Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07.cer
File:                     01430e13-506f-444b-8727-f36154b32c07.cer (raw, json)
Hash identifier:          36l7hym8cPKQCyx+qhUsSI+FRj3xllE/4QyHvBh6nWk=
Subject key identifier:   49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858424C7668CF5744BDE4C343C080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 22 Jun 2023 00:45:16 +0000
Certificate not after:    Wed 24 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 23129
                          AS: 46256
                          AS: 46441
                          AS: 46648
                          IP: 198.217.64.0 -- 198.217.113.255

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:4c:76:68:cf:57:44:bd:e4:c3:43:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 22 00:45:16 2023 GMT
            Not After : Sep 24 00:45:16 2025 GMT
        Subject: CN=01430e13-506f-444b-8727-f36154b32c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:ac:a6:50:ed:4a:0f:1e:0a:27:ed:c8:a6:
                    5d:ea:79:a8:e3:b9:53:c3:3d:d7:40:82:b8:45:4b:
                    d3:c8:a1:14:85:37:66:ab:e8:ca:1d:61:5b:b6:83:
                    b1:b1:d0:88:86:07:24:fd:9d:81:04:24:41:94:33:
                    1f:6f:c9:f0:31:e7:5b:8f:7c:d1:cb:45:e1:c1:d9:
                    12:f2:d1:7a:e9:43:3c:6c:c4:fc:00:cc:57:05:a2:
                    21:8b:51:27:03:79:a3:ac:7a:b7:ee:6d:dd:0b:de:
                    e0:7d:93:0f:61:e7:33:24:2a:2b:f8:99:b8:13:67:
                    35:db:9e:5a:69:df:f7:7e:56:50:2e:15:bf:e7:5a:
                    4c:67:ef:dd:d9:95:05:74:9d:16:2e:13:9b:4e:79:
                    86:87:ac:22:30:d9:ca:d6:21:1e:69:62:0f:b5:74:
                    8d:e6:71:e4:d6:51:53:c0:82:0e:f9:94:0f:c4:10:
                    19:7a:6e:87:e2:f0:32:b1:2f:4b:36:5a:ca:9c:56:
                    7e:46:50:14:14:67:20:15:f0:ca:85:b7:a6:e5:29:
                    e8:31:28:f9:c7:0b:a7:23:a5:f9:72:cd:03:6e:67:
                    26:00:0c:25:30:74:d5:34:d5:df:a7:bf:67:7c:64:
                    aa:37:25:d1:73:e3:ca:68:6b:b0:9e:44:1d:71:d0:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:9D:C6:85:55:F1:6E:47:A6:42:66:2B:FA:2B:9A:16:91:CA:2A:DF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01430e13-506f-444b-8727-f36154b32c07/01430e13-506f-444b-8727-f36154b32c07.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.64.0-198.217.113.255

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23129
                  46256
                  46441
                  46648

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:ac:0a:45:00:90:74:37:81:97:ed:49:5b:df:45:f2:6d:ea:
         f7:15:ba:92:4d:8e:7d:fe:93:e1:b5:54:1d:e4:40:42:44:86:
         6e:69:80:aa:18:4b:30:fe:2d:52:80:7f:e1:ff:36:1f:fb:36:
         e4:15:89:9c:da:1d:4b:87:bb:c5:5a:a1:f0:e5:6b:0d:af:56:
         52:88:a3:87:32:38:69:b3:5b:f6:24:9b:c6:70:1b:d5:36:1e:
         be:77:ed:74:03:ae:da:c9:b9:64:5f:b7:1e:1b:8c:e8:fe:5e:
         2f:90:d4:22:6b:f2:1a:f7:ae:32:2c:ed:d6:3b:82:73:9d:a7:
         03:d4:af:ea:5f:17:00:82:cf:70:4b:7c:00:60:bd:d5:01:2c:
         a9:f2:23:cb:d9:64:d1:ff:60:28:48:d1:35:4f:5d:4a:fa:a8:
         af:ac:aa:8f:f8:10:63:97:67:15:7f:98:20:a1:6a:1b:3d:fd:
         c2:e9:2e:da:f8:3c:e9:16:f3:61:3e:1c:73:69:26:07:73:b0:
         30:6e:69:e7:00:5c:1d:38:5e:52:4e:cd:3f:62:35:1c:89:66:
         60:57:d4:34:bb:be:c9:f1:01:c1:5f:4a:14:19:2b:23:a2:e6:
         e6:8d:82:4b:17:50:9d:e4:94:5a:e9:5d:1a:25:4a:c7:90:dd:
         a1:29:64:8f
-----BEGIN CERTIFICATE-----
MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEJMdmjPV0S95MNDwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDYyMjAwNDUxNloXDTI1MDkyNDAwNDUxNlowLzEtMCsGA1UEAxMk
MDE0MzBlMTMtNTA2Zi00NDRiLTg3MjctZjM2MTU0YjMyYzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5ysplDtSg8eCiftyKZd6nmo47lTwz3XQIK4
RUvTyKEUhTdmq+jKHWFbtoOxsdCIhgck/Z2BBCRBlDMfb8nwMedbj3zRy0XhwdkS
8tF66UM8bMT8AMxXBaIhi1EnA3mjrHq37m3dC97gfZMPYeczJCor+Jm4E2c1255a
ad/3flZQLhW/51pMZ+/d2ZUFdJ0WLhObTnmGh6wiMNnK1iEeaWIPtXSN5nHk1lFT
wIIO+ZQPxBAZem6H4vAysS9LNlrKnFZ+RlAUFGcgFfDKhbem5SnoMSj5xwunI6X5
cs0DbmcmAAwlMHTVNNXfp79nfGSqNyXRc+PKaGuwnkQdcdDYiwIDAQABo4IEMTCC
BC0wHQYDVR0OBBYEFEmdxoVV8W5HpkJmK/ormhaRyirfMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w
MTQzMGUxMy01MDZmLTQ0NGItODcyNy1mMzYxNTRiMzJjMDcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzAxNDMwZTEzLTUwNmYtNDQ0Yi04
NzI3LWYzNjE1NGIzMmMwNy8wMTQzMGUxMy01MDZmLTQ0NGItODcyNy1mMzYxNTRi
MzJjMDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwJwYIKwYBBQUH
AQcBAf8EGDAWMBQEAgABMA4wDAMEBsbZQAMEAcbZcDAoBggrBgEFBQcBCAEB/wQZ
MBegFTATAgJaWQIDALSwAgMAtWkCAwC2ODBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHrApFAJB0N4GX7Ulb
30Xyber3FbqSTY59/pPhtVQd5EBCRIZuaYCqGEsw/i1SgH/h/zYf+zbkFYmc2h1L
h7vFWqHw5WsNr1ZSiKOHMjhps1v2JJvGcBvVNh6+d+10A67ayblkX7ceG4zo/l4v
kNQia/Ia964yLO3WO4JznacD1K/qXxcAgs9wS3wAYL3VASyp8iPL2WTR/2AoSNE1
T11K+qivrKqP+BBjl2cVf5ggoWobPf3C6S7a+DzpFvNhPhxzaSYHc7AwbmnnAFwd
OF5STs0/YjUciWZgV9Q0u77J8QHBX0oUGSsjoubmjYJLF1Cd5JRa6V0aJUrHkN2h
KWSP
-----END CERTIFICATE-----