Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/95c6ced0-8242-4d5e-b1fa-757764b66749.cer
File:                     95c6ced0-8242-4d5e-b1fa-757764b66749.cer (raw, json)
Hash identifier:          eMesNtE4+4mceUrYYUU0ni/P6kG8zCe7NDXQtG7N778=
Subject key identifier:   0D:16:C4:F9:9F:4D:65:44:05:DC:06:23:B4:9D:80:FD:95:B2:E5:3B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841E4834EB41734EA3BFFCF7200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/95c6ced0-8242-4d5e-b1fa-757764b66749/95c6ced0-8242-4d5e-b1fa-757764b66749.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/95c6ced0-8242-4d5e-b1fa-757764b66749/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 27 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 53818
                          IP: 216.172.80.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4e:b4:17:34:ea:3b:ff:cf:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 27 19:06:39 2025 GMT
        Subject: CN=95c6ced0-8242-4d5e-b1fa-757764b66749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:97:ec:fd:b4:09:26:7c:7e:47:bc:ee:e4:
                    78:40:be:9b:63:32:f3:96:58:1a:c3:dd:07:87:de:
                    b7:51:77:2d:35:3d:13:86:62:62:67:91:e6:e0:4c:
                    9f:74:d7:d6:3c:67:1d:a0:26:a9:5e:e2:0c:ce:16:
                    03:8e:6a:eb:ea:1a:94:22:b2:44:83:86:4f:b2:c4:
                    88:0a:57:b1:f5:7a:a9:4e:f0:4e:6c:d3:88:ab:10:
                    b1:06:5e:1a:77:00:2b:ea:b3:c3:2c:e9:3b:6e:4c:
                    89:99:61:20:99:61:b6:3b:f0:1d:fe:e8:34:07:3f:
                    07:dd:d5:a0:01:14:56:eb:9e:05:ef:7d:7c:62:f4:
                    30:c2:8a:b1:3e:0d:ad:c0:ea:6f:ee:40:00:ab:ee:
                    c6:60:96:9a:15:66:ab:5f:3b:e1:59:8e:45:c5:3d:
                    6f:52:1b:3f:9c:86:f1:71:5d:09:07:0b:f1:9f:19:
                    df:55:88:dc:fd:9c:10:73:95:eb:08:26:c1:52:17:
                    8e:3e:82:2b:b3:39:07:87:df:1b:37:ea:c2:cf:ec:
                    f0:49:17:cb:4b:2b:be:bd:fd:cd:d9:34:1b:13:c2:
                    58:ad:1e:03:e2:be:23:72:ae:9f:dd:24:01:45:7d:
                    a9:1c:fa:10:cd:89:12:27:3e:b7:b7:00:56:c8:05:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:16:C4:F9:9F:4D:65:44:05:DC:06:23:B4:9D:80:FD:95:B2:E5:3B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/95c6ced0-8242-4d5e-b1fa-757764b66749/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/95c6ced0-8242-4d5e-b1fa-757764b66749/95c6ced0-8242-4d5e-b1fa-757764b66749.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.172.80.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53818

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:17:00:43:da:05:43:21:d9:1b:16:5d:6d:03:fc:fe:8c:d4:
         89:87:28:43:45:73:86:fe:2e:55:7f:e2:11:8d:bc:04:27:06:
         5f:69:a5:f6:f5:f8:1f:7e:ba:79:14:37:74:3a:77:5b:4d:0f:
         a9:0f:b5:54:db:66:1e:75:78:91:d9:e3:21:78:25:5b:3c:9f:
         cc:a8:70:1d:c5:60:ce:b5:44:0e:86:d5:a0:5b:d5:33:78:61:
         c1:0e:d4:17:73:ac:66:a7:98:d8:65:c4:04:cf:fb:6e:dd:14:
         d6:f3:03:df:11:01:91:50:b9:57:c1:0a:ab:9f:e6:fb:1c:11:
         26:31:3a:34:fa:65:e5:80:b0:bf:02:5c:7d:71:8a:9c:a5:3f:
         23:8d:42:7b:bd:12:97:60:5c:0b:a9:77:b6:36:7b:83:26:93:
         21:e0:2c:31:b6:b1:2f:34:75:b5:d4:b3:e9:8f:b3:c2:19:7c:
         53:bc:1a:82:4c:df:6d:a1:b7:85:58:90:0f:89:39:7c:87:f2:
         aa:a0:1f:bf:ef:1c:df:67:03:7a:70:6e:14:c2:4e:3b:64:f3:
         7c:11:3e:3f:5b:6c:7f:bf:17:e1:fc:e4:85:cc:65:ea:18:c5:
         5d:1b:7b:a8:19:2e:76:1f:28:51:30:e6:4f:c0:13:f5:e6:b3:
         8e:0c:5f:b5
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEHkg060FzTqO//PcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYyNzE5MDYzOVowLzEtMCsGA1UEAxMk
OTVjNmNlZDAtODI0Mi00ZDVlLWIxZmEtNzU3NzY0YjY2NzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyCX7P20CSZ8fke87uR4QL6bYzLzllgaw90H
h963UXctNT0ThmJiZ5Hm4EyfdNfWPGcdoCapXuIMzhYDjmrr6hqUIrJEg4ZPssSI
Clex9XqpTvBObNOIqxCxBl4adwAr6rPDLOk7bkyJmWEgmWG2O/Ad/ug0Bz8H3dWg
ARRW654F7318YvQwwoqxPg2twOpv7kAAq+7GYJaaFWarXzvhWY5FxT1vUhs/nIbx
cV0JBwvxnxnfVYjc/ZwQc5XrCCbBUheOPoIrszkHh98bN+rCz+zwSRfLSyu+vf3N
2TQbE8JYrR4D4r4jcq6f3SQBRX2pHPoQzYkSJz63twBWyAXeEwIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFA0WxPmfTWVEBdwGI7SdgP2VsuU7MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85
NWM2Y2VkMC04MjQyLTRkNWUtYjFmYS03NTc3NjRiNjY3NDkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1Lzk1YzZjZWQwLTgyNDItNGQ1ZS1i
MWZhLTc1Nzc2NGI2Njc0OS85NWM2Y2VkMC04MjQyLTRkNWUtYjFmYS03NTc3NjRi
NjY3NDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATYrFAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
ANI6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAIXAEPaBUMh2RsWXW0D/P6M1ImHKENFc4b+LlV/4hGNvAQn
Bl9ppfb1+B9+unkUN3Q6d1tND6kPtVTbZh51eJHZ4yF4JVs8n8yocB3FYM61RA6G
1aBb1TN4YcEO1BdzrGanmNhlxATP+27dFNbzA98RAZFQuVfBCquf5vscESYxOjT6
ZeWAsL8CXH1xipylPyONQnu9EpdgXAupd7Y2e4MmkyHgLDG2sS80dbXUs+mPs8IZ
fFO8GoJM322ht4VYkA+JOXyH8qqgH7/vHN9nA3pwbhTCTjtk83wRPj9bbH+/F+H8
5IXMZeoYxV0be6gZLnYfKFEw5k/AE/Xms44MX7U=
-----END CERTIFICATE-----