Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer
File:                     d886f3a2-7325-4b74-8802-19528a9f380c.cer (raw, json)
Hash identifier:          IGqWWLbqcw9J++nM4eTbrJOzOy1CUld0YYtdju5ASy8=
Subject key identifier:   70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584723FE36AFCB9B7D53462F1D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 08 Sep 2024 00:45:27 +0000
Certificate not after:    Sat 12 Dec 2026 01:45:27 +0000
Subordinate resources:    IP: 158.51.44.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:23:fe:36:af:cb:9b:7d:53:46:2f:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Sep  8 00:45:27 2024 GMT
            Not After : Dec 12 01:45:27 2026 GMT
        Subject: CN=d886f3a2-7325-4b74-8802-19528a9f380c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6d:d2:12:bd:c4:57:43:8c:a7:00:1b:d0:d4:
                    0b:45:e6:23:fb:92:d4:0a:d2:8c:1e:82:d1:c8:1b:
                    90:55:13:48:ff:27:06:20:12:d3:44:63:4e:b4:c0:
                    2a:b1:3c:8f:89:06:12:d1:38:68:b7:64:d8:1c:b9:
                    0f:6b:ae:2c:61:df:73:d6:c3:67:1b:d7:20:72:81:
                    db:3a:ac:ee:25:be:f0:7d:b0:6c:d2:42:8b:b3:7d:
                    37:de:b0:19:7f:1f:bc:23:cf:60:e4:80:52:19:0f:
                    b4:27:a9:01:ea:d2:10:38:ba:36:ec:a4:b9:b0:c4:
                    84:a9:7c:32:ac:59:91:a6:bb:00:80:12:34:c9:6d:
                    2a:64:94:f0:80:0c:d5:18:6e:6d:b4:4c:f5:2a:9c:
                    54:2d:13:bb:2a:07:8a:e3:23:fb:bb:65:7c:21:cd:
                    f1:94:de:fe:7e:90:d2:56:fd:16:5f:0c:8b:80:77:
                    db:13:57:50:8a:3d:51:a9:e1:3e:1e:41:5e:e6:ac:
                    47:da:c2:a8:e7:1d:2e:38:93:e1:36:fc:5a:c9:7a:
                    4b:f6:f6:ea:70:8e:ee:af:cc:8c:1f:7b:63:51:b7:
                    1f:5c:6d:c0:1d:ad:ca:a6:49:d4:23:84:f9:37:50:
                    29:90:b2:bc:c4:64:cf:55:ba:c5:84:86:b4:cc:b2:
                    c4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:a8:35:85:82:76:67:b6:fb:81:6d:e0:05:de:43:eb:a3:b0:
         b6:c0:a6:d0:8a:ae:2c:f3:62:ab:06:01:b2:72:67:a2:fd:de:
         4b:75:14:1c:0a:18:ca:32:4d:d3:5b:c9:dd:8a:05:5f:64:b9:
         1c:e8:12:c2:20:86:2e:88:b5:32:68:4a:9c:4e:05:29:05:3b:
         eb:66:8e:1b:5e:43:0a:bb:66:51:c1:81:13:25:8f:41:d7:a7:
         c2:b5:22:b2:76:44:da:02:54:6e:e6:a5:b5:0d:67:b0:27:35:
         94:47:1f:3e:71:50:7d:9d:b4:0d:6f:16:32:3d:41:27:74:6b:
         08:b3:e4:68:8b:78:7b:48:ba:a9:31:46:6b:5f:d2:e0:48:50:
         9c:ad:5d:52:cb:76:ab:e7:5e:c5:d0:ff:42:2f:ce:9f:8f:04:
         6f:62:09:85:39:14:3e:71:6b:28:43:dc:f7:fe:f8:01:e7:22:
         3c:be:f7:04:dc:47:ea:fd:1d:53:0e:b9:ff:11:27:1c:b4:9b:
         7e:e4:6b:45:f9:2f:1b:3e:81:ea:5b:af:47:7d:cc:19:90:60:
         20:50:2a:7e:af:a9:a0:ba:11:39:0c:ca:eb:50:9e:cf:4c:e6:
         bf:0b:24:2d:81:5a:61:53:6c:93:59:74:cb:6a:0c:1a:2d:9a:
         e0:61:29:f7
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEcj/javy5t9U0YvHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTI0MDkwODAwNDUyN1oXDTI2MTIxMjAxNDUyN1owLzEtMCsGA1UEAxMk
ZDg4NmYzYTItNzMyNS00Yjc0LTg4MDItMTk1MjhhOWYzODBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG3SEr3EV0OMpwAb0NQLReYj+5LUCtKMHoLR
yBuQVRNI/ycGIBLTRGNOtMAqsTyPiQYS0Thot2TYHLkPa64sYd9z1sNnG9cgcoHb
OqzuJb7wfbBs0kKLs3033rAZfx+8I89g5IBSGQ+0J6kB6tIQOLo27KS5sMSEqXwy
rFmRprsAgBI0yW0qZJTwgAzVGG5ttEz1KpxULRO7KgeK4yP7u2V8Ic3xlN7+fpDS
Vv0WXwyLgHfbE1dQij1RqeE+HkFe5qxH2sKo5x0uOJPhNvxayXpL9vbqcI7ur8yM
H3tjUbcfXG3AHa3KpknUI4T5N1ApkLK8xGTPVbrFhIa0zLLExwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFHCbrfFCzRIQWR3J+zYbMhlKErNaMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k
ODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5ZjM4MGMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Q4ODZmM2EyLTczMjUtNGI3NC04
ODAyLTE5NTI4YTlmMzgwYy9kODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5
ZjM4MGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKeMywwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcKg1hYJ2Z7b7gW3gBd5D
66OwtsCm0IquLPNiqwYBsnJnov3eS3UUHAoYyjJN01vJ3YoFX2S5HOgSwiCGLoi1
MmhKnE4FKQU762aOG15DCrtmUcGBEyWPQdenwrUisnZE2gJUbualtQ1nsCc1lEcf
PnFQfZ20DW8WMj1BJ3RrCLPkaIt4e0i6qTFGa1/S4EhQnK1dUst2q+dexdD/Qi/O
n48Eb2IJhTkUPnFrKEPc9/74AeciPL73BNxH6v0dUw65/xEnHLSbfuRrRfkvGz6B
6luvR33MGZBgIFAqfq+poLoROQzK61Cez0zmvwskLYFaYVNsk1l0y2oMGi2a4GEp
9w==
-----END CERTIFICATE-----