Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839.cer
File:                     86b37376-2d1b-4536-b941-7858431c5839.cer (raw, json)
Hash identifier:          I83NngqXHZMq2JUzLvnPAZUC73/2BrYlqjabQXVNnZQ=
Subject key identifier:   FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858457E70DE4B2753CFBCD44F1280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Apr 2024 00:45:20 +0000
Certificate not after:    Tue 14 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 23011
                          AS: 30115
                          AS: 62942
                          AS: 63225
                          AS: 398955
                          IP: 104.166.96.0/23
                          IP: 162.251.180.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7e:70:de:4b:27:53:cf:bc:d4:4f:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Apr 10 00:45:20 2024 GMT
            Not After : Jul 14 00:45:20 2026 GMT
        Subject: CN=86b37376-2d1b-4536-b941-7858431c5839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ef:e8:bb:87:72:59:a6:dd:9e:24:c0:d6:a0:
                    3d:63:63:1a:47:f6:0a:13:55:8e:88:19:db:01:5f:
                    32:bf:ed:db:ef:f5:af:88:41:24:f0:60:0f:98:30:
                    8f:48:f4:cd:d2:49:3a:d2:42:e7:9a:4a:43:7f:eb:
                    d7:a5:fb:84:f7:89:1b:44:84:94:71:ab:2e:d9:83:
                    36:35:7d:5c:92:bd:f9:82:99:d3:a8:4c:b7:ab:51:
                    de:f1:21:89:33:7d:fd:f7:1e:f0:9a:5e:94:b4:94:
                    5a:89:7b:4f:2b:d8:46:d0:eb:b2:71:0d:d4:c7:29:
                    d6:9a:e4:ab:2d:bb:ce:70:b3:cf:65:9b:3b:05:cd:
                    bc:96:ae:ed:33:50:c1:c6:00:3b:32:75:12:09:fb:
                    95:41:10:ac:99:88:ec:91:1c:2b:6a:f8:38:87:ee:
                    12:c0:70:53:75:0a:e6:0e:52:fa:ea:09:42:87:9e:
                    50:f3:c6:3d:b3:36:28:54:29:78:7b:a7:ca:6d:ca:
                    e9:fd:ba:df:d2:1f:cc:d5:47:5a:4c:43:6e:0f:0c:
                    00:0e:1f:73:19:89:0f:9b:6b:94:57:66:86:d6:13:
                    00:bd:64:ad:30:fe:ac:fe:38:9b:5a:a3:c8:3c:d7:
                    14:f7:c1:e3:f7:ce:84:df:5c:e4:90:cb:fd:5b:fe:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:97:AA:CF:A2:57:CE:A4:3D:A1:83:E0:C9:F7:BE:C9:16:A0:89:8C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/86b37376-2d1b-4536-b941-7858431c5839/86b37376-2d1b-4536-b941-7858431c5839.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.96.0/23
                  162.251.180.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23011
                  30115
                  62942
                  63225
                  398955

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:f2:f0:a5:0f:c5:ab:e6:06:81:56:ce:02:55:ee:5c:86:f5:
         ba:e6:a7:3f:d1:51:56:f3:80:68:6b:a6:a7:fe:68:cb:25:f7:
         d4:cf:37:46:41:e5:1c:45:53:1a:fd:5a:c5:9e:2f:85:92:64:
         5b:23:d8:e9:94:96:46:d9:36:fd:c3:5c:76:57:8f:83:e1:e5:
         09:fa:d6:27:06:ed:ee:41:03:98:3e:40:45:d5:50:5d:69:de:
         cc:78:aa:14:0e:4b:09:27:44:8d:4f:18:96:36:18:98:d8:be:
         38:2b:35:83:d8:2e:5f:43:ba:ff:ff:bf:31:a2:57:d0:68:c6:
         54:3b:3d:cf:4a:71:1d:2a:cb:d5:a1:00:5d:a5:48:f8:01:e2:
         66:db:95:2a:d6:15:b6:f4:21:68:0c:5b:9b:60:82:5f:64:2d:
         ed:02:b8:03:9b:cf:79:f7:45:60:60:03:e0:30:2e:4e:33:18:
         22:f4:96:d1:53:5d:0e:e4:20:8d:12:4b:a4:3f:2b:5f:89:4c:
         e4:23:46:43:9f:92:ca:ec:8e:1b:05:3c:00:88:0d:29:ac:36:
         7f:85:fc:12:da:cd:93:33:5e:39:90:ae:c3:23:6f:ef:b5:19:
         db:1c:6a:04:71:06:e1:21:b1:f8:ed:ad:84:be:5e:58:17:c8:
         40:51:b1:86
-----BEGIN CERTIFICATE-----
MIIHITCCBgmgAwIBAgIUAQ0Mn0MoWEV+cN5LJ1PPvNRPEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTI0MDQxMDAwNDUyMFoXDTI2MDcxNDAwNDUyMFowLzEtMCsGA1UEAxMk
ODZiMzczNzYtMmQxYi00NTM2LWI5NDEtNzg1ODQzMWM1ODM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+/ou4dyWabdniTA1qA9Y2MaR/YKE1WOiBnb
AV8yv+3b7/WviEEk8GAPmDCPSPTN0kk60kLnmkpDf+vXpfuE94kbRISUcasu2YM2
NX1ckr35gpnTqEy3q1He8SGJM3399x7wml6UtJRaiXtPK9hG0OuycQ3UxynWmuSr
LbvOcLPPZZs7Bc28lq7tM1DBxgA7MnUSCfuVQRCsmYjskRwravg4h+4SwHBTdQrm
DlL66glCh55Q88Y9szYoVCl4e6fKbcrp/brf0h/M1UdaTENuDwwADh9zGYkPm2uU
V2aG1hMAvWStMP6s/jibWqPIPNcU98Hj986E31zkkMv9W/4tcQIDAQABo4IEMzCC
BC8wHQYDVR0OBBYEFP2Xqs+iV86kPaGD4Mn3vskWoImMMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84
NmIzNzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4NDMxYzU4MzkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzg2YjM3Mzc2LTJkMWItNDUzNi1i
OTQxLTc4NTg0MzFjNTgzOS84NmIzNzM3Ni0yZDFiLTQ1MzYtYjk0MS03ODU4NDMx
YzU4MzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBAFopmADBAKi+7QwLAYIKwYBBQUHAQgBAf8EHTAb
oBkwFwICWeMCAnWjAgMA9d4CAwD2+QIDBhZrMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFXy8KUPxavmBoFW
zgJV7lyG9brmpz/RUVbzgGhrpqf+aMsl99TPN0ZB5RxFUxr9WsWeL4WSZFsj2OmU
lkbZNv3DXHZXj4Ph5Qn61icG7e5BA5g+QEXVUF1p3sx4qhQOSwknRI1PGJY2GJjY
vjgrNYPYLl9Duv//vzGiV9BoxlQ7Pc9KcR0qy9WhAF2lSPgB4mbblSrWFbb0IWgM
W5tggl9kLe0CuAObz3n3RWBgA+AwLk4zGCL0ltFTXQ7kII0SS6Q/K1+JTOQjRkOf
ksrsjhsFPACIDSmsNn+F/BLazZMzXjmQrsMjb++1GdscagRxBuEhsfjtrYS+XlgX
yEBRsYY=
-----END CERTIFICATE-----