Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a94b460-7441-495e-9358-475ea795ecc6.cer
File:                     0a94b460-7441-495e-9358-475ea795ecc6.cer (raw, json)
Hash identifier:          XOHTXkZGPSOMkqyP5BwGYN4UMbAy8U2jXdO9vKGeNJc=
Subject key identifier:   D6:BA:7E:33:55:B5:CB:F6:74:03:92:36:4C:A9:21:37:92:41:C0:27
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285842520BC556A4603E0EC9F05980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a94b460-7441-495e-9358-475ea795ecc6/0a94b460-7441-495e-9358-475ea795ecc6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a94b460-7441-495e-9358-475ea795ecc6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 24 Jun 2023 00:45:16 +0000
Certificate not after:    Fri 26 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 62935
                          IP: 204.9.40.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:52:0b:c5:56:a4:60:3e:0e:c9:f0:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 24 00:45:16 2023 GMT
            Not After : Sep 26 00:45:16 2025 GMT
        Subject: CN=0a94b460-7441-495e-9358-475ea795ecc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:60:28:d2:d6:03:5e:95:45:64:2c:af:ce:
                    6e:b3:f1:a9:87:f3:69:c3:4a:d7:6e:8d:19:8e:e6:
                    64:2a:8b:fb:7d:16:33:bd:2d:60:e9:f1:cb:47:0f:
                    0f:21:e0:45:64:4d:f4:e9:96:b1:14:cb:c6:a0:a2:
                    c2:6e:2f:6e:43:fe:e5:43:ee:1d:5e:bd:cd:21:a4:
                    8d:c4:9e:9c:e0:fb:6d:bb:d0:09:06:24:08:f8:4c:
                    92:93:b1:9b:b1:ae:c7:e9:a4:7f:29:b4:00:98:b7:
                    58:46:f1:60:8c:28:95:9f:cf:44:67:ce:48:83:15:
                    87:79:cb:34:d0:9e:87:ee:df:15:74:4b:85:67:34:
                    fd:ff:fe:d9:c7:80:f6:30:b2:f3:ff:2e:e9:3d:c1:
                    0c:7f:8f:3b:10:1a:d9:9a:1d:40:0c:e1:d6:b6:ab:
                    70:1d:d3:9f:da:52:66:f1:62:07:8b:ab:c3:90:9a:
                    27:dd:30:7b:bd:78:15:bd:e3:79:50:c7:e8:a2:0e:
                    ee:61:5a:65:a9:a0:38:71:1f:43:64:fa:0f:53:bf:
                    42:06:e7:4f:7f:eb:bf:db:e6:84:62:0b:e4:1e:e8:
                    97:94:5a:cb:f3:e5:10:0a:c1:3b:d5:e2:43:a5:f6:
                    ce:99:bc:2c:3c:0f:59:cb:82:06:59:30:c6:cb:33:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BA:7E:33:55:B5:CB:F6:74:03:92:36:4C:A9:21:37:92:41:C0:27
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a94b460-7441-495e-9358-475ea795ecc6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a94b460-7441-495e-9358-475ea795ecc6/0a94b460-7441-495e-9358-475ea795ecc6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.40.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62935

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:18:ac:99:a5:a3:e6:64:ea:8c:7d:be:3c:6f:9a:84:12:
         04:d8:03:82:c3:73:cd:a4:2c:a6:c3:f1:27:70:9f:c6:ab:9e:
         96:53:5e:13:9a:8c:c0:52:23:65:a6:2b:8b:1d:aa:ec:d2:db:
         97:28:2d:18:d7:20:b4:7b:d2:a3:4d:bd:0a:d8:5f:26:69:0a:
         c5:4f:cf:57:cc:aa:e7:bb:ce:51:cb:96:0a:fe:0e:d4:76:2c:
         70:81:c7:90:7a:33:f4:d0:c3:66:5d:fc:78:fa:a1:f5:d9:e7:
         63:2f:ce:36:9a:df:ba:c9:d1:64:c7:90:28:68:d2:88:83:b1:
         6d:28:ac:5e:3e:91:de:b7:a1:e5:87:a0:b2:ed:91:d8:5d:06:
         b5:d9:8c:54:c5:25:97:d0:29:a2:82:dc:cd:7c:f2:9d:ac:8e:
         60:42:46:d6:de:2b:37:80:86:3e:5f:3b:50:c4:b2:3f:47:d4:
         8c:04:07:5c:4e:1e:80:f8:9f:0b:fa:9b:f9:b8:c7:65:3f:f9:
         74:5e:3b:bf:a4:c7:49:42:05:b1:4a:36:60:7b:2a:55:e1:f4:
         07:ac:4c:11:04:f2:e6:27:ec:2d:91:00:d1:16:56:f1:26:d2:
         65:3a:95:8b:08:5a:d2:cc:90:ee:7d:39:93:cd:6c:b1:a0:1e:
         fa:a4:88:05
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEJSC8VWpGA+DsnwWYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDYyNDAwNDUxNloXDTI1MDkyNjAwNDUxNlowLzEtMCsGA1UEAxMk
MGE5NGI0NjAtNzQ0MS00OTVlLTkzNTgtNDc1ZWE3OTVlY2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA5gKNLWA16VRWQsr85us/Gph/Npw0rXbo0Z
juZkKov7fRYzvS1g6fHLRw8PIeBFZE306ZaxFMvGoKLCbi9uQ/7lQ+4dXr3NIaSN
xJ6c4Pttu9AJBiQI+EySk7Gbsa7H6aR/KbQAmLdYRvFgjCiVn89EZ85IgxWHecs0
0J6H7t8VdEuFZzT9//7Zx4D2MLLz/y7pPcEMf487EBrZmh1ADOHWtqtwHdOf2lJm
8WIHi6vDkJon3TB7vXgVveN5UMfoog7uYVplqaA4cR9DZPoPU79CBudPf+u/2+aE
YgvkHuiXlFrL8+UQCsE71eJDpfbOmbwsPA9Zy4IGWTDGyzNyUwIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFNa6fjNVtcv2dAOSNkypITeSQcAnMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8w
YTk0YjQ2MC03NDQxLTQ5NWUtOTM1OC00NzVlYTc5NWVjYzYvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzBhOTRiNDYwLTc0NDEtNDk1ZS05
MzU4LTQ3NWVhNzk1ZWNjNi8wYTk0YjQ2MC03NDQxLTQ5NWUtOTM1OC00NzVlYTc5
NWVjYzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPMCSgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
APXXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIPqGKyZpaPmZOqMfb48b5qEEgTYA4LDc82kLKbD8Sdwn8ar
npZTXhOajMBSI2WmK4sdquzS25coLRjXILR70qNNvQrYXyZpCsVPz1fMque7zlHL
lgr+DtR2LHCBx5B6M/TQw2Zd/Hj6ofXZ52Mvzjaa37rJ0WTHkCho0oiDsW0orF4+
kd63oeWHoLLtkdhdBrXZjFTFJZfQKaKC3M188p2sjmBCRtbeKzeAhj5fO1DEsj9H
1IwEB1xOHoD4nwv6m/m4x2U/+XReO7+kx0lCBbFKNmB7KlXh9AesTBEE8uYn7C2R
ANEWVvEm0mU6lYsIWtLMkO59OZPNbLGgHvqkiAU=
-----END CERTIFICATE-----