Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d.cer
File:                     fe71f35f-fe6a-4632-a179-52db92bbfd3d.cer (raw, json)
Hash identifier:          IoqAmNouEYB8eo//njhaR4m7f7fJwWj1OWkYhs0ApiM=
Subject key identifier:   AA:26:EC:82:C5:1F:9B:ED:29:D3:36:7A:A1:E8:60:E8:29:80:01:2D
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858428C1B11D977DF75DA78C24900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/fe71f35f-fe6a-4632-a179-52db92bbfd3d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Jul 2023 19:52:58 +0000
Certificate not after:    Thu 16 Oct 2025 19:52:58 +0000
Subordinate resources:    AS: 395441

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8c:1b:11:d9:77:df:75:da:78:c2:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Jul 14 19:52:58 2023 GMT
            Not After : Oct 16 19:52:58 2025 GMT
        Subject: CN=fe71f35f-fe6a-4632-a179-52db92bbfd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:32:f8:7f:d1:8f:63:85:93:99:c6:ed:7f:
                    2b:e3:c5:74:6b:a1:87:d7:1a:1c:43:aa:01:7f:fc:
                    99:07:a4:53:80:12:37:34:cb:5c:44:7f:d5:a6:7f:
                    79:dc:b4:d0:50:40:16:94:02:e1:7e:a4:92:ef:81:
                    d5:d0:09:6e:1d:47:4a:bb:64:c6:6f:47:3f:02:25:
                    94:16:1f:69:be:de:06:20:bd:30:76:bc:28:22:66:
                    73:5e:64:12:2b:b6:c2:1f:2d:f0:52:9c:13:80:d9:
                    17:89:88:3b:a9:00:bd:bb:94:5f:b8:39:a3:37:b3:
                    ad:1d:92:65:93:4c:c9:e1:cc:48:7a:14:eb:e2:c3:
                    37:93:4c:eb:95:83:bd:19:cc:e1:65:e8:0f:96:28:
                    a7:d8:dd:2f:a6:09:66:86:e3:c0:6c:95:77:45:e8:
                    c2:bc:5d:1c:e1:6b:ab:c3:0c:ec:70:24:1b:90:5a:
                    25:48:63:e9:48:70:f0:50:00:41:aa:ca:05:e6:39:
                    25:1b:31:a8:9e:ab:36:85:7e:55:dc:68:00:61:64:
                    4d:11:aa:2c:c7:db:0c:8f:02:cd:38:b5:df:bb:f2:
                    98:2f:38:7a:c9:22:5d:95:75:13:39:a5:59:b5:d3:
                    98:79:61:3f:dd:7f:8c:fe:c3:57:f0:47:b1:bc:d0:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:26:EC:82:C5:1F:9B:ED:29:D3:36:7A:A1:E8:60:E8:29:80:01:2D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/fe71f35f-fe6a-4632-a179-52db92bbfd3d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395441

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:cb:8d:19:dd:eb:97:25:98:b4:ad:3a:bf:19:3a:ff:3e:d7:
         c4:eb:b1:39:61:f2:88:f9:b5:a0:fc:59:4d:c8:f3:e4:14:2f:
         a3:ef:2e:4f:37:ee:e3:f5:d2:69:b6:4b:47:2c:f7:64:38:9b:
         9b:e8:c7:49:9a:01:0d:05:72:32:c3:71:0d:d3:dc:7a:21:66:
         ba:0a:59:b7:e7:69:8a:d3:0a:83:b1:5e:c9:44:21:81:06:47:
         55:3f:f6:b4:4a:0e:87:a8:29:16:af:0d:87:ef:80:81:5b:e5:
         f2:10:f5:be:03:8a:95:8d:92:91:f8:9e:9b:7f:ce:4c:76:1d:
         88:c2:51:16:c7:56:6a:40:40:16:82:97:d1:03:4b:a3:7f:13:
         88:76:33:a0:42:9c:97:09:82:9a:3a:55:a6:66:bd:b1:c5:68:
         b1:4b:21:62:c0:68:ad:02:6d:52:f9:d9:5f:44:10:8e:f9:f4:
         d7:f9:cb:c4:ac:84:e2:a7:a3:75:78:28:e7:f7:3e:1c:ff:49:
         f7:1b:42:94:6f:15:04:8b:a6:0a:b1:be:df:35:d9:5f:45:83:
         cf:f6:0d:01:cd:20:04:dd:6e:82:4b:61:fc:90:96:f1:13:de:
         75:f6:c3:12:6b:31:96:86:e2:fa:5c:4a:51:73:20:0a:ac:da:
         5a:63:4c:de
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEKMGxHZd9912njCSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi
ODJiMB4XDTIzMDcxNDE5NTI1OFoXDTI1MTAxNjE5NTI1OFowLzEtMCsGA1UEAxMk
ZmU3MWYzNWYtZmU2YS00NjMyLWExNzktNTJkYjkyYmJmZDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3cy+H/Rj2OFk5nG7X8r48V0a6GH1xocQ6oB
f/yZB6RTgBI3NMtcRH/Vpn953LTQUEAWlALhfqSS74HV0AluHUdKu2TGb0c/AiWU
Fh9pvt4GIL0wdrwoImZzXmQSK7bCHy3wUpwTgNkXiYg7qQC9u5RfuDmjN7OtHZJl
k0zJ4cxIehTr4sM3k0zrlYO9GczhZegPliin2N0vpglmhuPAbJV3RejCvF0c4Wur
wwzscCQbkFolSGPpSHDwUABBqsoF5jklGzGonqs2hX5V3GgAYWRNEaosx9sMjwLN
OLXfu/KYLzh6ySJdlXUTOaVZtdOYeWE/3X+M/sNX8EexvNBe2wIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFKom7ILFH5vtKdM2eqHoYOgpgAEtMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m
ZTcxZjM1Zi1mZTZhLTQ2MzItYTE3OS01MmRiOTJiYmZkM2QvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt
ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2ZlNzFmMzVmLWZlNmEtNDYzMi1h
MTc5LTUyZGI5MmJiZmQzZC9mZTcxZjM1Zi1mZTZhLTQ2MzItYTE3OS01MmRiOTJi
YmZkM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi
MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj
MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl
OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi
N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBgixMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHrLjRnd65clmLStOr8ZOv8+18Tr
sTlh8oj5taD8WU3I8+QUL6PvLk837uP10mm2S0cs92Q4m5vox0maAQ0FcjLDcQ3T
3HohZroKWbfnaYrTCoOxXslEIYEGR1U/9rRKDoeoKRavDYfvgIFb5fIQ9b4DipWN
kpH4npt/zkx2HYjCURbHVmpAQBaCl9EDS6N/E4h2M6BCnJcJgpo6VaZmvbHFaLFL
IWLAaK0CbVL52V9EEI759Nf5y8SshOKno3V4KOf3Phz/SfcbQpRvFQSLpgqxvt81
2V9Fg8/2DQHNIATdboJLYfyQlvET3nX2wxJrMZaG4vpcSlFzIAqs2lpjTN4=
-----END CERTIFICATE-----