Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06.cer
File:                     274c26e3-a417-425b-8d4b-316c68f35e06.cer (raw, json)
Hash identifier:          DE/wlIE/L0yglyb385TFoWLJqiRr4WY/15py1X0lke0=
Subject key identifier:   3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285844728CEFE02BF30CA8557746C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/274c26e3-a417-425b-8d4b-316c68f35e06.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 05 Jan 2024 01:45:15 +0000
Certificate not after:    Thu 09 Apr 2026 00:45:15 +0000
Subordinate resources:    IP: 216.47.24.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:8c:ef:e0:2b:f3:0c:a8:55:77:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jan  5 01:45:15 2024 GMT
            Not After : Apr  9 00:45:15 2026 GMT
        Subject: CN=274c26e3-a417-425b-8d4b-316c68f35e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:94:7b:16:2a:2f:e8:e8:df:a0:d0:f4:04:
                    1f:05:1f:fa:8b:31:1e:94:ec:36:e2:e9:13:40:a2:
                    59:e4:07:d0:58:4e:df:2e:1d:b2:9b:a6:03:a8:14:
                    08:33:83:51:64:5b:d4:69:e4:de:ba:8d:2d:b4:27:
                    7e:5e:70:ec:80:7d:5d:4b:75:62:0b:53:a1:19:df:
                    93:48:ca:74:66:f6:56:34:4e:8f:ca:98:fd:09:05:
                    fd:f3:29:9a:a2:9c:b7:b1:b3:41:8e:38:74:9c:e5:
                    77:dc:f1:b9:9d:ae:ca:81:7f:0d:2a:19:64:1f:7a:
                    f7:fc:ee:08:a1:af:be:ad:c5:5b:55:ff:23:e5:ed:
                    a0:e2:00:e6:09:3d:67:bf:af:57:21:08:21:a0:b0:
                    cd:48:f5:1b:4a:29:9a:fd:9a:03:94:65:07:ce:ca:
                    cb:a2:b6:f3:bf:51:65:b1:e2:59:b8:ec:6a:fa:1b:
                    a1:d2:7a:a1:e4:51:0f:59:58:cd:f5:0f:31:c5:f6:
                    92:f2:68:fa:39:1b:13:c2:c5:b3:e6:a9:01:a0:e2:
                    1e:9b:10:a0:37:62:8e:7e:a0:0a:7e:0e:87:99:c7:
                    ee:78:e1:51:16:1a:43:16:ca:b7:c3:56:e2:51:67:
                    8a:91:d6:44:af:b9:a7:06:0d:76:fd:59:36:03:a3:
                    5f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BE:C1:4F:96:AA:7D:9D:D1:47:7A:CF:EC:25:58:96:33:45:B5:9B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/274c26e3-a417-425b-8d4b-316c68f35e06/274c26e3-a417-425b-8d4b-316c68f35e06.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:83:90:93:67:24:7c:fa:88:f4:8f:2c:59:ca:d9:a6:a2:
         47:7e:5a:1d:23:87:0f:d6:4f:49:30:76:1f:94:29:54:f4:2f:
         42:d0:f6:e6:4b:cb:02:00:df:d4:e6:60:2c:b0:56:c9:d7:dd:
         9a:a7:90:51:dc:58:1f:65:90:9b:4f:10:be:82:8c:19:76:b4:
         c0:9d:42:f9:bc:67:2c:4f:97:c2:92:03:be:3a:07:c0:0b:9e:
         5a:7f:fb:13:66:19:45:ad:a8:7b:16:49:e0:16:da:80:43:f8:
         e7:cd:09:35:e4:04:99:10:4a:47:6c:f8:3f:48:d5:a5:53:4c:
         da:fb:45:9f:69:3d:3d:54:41:f4:09:cb:94:bd:9d:1b:a2:f7:
         0a:17:f2:d4:7f:60:93:7e:b9:75:5d:6a:78:12:2a:95:87:89:
         a6:a1:5e:5e:ce:b2:b3:b1:59:58:c3:4e:80:01:c2:68:ce:ab:
         b8:bf:ed:54:c4:9f:34:93:8d:bd:7c:04:29:c0:60:06:e8:d9:
         4b:a5:53:5b:c7:a7:4a:46:87:7e:c3:1d:88:f9:ed:a3:3d:8a:
         36:a0:d6:79:b1:fe:31:20:e5:bd:f9:b7:30:64:7e:a7:84:b3:
         75:24:c7:8d:e2:27:d8:5c:8f:14:03:b0:3f:0a:d8:8c:b6:ab:
         b5:c0:31:24
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWERyjO/gK/MMqFV3RsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI0MDEwNTAxNDUxNVoXDTI2MDQwOTAwNDUxNVowLzEtMCsGA1UEAxMk
Mjc0YzI2ZTMtYTQxNy00MjViLThkNGItMzE2YzY4ZjM1ZTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJiUexYqL+jo36DQ9AQfBR/6izEelOw24ukT
QKJZ5AfQWE7fLh2ym6YDqBQIM4NRZFvUaeTeuo0ttCd+XnDsgH1dS3ViC1OhGd+T
SMp0ZvZWNE6Pypj9CQX98ymaopy3sbNBjjh0nOV33PG5na7KgX8NKhlkH3r3/O4I
oa++rcVbVf8j5e2g4gDmCT1nv69XIQghoLDNSPUbSima/ZoDlGUHzsrLorbzv1Fl
seJZuOxq+huh0nqh5FEPWVjN9Q8xxfaS8mj6ORsTwsWz5qkBoOIemxCgN2KOfqAK
fg6HmcfueOFRFhpDFsq3w1biUWeKkdZEr7mnBg12/Vk2A6NfmwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFD6+wU+Wqn2d0Ud6z+wlWJYzRbWbMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8y
NzRjMjZlMy1hNDE3LTQyNWItOGQ0Yi0zMTZjNjhmMzVlMDYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzI3NGMyNmUzLWE0MTctNDI1Yi04
ZDRiLTMxNmM2OGYzNWUwNi8yNzRjMjZlMy1hNDE3LTQyNWItOGQ0Yi0zMTZjNjhm
MzVlMDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPYLxgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOxGDkJNnJHz6iPSPLFnK
2aaiR35aHSOHD9ZPSTB2H5QpVPQvQtD25kvLAgDf1OZgLLBWydfdmqeQUdxYH2WQ
m08QvoKMGXa0wJ1C+bxnLE+XwpIDvjoHwAueWn/7E2YZRa2oexZJ4BbagEP4580J
NeQEmRBKR2z4P0jVpVNM2vtFn2k9PVRB9AnLlL2dG6L3Chfy1H9gk365dV1qeBIq
lYeJpqFeXs6ys7FZWMNOgAHCaM6ruL/tVMSfNJONvXwEKcBgBujZS6VTW8enSkaH
fsMdiPntoz2KNqDWebH+MSDlvfm3MGR+p4SzdSTHjeIn2FyPFAOwPwrYjLartcAx
JA==
-----END CERTIFICATE-----