Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c.cer
File:                     f7ac366d-8d88-4629-8e0f-0a0062fc641c.cer (raw, json)
Hash identifier:          Au0A2CJtdXlD6joxIzfzwN0/kJ1YunbjqjLKMe4yPJc=
Subject key identifier:   59:4E:1F:F6:47:58:B7:2C:2D:C8:E9:2A:61:92:21:8C:F8:EF:E5:C1
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858429A82768F6CE2352D7C922A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/f7ac366d-8d88-4629-8e0f-0a0062fc641c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 19 Jul 2023 23:42:37 +0000
Certificate not after:    Tue 21 Oct 2025 23:42:37 +0000
Subordinate resources:    AS: 54538
                          AS: 396421
                          IP: 199.167.52.0/22
                          IP: 2620:52:c000::/48
                          IP: 2620:130:8000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9a:82:76:8f:6c:e2:35:2d:7c:92:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 19 23:42:37 2023 GMT
            Not After : Oct 21 23:42:37 2025 GMT
        Subject: CN=f7ac366d-8d88-4629-8e0f-0a0062fc641c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7f:b1:05:1f:23:76:56:76:76:83:19:4f:30:
                    76:4b:c9:bd:53:06:3a:d1:81:5c:50:ef:6e:1a:d8:
                    a5:9f:f6:54:6a:da:e9:11:59:c7:d2:7c:ce:c6:da:
                    0d:89:51:23:ed:07:8a:6a:15:a9:7e:a7:4f:1c:63:
                    84:d7:1e:bc:9e:2a:0a:90:f8:ad:58:19:7f:bc:9c:
                    92:32:14:e7:49:23:73:1b:55:5d:b8:4f:2c:b4:c4:
                    d4:12:23:6e:17:36:9f:39:2d:50:18:91:05:a8:ba:
                    c4:f5:fd:96:bc:55:16:1b:08:a0:b2:cc:6c:ee:de:
                    bf:8c:09:e0:99:39:d8:38:3d:71:eb:e8:55:4a:91:
                    0c:d2:f5:25:50:94:29:17:ea:c8:34:a3:ae:3b:35:
                    9d:fa:53:c4:7b:17:93:39:1c:85:cc:a9:fe:49:80:
                    36:5b:37:95:37:00:72:01:ff:f6:ec:ac:df:f8:d1:
                    c9:7f:af:65:01:c4:77:7c:85:0a:30:cb:de:e7:10:
                    68:88:29:f0:2c:07:8c:c6:d1:ed:09:35:b3:67:97:
                    3f:63:31:bb:80:83:07:9e:20:99:57:f4:03:df:fe:
                    36:b7:51:75:1f:5b:6d:8b:9a:ca:d0:2c:6b:ca:18:
                    8b:63:d5:94:16:09:09:ce:a6:8d:1e:fb:13:5b:07:
                    0a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4E:1F:F6:47:58:B7:2C:2D:C8:E9:2A:61:92:21:8C:F8:EF:E5:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/f7ac366d-8d88-4629-8e0f-0a0062fc641c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.52.0/22
                IPv6:
                  2620:52:c000::/48
                  2620:130:8000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54538
                  396421

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b3:89:d4:09:92:5a:72:6f:1c:60:dd:08:76:21:71:b4:0e:
         69:53:3d:94:a9:e1:d7:e6:af:40:bd:61:a5:d7:51:ef:7e:c6:
         c9:3b:75:32:e2:37:24:b9:4c:9e:23:c5:82:7d:e5:a1:51:1a:
         bb:2b:fc:24:91:1a:8b:d6:76:15:c5:5c:f8:6a:61:70:15:fa:
         db:3d:f9:42:c0:b1:c7:dd:4c:4c:5b:3e:62:85:aa:e4:cc:4e:
         e6:83:d1:72:41:e8:80:25:6a:9b:19:3e:24:3b:e7:30:b0:d6:
         5b:e1:f6:2a:bc:2d:2d:e0:4c:68:2f:03:bf:fe:47:9e:ab:b8:
         da:c6:b4:e0:96:98:04:91:b8:32:7c:c9:96:5b:97:53:1c:34:
         41:d8:9d:f9:17:27:4f:a7:94:d2:e3:61:29:9c:e4:99:09:f1:
         ff:a4:67:ab:d6:10:cf:12:4a:4f:fb:d1:5f:fa:f5:5b:1a:96:
         63:37:d0:56:b8:0f:8e:71:67:73:63:01:03:ed:54:20:1b:fc:
         6f:5c:5f:1d:ee:36:94:be:a1:2c:67:db:3f:f6:58:a6:9c:39:
         09:61:08:da:9f:3c:73:b1:4f:f3:67:da:58:42:ad:6d:fa:09:
         dd:af:48:a2:53:66:af:f0:f5:5c:09:c4:31:bb:86:b1:b1:4e:
         6a:d8:1c:13
-----BEGIN CERTIFICATE-----
MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEKagnaPbOI1LXySKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDcxOTIzNDIzN1oXDTI1MTAyMTIzNDIzN1owLzEtMCsGA1UEAxMk
ZjdhYzM2NmQtOGQ4OC00NjI5LThlMGYtMGEwMDYyZmM2NDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX+xBR8jdlZ2doMZTzB2S8m9UwY60YFcUO9u
Gtiln/ZUatrpEVnH0nzOxtoNiVEj7QeKahWpfqdPHGOE1x68nioKkPitWBl/vJyS
MhTnSSNzG1VduE8stMTUEiNuFzafOS1QGJEFqLrE9f2WvFUWGwigssxs7t6/jAng
mTnYOD1x6+hVSpEM0vUlUJQpF+rINKOuOzWd+lPEexeTORyFzKn+SYA2WzeVNwBy
Af/27Kzf+NHJf69lAcR3fIUKMMve5xBoiCnwLAeMxtHtCTWzZ5c/YzG7gIMHniCZ
V/QD3/42t1F1H1tti5rK0CxryhiLY9WUFgkJzqaNHvsTWwcKgQIDAQABo4IEOjCC
BDYwHQYDVR0OBBYEFFlOH/ZHWLcsLcjpKmGSIYz47+XBMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m
N2FjMzY2ZC04ZDg4LTQ2MjktOGUwZi0wYTAwNjJmYzY0MWMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Y3YWMzNjZkLThkODgtNDYyOS04
ZTBmLTBhMDA2MmZjNjQxYy9mN2FjMzY2ZC04ZDg4LTQ2MjktOGUwZi0wYTAwNjJm
YzY0MWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOQYIKwYBBQUH
AQcBAf8EKjAoMAwEAgABMAYDBALHpzQwGAQCAAIwEgMHACYgAFLAAAMHBCYgATCA
ADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA1QoCAwYMhTBUBgNVHSABAf8ESjBI
MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0
L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCas4nU
CZJacm8cYN0IdiFxtA5pUz2UqeHX5q9AvWGl11HvfsbJO3Uy4jckuUyeI8WCfeWh
URq7K/wkkRqL1nYVxVz4amFwFfrbPflCwLHH3UxMWz5iharkzE7mg9FyQeiAJWqb
GT4kO+cwsNZb4fYqvC0t4ExoLwO//keeq7jaxrTglpgEkbgyfMmWW5dTHDRB2J35
FydPp5TS42EpnOSZCfH/pGer1hDPEkpP+9Ff+vVbGpZjN9BWuA+OcWdzYwED7VQg
G/xvXF8d7jaUvqEsZ9s/9limnDkJYQjanzxzsU/zZ9pYQq1t+gndr0iiU2av8PVc
CcQxu4axsU5q2BwT
-----END CERTIFICATE-----