Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103.cer
File:                     a8355b3e-327c-45f5-af94-a965911c3103.cer (raw, json)
Hash identifier:          E/jGiQw02spfMEqrnJIAwCK8BX6LHy2wRW16QI2Nh3s=
Subject key identifier:   DB:E9:94:34:6A:1B:51:8E:19:03:BE:F9:AE:F7:49:57:AD:82:8F:55
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285841E48355A14CD7C28A89FC8400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Thu 14 Aug 2025 19:06:39 +0000
Subordinate resources:    AS: 398551
                          IP: 199.181.82.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:55:a1:4c:d7:c2:8a:89:fc:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug 14 19:06:39 2025 GMT
        Subject: CN=a8355b3e-327c-45f5-af94-a965911c3103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:aa:67:cc:2c:f0:b1:06:2d:ab:7e:db:07:
                    50:8c:a6:7a:69:42:46:d8:e0:d8:59:f1:b2:6b:73:
                    6f:cb:ca:09:c5:c2:55:a8:8c:40:c5:35:23:65:69:
                    50:51:02:4c:47:69:e6:ab:b6:44:52:87:64:27:3d:
                    c2:e9:4a:95:eb:32:1b:2b:72:c7:83:13:d0:37:cd:
                    9b:e1:51:67:74:21:9c:2b:d8:12:f9:98:cf:63:10:
                    96:3c:a9:eb:17:ec:63:45:66:c8:c6:25:f9:27:a5:
                    17:9c:88:c6:75:c1:80:91:6d:c2:3a:b4:34:c6:a2:
                    1f:a4:9a:e8:31:c8:e7:d6:83:b3:fe:e6:3a:96:2f:
                    e4:9e:c4:39:13:01:b2:fb:c6:11:a4:69:e1:91:a5:
                    be:9d:24:d6:5f:d9:f8:a4:0c:ea:20:7e:ff:9f:5d:
                    6a:ba:37:50:43:19:31:0d:95:93:1a:92:04:d7:65:
                    5c:e0:58:1c:de:26:a4:35:eb:b8:0b:4e:12:76:7c:
                    62:21:c2:ff:77:85:d9:c7:4a:cd:6d:ae:83:13:e4:
                    80:05:55:04:c0:3d:a0:58:da:57:54:74:95:d0:60:
                    ac:70:0e:0d:98:f3:92:a3:d0:8a:39:38:49:1c:56:
                    2c:cf:bf:90:34:9d:41:fa:86:81:6f:2f:f6:16:6b:
                    ec:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E9:94:34:6A:1B:51:8E:19:03:BE:F9:AE:F7:49:57:AD:82:8F:55
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a8355b3e-327c-45f5-af94-a965911c3103/a8355b3e-327c-45f5-af94-a965911c3103.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.82.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398551

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f8:00:34:f0:39:ed:94:30:8d:a6:97:f4:07:dc:7e:77:e1:
         03:a8:81:e6:4a:bd:b3:e5:e9:7f:34:89:72:73:13:33:24:57:
         06:5b:79:2d:23:66:5d:79:b4:ec:8b:94:6c:2a:02:3b:47:25:
         44:ee:a2:70:65:f0:22:f5:2b:79:55:ad:5e:fb:c8:d8:57:e5:
         a4:72:ba:e2:b9:2c:d7:b0:1f:da:55:1c:e6:f2:11:c3:14:f9:
         81:3c:75:a5:a3:e8:cc:2d:b6:10:f0:86:6b:d8:c9:89:d4:e4:
         01:44:28:3f:0a:65:05:c4:a3:46:7d:6f:e9:37:46:16:bc:bb:
         6f:72:16:c2:45:f9:b2:8f:82:c7:67:65:ba:3f:26:73:62:61:
         72:6c:98:fc:3e:69:28:0b:17:27:93:f2:96:1b:92:2a:b1:c3:
         e7:cb:9e:0b:f0:6a:3f:d9:21:93:69:7b:a1:41:77:cb:20:ae:
         5f:07:f9:17:6a:29:b2:50:b0:65:9a:d2:d1:37:c3:3b:e2:84:
         d8:08:37:4c:8f:46:ec:63:6c:18:09:af:bf:24:18:59:cf:91:
         4f:61:f8:ce:bb:1b:2e:44:d4:67:5f:03:b7:10:24:08:40:a5:
         82:36:15:5f:0d:81:8f:28:0b:71:4a:ea:f4:58:07:6b:8f:8a:
         17:d9:4a:2b
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEHkg1WhTNfCion8hAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYz
MjIzMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgxNDE5MDYzOVowLzEtMCsGA1UEAxMk
YTgzNTViM2UtMzI3Yy00NWY1LWFmOTQtYTk2NTkxMWMzMTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh+qZ8ws8LEGLat+2wdQjKZ6aUJG2ODYWfGy
a3Nvy8oJxcJVqIxAxTUjZWlQUQJMR2nmq7ZEUodkJz3C6UqV6zIbK3LHgxPQN82b
4VFndCGcK9gS+ZjPYxCWPKnrF+xjRWbIxiX5J6UXnIjGdcGAkW3COrQ0xqIfpJro
Mcjn1oOz/uY6li/knsQ5EwGy+8YRpGnhkaW+nSTWX9n4pAzqIH7/n11qujdQQxkx
DZWTGpIE12Vc4Fgc3iakNeu4C04SdnxiIcL/d4XZx0rNba6DE+SABVUEwD2gWNpX
VHSV0GCscA4NmPOSo9CKOThJHFYsz7+QNJ1B+oaBby/2Fmvs4wIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFNvplDRqG1GOGQO++a73SVetgo9VMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9h
ODM1NWIzZS0zMjdjLTQ1ZjUtYWY5NC1hOTY1OTExYzMxMDMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMt
YTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzL2E4MzU1YjNlLTMyN2MtNDVmNS1h
Zjk0LWE5NjU5MTFjMzEwMy9hODM1NWIzZS0zMjdjLTQ1ZjUtYWY5NC1hOTY1OTEx
YzMxMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcy
NzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMzU3MjcyYy1hNzlhLTQ1
YmYtOTU4Ni05MmRkNDllZjMyMjMuY3JsMB8GA1UdIwQYMBaAFHx695x633xL6M6o
VG3zqmYgNdo6MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAz
NTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADHtVIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BhTXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHv4ADTwOe2UMI2ml/QH3H534QOogeZKvbPl6X80iXJzEzMk
VwZbeS0jZl15tOyLlGwqAjtHJUTuonBl8CL1K3lVrV77yNhX5aRyuuK5LNewH9pV
HObyEcMU+YE8daWj6MwtthDwhmvYyYnU5AFEKD8KZQXEo0Z9b+k3Rha8u29yFsJF
+bKPgsdnZbo/JnNiYXJsmPw+aSgLFyeT8pYbkiqxw+fLngvwaj/ZIZNpe6FBd8sg
rl8H+RdqKbJQsGWa0tE3wzvihNgIN0yPRuxjbBgJr78kGFnPkU9h+M67Gy5E1Gdf
A7cQJAhApYI2FV8NgY8oC3FK6vRYB2uPihfZSis=
-----END CERTIFICATE-----