Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7.cer
File:                     e601b694-6242-4b1c-a841-d0a7214cd9c7.cer (raw, json)
Hash identifier:          2gvfVSqO23t+yiQZEeW0CII+63OcdWRDnp5O1oGcQw4=
Subject key identifier:   96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285841F8198B3C9EF438945FDAD200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 22 May 2023 19:30:16 +0000
Certificate not after:    Sun 24 Aug 2025 19:30:16 +0000
Subordinate resources:    AS: 32982
                          AS: 46846
                          IP: 2607:f368::/32
                          IP: 2620:0:b30::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f8:19:8b:3c:9e:f4:38:94:5f:da:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: May 22 19:30:16 2023 GMT
            Not After : Aug 24 19:30:16 2025 GMT
        Subject: CN=e601b694-6242-4b1c-a841-d0a7214cd9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b7:9a:b7:04:46:9f:e9:be:2e:98:de:55:63:
                    30:b1:c8:94:c6:74:32:8b:20:81:2c:e9:35:78:8f:
                    cc:f0:c3:8c:4d:a2:f1:0d:70:2e:4d:5f:11:c4:a3:
                    98:e4:d0:81:7d:58:54:30:52:f5:7e:ac:8e:f0:1a:
                    cc:d0:07:17:12:ff:ae:9a:a7:b2:fe:0f:e7:2f:b6:
                    0c:30:2a:3b:a2:8d:04:1f:b6:df:64:cc:46:af:3b:
                    89:1e:9d:e7:c0:3a:d8:38:96:ef:cf:99:a5:2f:37:
                    d4:a1:87:42:50:b1:ad:5d:02:a0:b1:40:78:44:7e:
                    7f:4d:04:d2:67:45:d9:c7:c9:09:93:86:d5:77:65:
                    e0:c9:54:b2:0e:b6:59:f9:50:0c:07:12:34:44:6d:
                    c2:4d:f9:17:40:47:17:8e:4e:ba:79:84:4c:c9:5e:
                    8a:45:9e:5c:49:4a:c7:d6:a2:02:91:82:df:23:99:
                    52:68:9c:f6:ee:ce:01:31:0e:48:62:d7:36:c9:9e:
                    49:93:f0:08:97:81:ee:4d:56:45:96:61:c2:e7:12:
                    8e:40:5e:44:25:4c:aa:a2:e5:30:88:02:a5:97:b7:
                    e2:03:0a:ea:52:03:23:1e:52:37:d6:26:80:37:9b:
                    bb:ad:cc:b1:06:c3:57:db:ae:5a:ca:03:b2:c4:90:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7A:A6:3B:2E:D3:AA:65:44:0B:7E:8B:F5:4B:BA:F1:ED:95:50:07
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e601b694-6242-4b1c-a841-d0a7214cd9c7/e601b694-6242-4b1c-a841-d0a7214cd9c7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f368::/32
                  2620:0:b30::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32982
                  46846

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:85:64:36:fa:86:73:f5:eb:ba:96:2b:b0:6e:44:06:76:ae:
         a3:f2:c5:9e:6f:3c:c2:4a:1d:b0:81:10:b1:cc:f1:c3:df:48:
         22:d9:df:69:5b:4b:d5:4c:7c:a6:6f:b1:aa:b2:3a:8c:26:67:
         b3:63:a6:10:6b:f3:6e:95:55:a8:6b:ba:10:3e:d5:94:42:c6:
         8b:11:4f:07:e6:b6:0b:b8:56:b9:61:7d:d3:a5:1b:df:ca:30:
         6a:fd:75:0e:3d:5e:cf:26:70:ab:71:44:b5:3b:61:50:4b:c7:
         f4:c1:6e:71:ff:86:d4:d6:c5:7a:ac:13:b1:a4:4a:7b:e2:93:
         ff:b4:82:2a:bb:e3:8f:d1:90:7d:05:27:21:b1:81:7d:13:3b:
         dc:57:75:51:2b:1f:0b:b6:53:1d:36:61:29:da:ca:28:2f:a3:
         1e:79:96:2d:dd:e4:36:47:7f:fd:c7:65:cb:c5:82:1d:83:cb:
         b0:7f:96:3a:02:57:34:06:71:7d:de:e7:ca:e6:f1:90:56:b2:
         38:a9:9c:3d:70:a5:53:b0:00:94:35:e3:e1:b4:f0:15:24:9d:
         e5:d1:2b:83:fc:b4:2a:78:47:5c:97:52:28:32:8d:18:22:85:
         46:0d:e2:ca:70:c9:57:7e:86:1f:e3:8d:25:ff:3e:84:03:ca:
         51:4c:00:d2
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEH4GYs8nvQ4lF/a0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0OTMz
YWU1MB4XDTIzMDUyMjE5MzAxNloXDTI1MDgyNDE5MzAxNlowLzEtMCsGA1UEAxMk
ZTYwMWI2OTQtNjI0Mi00YjFjLWE4NDEtZDBhNzIxNGNkOWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbeatwRGn+m+LpjeVWMwsciUxnQyiyCBLOk1
eI/M8MOMTaLxDXAuTV8RxKOY5NCBfVhUMFL1fqyO8BrM0AcXEv+umqey/g/nL7YM
MCo7oo0EH7bfZMxGrzuJHp3nwDrYOJbvz5mlLzfUoYdCULGtXQKgsUB4RH5/TQTS
Z0XZx8kJk4bVd2XgyVSyDrZZ+VAMBxI0RG3CTfkXQEcXjk66eYRMyV6KRZ5cSUrH
1qICkYLfI5lSaJz27s4BMQ5IYtc2yZ5Jk/AIl4HuTVZFlmHC5xKOQF5EJUyqouUw
iAKll7fiAwrqUgMjHlI31iaAN5u7rcyxBsNX265aygOyxJCSMwIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFJZ6pjsu06plRAt+i/VLuvHtlVAHMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9l
NjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0Y2Q5YzcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2It
YjNjYy00YjAzLWJkYTctMWJlMjA0OTMzYWU1L2U2MDFiNjk0LTYyNDItNGIxYy1h
ODQxLWQwYTcyMTRjZDljNy9lNjAxYjY5NC02MjQyLTRiMWMtYTg0MS1kMGE3MjE0
Y2Q5YzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQy
MGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hNzM0MjBjYi1iM2NjLTRi
MDMtYmRhNy0xYmUyMDQ5MzNhZTUuY3JsMB8GA1UdIwQYMBaAFFBlp/QkftKhOvtn
6GMfjAW2vWEkMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3
MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS5jZXIwKQYIKwYBBQUH
AQcBAf8EGjAYMBYEAgACMBADBQAmB/NoAwcAJiAAAAswMB8GCCsGAQUFBwEIAQH/
BBAwDqAMMAoCAwCA1gIDALb+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADqFZDb6hnP167qWK7BuRAZ2rqPy
xZ5vPMJKHbCBELHM8cPfSCLZ32lbS9VMfKZvsaqyOowmZ7NjphBr826VVahruhA+
1ZRCxosRTwfmtgu4VrlhfdOlG9/KMGr9dQ49Xs8mcKtxRLU7YVBLx/TBbnH/htTW
xXqsE7GkSnvik/+0giq744/RkH0FJyGxgX0TO9xXdVErHwu2Ux02YSnayigvox55
li3d5DZHf/3HZcvFgh2Dy7B/ljoCVzQGcX3e58rm8ZBWsjipnD1wpVOwAJQ14+G0
8BUkneXRK4P8tCp4R1yXUigyjRgihUYN4spwyVd+hh/jjSX/PoQDylFMANI=
-----END CERTIFICATE-----