Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a.cer
File:                     46c4e48a-9ab3-4a1b-a9b7-68fc9016407a.cer (raw, json)
Hash identifier:          aFk5EanCjwZKmrnuN6KI1hHqq8iyoasDzxYt5DcNvvQ=
Subject key identifier:   CB:DE:E2:64:F8:10:A5:A3:29:6A:35:38:12:C9:11:81:95:1A:9A:24
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285842021DB18A10A07AB6A4009700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 May 2023 09:36:42 +0000
Certificate not after:    Thu 28 Aug 2025 09:36:42 +0000
Subordinate resources:    AS: 400121
                          IP: 147.185.185.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:02:1d:b1:8a:10:a0:7a:b6:a4:00:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 26 09:36:42 2023 GMT
            Not After : Aug 28 09:36:42 2025 GMT
        Subject: CN=46c4e48a-9ab3-4a1b-a9b7-68fc9016407a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:b1:0d:64:f8:a6:25:e1:3e:da:06:db:b2:
                    2c:32:0e:aa:eb:65:f5:1a:50:73:8b:0d:96:22:45:
                    a9:87:d2:e3:1c:68:72:26:60:a5:48:8c:a7:93:4c:
                    83:d2:60:e6:ab:a0:a3:34:4b:4f:53:db:22:53:8f:
                    2e:49:fc:09:f0:09:6f:8b:f9:86:56:32:35:3a:c9:
                    81:14:b1:d2:d4:46:a4:92:e1:61:68:69:d8:78:95:
                    0b:6a:3f:32:e1:41:4f:6e:5e:2a:09:aa:a5:ef:df:
                    4d:c2:2d:e2:4f:59:d6:42:9f:f5:80:52:c1:2b:dc:
                    87:87:5c:31:97:e8:0f:ab:72:6e:c7:8a:55:7d:dd:
                    a2:e8:3d:38:07:49:bc:a8:ed:b7:65:21:dd:66:b5:
                    21:77:59:d0:7c:87:58:f2:c5:30:56:db:2c:0f:b3:
                    b7:6b:a3:82:40:4a:18:5a:4d:71:db:9a:1b:85:33:
                    65:ee:96:c0:d6:2f:f7:7d:1b:3d:e5:f8:d0:fe:a8:
                    82:e3:91:38:f1:ad:eb:3b:97:d3:de:43:43:37:2f:
                    f3:6b:ad:bc:44:5f:08:1c:c1:b3:13:23:b4:a7:f6:
                    d9:15:6b:7d:93:65:cf:a7:58:e3:db:cf:d9:ba:7d:
                    6f:0f:5e:30:50:83:b2:64:e5:04:9d:3e:32:68:05:
                    9d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DE:E2:64:F8:10:A5:A3:29:6A:35:38:12:C9:11:81:95:1A:9A:24
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a/46c4e48a-9ab3-4a1b-a9b7-68fc9016407a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.185.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400121

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:63:3a:fb:17:0f:cb:74:c1:a5:81:b5:c0:e1:75:15:1a:4c:
         ae:cf:20:4a:d2:06:e2:63:ce:74:ef:d0:8d:82:d3:f3:97:db:
         97:e0:f5:0a:54:e2:9b:91:8a:26:b3:b0:f3:87:a5:e3:46:f8:
         0d:0d:c8:77:a5:f2:10:4e:ed:2f:89:c0:ec:5a:2f:97:da:9a:
         fb:da:48:24:50:6e:7f:cc:9f:6c:33:6d:2b:aa:7c:d6:be:58:
         64:4d:f3:ad:5e:b5:67:18:33:7f:9c:b0:6e:66:f8:57:e5:a1:
         9a:75:89:10:3d:dd:d7:45:78:f1:06:6c:83:7a:4f:ef:da:6c:
         34:6b:f5:a3:9f:6d:73:da:fb:65:30:0d:9b:a5:f7:5f:f1:f2:
         3d:e5:9b:0a:8b:1e:46:37:44:4d:eb:e3:d2:21:42:b6:af:c7:
         3c:10:82:0e:c8:cd:4f:81:07:99:87:77:cc:68:f9:22:13:55:
         78:08:6c:6e:f2:a8:19:1d:c6:8a:47:19:89:f3:2c:4a:56:af:
         b5:3f:6d:70:73:20:e0:79:47:5a:cc:77:9b:a6:b0:82:ac:93:
         97:1e:b1:6b:ec:4e:41:fd:57:65:36:d0:a0:05:89:4b:49:e8:
         61:e4:bf:dc:c7:22:d2:c7:b2:3e:6d:12:eb:2a:4e:48:43:2c:
         b4:c3:ea:f5
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEICHbGKEKB6tqQAlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTIzMDUyNjA5MzY0MloXDTI1MDgyODA5MzY0MlowLzEtMCsGA1UEAxMk
NDZjNGU0OGEtOWFiMy00YTFiLWE5YjctNjhmYzkwMTY0MDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcKxDWT4piXhPtoG27IsMg6q62X1GlBziw2W
IkWph9LjHGhyJmClSIynk0yD0mDmq6CjNEtPU9siU48uSfwJ8Alvi/mGVjI1OsmB
FLHS1EakkuFhaGnYeJULaj8y4UFPbl4qCaql799Nwi3iT1nWQp/1gFLBK9yHh1wx
l+gPq3Jux4pVfd2i6D04B0m8qO23ZSHdZrUhd1nQfIdY8sUwVtssD7O3a6OCQEoY
Wk1x25obhTNl7pbA1i/3fRs95fjQ/qiC45E48a3rO5fT3kNDNy/za628RF8IHMGz
EyO0p/bZFWt9k2XPp1jj28/Zun1vD14wUIOyZOUEnT4yaAWdKQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFMve4mT4EKWjKWo1OBLJEYGVGpokMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80
NmM0ZTQ4YS05YWIzLTRhMWItYTliNy02OGZjOTAxNjQwN2EvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1LzQ2YzRlNDhhLTlhYjMtNGExYi1h
OWI3LTY4ZmM5MDE2NDA3YS80NmM0ZTQ4YS05YWIzLTRhMWItYTliNy02OGZjOTAx
NjQwN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACTubkwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
Bhr5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACBjOvsXD8t0waWBtcDhdRUaTK7PIErSBuJjznTv0I2C0/OX
25fg9QpU4puRiiazsPOHpeNG+A0NyHel8hBO7S+JwOxaL5famvvaSCRQbn/Mn2wz
bSuqfNa+WGRN861etWcYM3+csG5m+FfloZp1iRA93ddFePEGbIN6T+/abDRr9aOf
bXPa+2UwDZul91/x8j3lmwqLHkY3RE3r49IhQravxzwQgg7IzU+BB5mHd8xo+SIT
VXgIbG7yqBkdxopHGYnzLEpWr7U/bXBzIOB5R1rMd5umsIKsk5cesWvsTkH9V2U2
0KAFiUtJ6GHkv9zHItLHsj5tEusqTkhDLLTD6vU=
-----END CERTIFICATE-----