs/VVs5jAH8j+bXuZz9ExmH8qAyTnB+Etjt6m3taKSnryDFs+Kb1+C63/p
fooL/uaETnwTnjA+dACuHglS6ILrEt4Eqcttj/BFqE9DBZoBSEMc4CFQuf4du7BF
p107XzkKvv7jUFJOMPOL6c1/SnV0KFQ6mmreY6uFJgY+w27XAM5PsbyKtyh0vky/
thJocGgatxVuun7mDmVLfhO52ztxtpdXyg7KXOQ=
-----END CERTIFICATE-----