Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer
File:                     4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.cer (raw, json)
Hash identifier:          crxbNknMNFDkki0AyU6PGGoGDFT92pzry/LYPr7kQ4Y=
Subject key identifier:   DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285846E69325FDF796C05A95BA6000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 17 Aug 2024 00:45:25 +0000
Certificate not after:    Fri 20 Nov 2026 01:45:25 +0000
Subordinate resources:    IP: 98.158.96.0/20
                          IP: 104.254.124.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e6:93:25:fd:f7:96:c0:5a:95:ba:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Aug 17 00:45:25 2024 GMT
            Not After : Nov 20 01:45:25 2026 GMT
        Subject: CN=4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f1:54:46:4c:6c:b8:36:d9:ab:cd:44:b1:15:
                    01:e2:49:ae:0e:4d:b1:cb:e7:28:3a:e2:bc:d6:dd:
                    d5:d6:7f:9d:3b:69:6f:c5:3c:aa:1f:12:6b:46:a9:
                    e3:8d:f6:70:30:da:b5:90:03:b2:a8:69:f8:3d:26:
                    18:98:41:ea:59:3c:df:97:96:8d:b4:bb:42:44:fa:
                    fe:fe:5e:94:d6:94:5a:2a:4d:47:4b:df:e9:db:df:
                    c4:7c:41:eb:a7:3b:bc:77:07:cb:fd:7a:78:65:56:
                    cf:3a:38:43:75:c6:a3:fc:32:ad:ff:0f:58:f6:b0:
                    4d:2e:2a:b6:39:e6:8e:fa:1e:37:2d:ce:47:51:b3:
                    80:f5:0d:87:0a:62:90:80:59:b7:c0:96:cf:32:5a:
                    ac:ab:43:fc:fc:5c:0d:19:4a:f8:4b:55:f8:e2:21:
                    63:ae:9d:c2:47:54:82:10:0c:c3:df:ee:e0:bd:25:
                    ce:1e:0e:da:7c:56:74:30:5d:96:67:dc:40:14:02:
                    a0:88:ef:95:d2:93:00:ae:c5:ee:6d:d1:54:a4:c4:
                    10:fc:e7:e3:11:f2:fd:1e:3d:44:7a:b8:ad:95:12:
                    88:08:8c:f5:f7:31:b2:ee:97:de:9b:b2:c1:c6:bc:
                    4e:3a:0e:a5:04:4c:07:fb:7a:7b:bf:1c:f0:46:88:
                    5e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:28:68:6B:51:72:77:84:75:80:55:FF:DA:DA:17:74:CD:70:CE:42
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e/4fb5f648-d8b4-4ee2-a43d-1ba01b042e5e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.96.0/20
                  104.254.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:85:39:e2:af:c3:a6:cb:0e:73:d3:07:08:a5:8e:5d:ca:44:
         ee:cf:63:82:cc:0c:c6:dd:08:9d:a1:ed:09:da:ed:b4:01:a3:
         6c:ec:66:b6:bf:ef:05:7c:73:3c:8b:63:68:4a:51:d9:74:11:
         0c:89:2f:7f:9a:ab:0c:0a:03:52:b6:9a:c7:b9:d0:cd:97:4c:
         5b:f0:b2:40:47:68:45:9d:27:fe:61:e7:b6:6b:3b:e5:34:d7:
         29:7a:2b:df:51:7d:f4:5b:b5:76:7c:77:2a:b3:34:82:47:e2:
         66:5f:47:69:22:5f:72:44:40:23:2b:ac:15:23:ba:63:84:e9:
         d6:ef:d8:0a:76:bc:12:9d:c6:24:18:55:5a:12:b9:46:0b:2f:
         78:a8:94:63:48:7b:ff:b4:ef:8d:be:37:ed:c1:b4:78:3c:82:
         3b:35:c0:45:cc:04:5f:29:31:06:ab:5b:95:3c:05:9d:cd:8c:
         bb:1e:f1:90:b6:c8:39:79:74:43:60:db:86:13:3f:5e:9a:d8:
         87:3e:26:ab:49:36:92:19:80:10:c4:62:41:d6:a1:f7:25:58:
         08:53:a4:0e:27:51:7a:9e:0d:64:2f:2a:55:d4:4b:88:fa:eb:
         fd:77:9a:55:75:fc:32:8b:79:d7:2d:d7:9a:62:42:7a:d5:29:
         6d:bb:1f:29
-----BEGIN CERTIFICATE-----
MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEbmkyX995bAWpW6YAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI0MDgxNzAwNDUyNVoXDTI2MTEyMDAxNDUyNVowLzEtMCsGA1UEAxMk
NGZiNWY2NDgtZDhiNC00ZWUyLWE0M2QtMWJhMDFiMDQyZTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vFURkxsuDbZq81EsRUB4kmuDk2xy+coOuK8
1t3V1n+dO2lvxTyqHxJrRqnjjfZwMNq1kAOyqGn4PSYYmEHqWTzfl5aNtLtCRPr+
/l6U1pRaKk1HS9/p29/EfEHrpzu8dwfL/Xp4ZVbPOjhDdcaj/DKt/w9Y9rBNLiq2
OeaO+h43Lc5HUbOA9Q2HCmKQgFm3wJbPMlqsq0P8/FwNGUr4S1X44iFjrp3CR1SC
EAzD3+7gvSXOHg7afFZ0MF2WZ9xAFAKgiO+V0pMArsXubdFUpMQQ/OfjEfL9Hj1E
eritlRKICIz19zGy7pfem7LBxrxOOg6lBEwH+3p7vxzwRoheyQIDAQABo4IEBTCC
BAEwHQYDVR0OBBYEFN4oaGtRcneEdYBV/9raF3TNcM5CMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80
ZmI1ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEwMWIwNDJlNWUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzRmYjVmNjQ4LWQ4YjQtNGVlMi1h
NDNkLTFiYTAxYjA0MmU1ZS80ZmI1ZjY0OC1kOGI0LTRlZTItYTQzZC0xYmEwMWIw
NDJlNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBARinmADBAJo/nwwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAi4U54q/DpssO
c9MHCKWOXcpE7s9jgswMxt0InaHtCdrttAGjbOxmtr/vBXxzPItjaEpR2XQRDIkv
f5qrDAoDUraax7nQzZdMW/CyQEdoRZ0n/mHntms75TTXKXor31F99Fu1dnx3KrM0
gkfiZl9HaSJfckRAIyusFSO6Y4Tp1u/YCna8Ep3GJBhVWhK5RgsveKiUY0h7/7Tv
jb437cG0eDyCOzXARcwEXykxBqtblTwFnc2Mux7xkLbIOXl0Q2DbhhM/XprYhz4m
q0k2khmAEMRiQdah9yVYCFOkDidRep4NZC8qVdRLiPrr/XeaVXX8Mot51y3XmmJC
etUpbbsfKQ==
-----END CERTIFICATE-----