Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25.cer
File:                     52e8f306-ec01-431f-a68c-fec00a6f4c25.cer (raw, json)
Hash identifier:          3Z10SI3G2Us5w5z7KMVPrZrW4ieTtzWyCTFc55G1CYE=
Subject key identifier:   DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584881138F1C47AA8D51C7353960
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 11 Jan 2025 01:45:34 +0000
Certificate not after:    Fri 16 Apr 2027 00:45:34 +0000
Subordinate resources:    AS: 397546
                          IP: 162.249.184.0/22
                          IP: 2602:fde1::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jan 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:81:13:8f:1c:47:aa:8d:51:c7:35:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jan 11 01:45:34 2025 GMT
            Not After : Apr 16 00:45:34 2027 GMT
        Subject: CN=52e8f306-ec01-431f-a68c-fec00a6f4c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:e4:e5:4d:b7:5f:90:b9:6d:d5:af:83:8a:
                    11:f8:4e:64:c7:8f:e9:dd:bc:dd:35:11:9f:85:0a:
                    5e:c7:10:d5:73:f6:48:d7:d7:4f:08:c7:13:03:97:
                    6a:af:9f:c6:cc:c2:62:3a:5b:bb:dd:16:b5:06:ec:
                    70:a9:fa:9e:d8:a8:c2:51:77:a0:bb:68:19:d9:40:
                    74:31:5e:bb:fe:82:8b:d6:0e:39:30:91:a3:65:5a:
                    a8:0d:31:4a:4a:aa:fa:f1:16:46:7a:9f:93:29:7c:
                    93:b8:01:fe:7c:08:62:fb:e6:8e:03:d3:44:08:c3:
                    d0:e4:25:58:76:6c:c8:c0:7f:87:c4:7d:dd:e9:a2:
                    62:3f:f8:e0:48:3f:08:16:7d:76:35:49:69:eb:90:
                    6a:cb:c7:30:6f:17:f6:96:92:91:0a:08:7f:bc:6c:
                    88:3e:c6:ef:b1:86:65:dd:dd:c6:71:19:63:eb:d3:
                    90:ef:ae:1b:f1:42:06:12:72:47:bd:b2:f3:e8:c1:
                    5e:e8:85:43:b8:2c:65:ca:ea:96:a9:97:c4:50:38:
                    b4:6a:53:8c:d1:1d:90:1d:ab:b3:e5:11:88:38:47:
                    22:bf:34:5f:33:df:9f:d1:22:d6:ae:ee:2f:f6:89:
                    25:02:3a:0b:53:a4:2b:25:c6:63:a5:7a:51:03:63:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:16:68:A3:6A:E6:02:E8:27:ED:07:0B:0F:0A:47:F4:AC:42:7A:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/52e8f306-ec01-431f-a68c-fec00a6f4c25/52e8f306-ec01-431f-a68c-fec00a6f4c25.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.184.0/22
                IPv6:
                  2602:fde1::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397546

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:31:32:27:81:12:07:ce:05:b0:d8:76:0b:09:91:63:d0:af:
         33:0f:5e:10:bf:8e:a8:e2:85:b2:43:60:ca:52:a8:d0:81:b5:
         13:18:f8:04:f0:42:8a:13:f4:2e:b1:c2:3e:df:0a:be:fa:f2:
         1e:a5:ea:b1:e5:f8:42:ba:00:5c:00:a5:b1:d0:43:1b:a9:12:
         1d:44:b3:32:d3:b5:d7:5c:1b:fd:ab:cc:d4:6f:d1:d9:d3:5b:
         e7:5e:dd:59:b4:29:e3:02:06:1f:50:18:33:cb:3e:c0:93:e0:
         7b:64:79:2b:a0:a5:e7:d0:17:82:12:4c:62:ac:ba:ff:42:a9:
         ae:05:cb:67:c1:58:16:b3:4c:0d:96:00:81:21:2f:d1:83:6d:
         15:97:52:f9:b2:b8:24:8d:08:4f:6c:3c:33:54:0b:f8:c5:97:
         39:ef:b8:a2:c8:d9:2c:10:08:34:85:bf:fa:91:76:4d:0b:67:
         ab:ab:4c:16:d3:39:8c:7e:c7:77:8d:62:ae:73:83:9e:5a:1a:
         e1:14:de:44:5c:a5:99:e9:4c:93:33:5e:15:8f:42:be:15:3b:
         64:7e:bb:dc:fe:bc:d8:9e:6a:b0:c9:bc:1b:95:36:bb:a7:a9:
         88:91:89:cf:bc:e2:e1:aa:ca:9e:ec:79:9e:5c:1f:ac:23:a9:
         22:1f:b6:07
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEiBE48cR6qNUcc1OWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTI1MDExMTAxNDUzNFoXDTI3MDQxNjAwNDUzNFowLzEtMCsGA1UEAxMk
NTJlOGYzMDYtZWMwMS00MzFmLWE2OGMtZmVjMDBhNmY0YzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWXk5U23X5C5bdWvg4oR+E5kx4/p3bzdNRGf
hQpexxDVc/ZI19dPCMcTA5dqr5/GzMJiOlu73Ra1Buxwqfqe2KjCUXegu2gZ2UB0
MV67/oKL1g45MJGjZVqoDTFKSqr68RZGep+TKXyTuAH+fAhi++aOA9NECMPQ5CVY
dmzIwH+HxH3d6aJiP/jgSD8IFn12NUlp65Bqy8cwbxf2lpKRCgh/vGyIPsbvsYZl
3d3GcRlj69OQ764b8UIGEnJHvbLz6MFe6IVDuCxlyuqWqZfEUDi0alOM0R2QHauz
5RGIOEcivzRfM9+f0SLWru4v9oklAjoLU6QrJcZjpXpRA2PY/QIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFN8WaKNq5gLoJ+0HCw8KR/SsQno9MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81
MmU4ZjMwNi1lYzAxLTQzMWYtYTY4Yy1mZWMwMGE2ZjRjMjUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzUyZThmMzA2LWVjMDEtNDMxZi1h
NjhjLWZlYzAwYTZmNGMyNS81MmU4ZjMwNi1lYzAxLTQzMWYtYTY4Yy1mZWMwMGE2
ZjRjMjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAKi+bgwDgQCAAIwCAMGBCYC/eEAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYQ6jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABMTIngRIHzgWw2HYLCZFj0K8z
D14Qv46o4oWyQ2DKUqjQgbUTGPgE8EKKE/QuscI+3wq++vIepeqx5fhCugBcAKWx
0EMbqRIdRLMy07XXXBv9q8zUb9HZ01vnXt1ZtCnjAgYfUBgzyz7Ak+B7ZHkroKXn
0BeCEkxirLr/QqmuBctnwVgWs0wNlgCBIS/Rg20Vl1L5srgkjQhPbDwzVAv4xZc5
77iiyNksEAg0hb/6kXZNC2erq0wW0zmMfsd3jWKuc4OeWhrhFN5EXKWZ6UyTM14V
j0K+FTtkfrvc/rzYnmqwybwblTa7p6mIkYnPvOLhqsqe7HmeXB+sI6kiH7YH
-----END CERTIFICATE-----