Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2.cer
File:                     2b3c022e-4679-4530-ad3a-1df3041efdd2.cer (raw, json)
Hash identifier:          phSNxa5bqUumwTSmOw3nKh+OG1yL5aCGI4bdmtyeMDE=
Subject key identifier:   FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285844F02DC26C491C19B7E20EDD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 19 Feb 2024 01:45:20 +0000
Certificate not after:    Sun 24 May 2026 00:45:20 +0000
Subordinate resources:    AS: 31866
                          AS: 36856
                          AS: 53371
                          AS: 395602
                          AS: 395606
                          AS: 395622
                          AS: 395639
                          AS: 395642
                          IP: 63.245.208.0/20
                          IP: 2620:101:8000::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:2d:c2:6c:49:1c:19:b7:e2:0e:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 19 01:45:20 2024 GMT
            Not After : May 24 00:45:20 2026 GMT
        Subject: CN=2b3c022e-4679-4530-ad3a-1df3041efdd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:b5:3a:56:e6:87:61:b9:35:80:6e:95:10:
                    b2:70:10:5d:cf:3b:5f:5c:8e:c1:77:e0:2c:19:c2:
                    7a:6e:a3:8c:1d:64:d7:ce:9f:5d:4f:da:0a:68:0c:
                    08:17:ad:60:1c:35:9e:ef:ea:8c:fd:4e:c2:93:4d:
                    18:f1:83:02:84:f1:b0:56:fb:f7:bb:19:3e:17:09:
                    48:82:e9:8b:40:55:6c:da:aa:f2:15:b5:19:5c:94:
                    ef:24:cf:32:d7:1f:ed:26:58:0a:05:21:8f:f2:54:
                    b3:0d:3e:c6:c7:80:61:10:39:9f:53:08:13:0c:5c:
                    f4:fc:2e:71:a2:25:89:f9:df:aa:c8:7f:6b:c5:22:
                    d3:ba:70:63:4e:73:4a:ec:3c:7c:38:ff:21:5d:8f:
                    72:e1:d4:46:29:c7:bc:05:6f:92:15:09:b3:33:ee:
                    c0:75:1b:e0:e9:c6:eb:aa:07:9a:44:a3:1c:ff:19:
                    8f:46:23:d2:77:ea:93:ab:63:c6:29:45:c3:e5:40:
                    5a:3e:8e:cd:38:13:3f:8a:d7:c9:f3:b7:d0:14:37:
                    ba:a1:6b:41:52:89:83:71:50:6c:e7:74:4a:f0:0b:
                    1e:17:60:05:69:e0:22:b9:52:64:4f:df:fa:9a:2a:
                    13:12:8a:78:d3:1c:e5:96:97:58:16:17:91:7d:97:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C8:AB:1C:76:C7:3A:F5:45:0F:87:45:C2:CB:BC:0D:3E:BC:F5:5E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b3c022e-4679-4530-ad3a-1df3041efdd2/2b3c022e-4679-4530-ad3a-1df3041efdd2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.208.0/20
                IPv6:
                  2620:101:8000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31866
                  36856
                  53371
                  395602
                  395606
                  395622
                  395639
                  395642

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:09:9d:34:db:51:10:ea:43:f7:16:09:e2:63:5f:e0:64:bc:
         5b:ed:dd:9a:93:e6:2e:82:b8:0a:68:12:12:2e:88:dd:1b:14:
         07:c2:25:97:13:93:5f:57:9c:bc:34:db:2e:ef:c5:e9:2b:6e:
         f5:85:83:82:51:bf:a2:5c:30:94:d6:bb:f7:81:39:1b:db:72:
         f7:3d:4d:90:60:9d:2f:8f:4b:6d:12:9c:c1:3d:16:9b:2a:9c:
         1e:d2:c0:c7:1a:5e:27:f0:25:05:63:02:46:1e:01:e9:8a:c0:
         3a:bb:45:0a:05:36:44:bc:52:d4:cc:be:3d:e0:5a:c7:d3:83:
         af:14:3a:55:77:fe:8d:55:64:f7:5e:93:28:98:61:67:82:57:
         b3:ef:e4:db:34:95:93:ad:29:1a:4a:4b:ea:7c:4c:d2:e9:44:
         4e:2f:f5:5a:21:84:ac:ed:98:99:21:e2:7b:09:67:30:7c:bc:
         54:54:d4:88:46:3e:77:18:50:37:68:6c:d2:d9:aa:ca:be:dc:
         0f:16:05:0c:5c:39:b6:0e:09:87:ab:32:cc:f3:4f:25:cb:94:
         99:78:ec:1b:f1:d6:30:fc:a0:c2:f1:0c:be:0b:30:ec:38:65:
         55:69:fa:be:6f:4b:01:1e:cd:14:c7:a4:ac:2e:d7:54:51:7d:
         21:5a:6d:0c
-----BEGIN CERTIFICATE-----
MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWETwLcJsSRwZt+IO3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTI0MDIxOTAxNDUyMFoXDTI2MDUyNDAwNDUyMFowLzEtMCsGA1UEAxMk
MmIzYzAyMmUtNDY3OS00NTMwLWFkM2EtMWRmMzA0MWVmZGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgO1Olbmh2G5NYBulRCycBBdzztfXI7Bd+As
GcJ6bqOMHWTXzp9dT9oKaAwIF61gHDWe7+qM/U7Ck00Y8YMChPGwVvv3uxk+FwlI
gumLQFVs2qryFbUZXJTvJM8y1x/tJlgKBSGP8lSzDT7Gx4BhEDmfUwgTDFz0/C5x
oiWJ+d+qyH9rxSLTunBjTnNK7Dx8OP8hXY9y4dRGKce8BW+SFQmzM+7AdRvg6cbr
qgeaRKMc/xmPRiPSd+qTq2PGKUXD5UBaPo7NOBM/itfJ87fQFDe6oWtBUomDcVBs
53RK8AseF2AFaeAiuVJkT9/6mioTEop40xzllpdYFheRfZc7GwIDAQABo4IETTCC
BEkwHQYDVR0OBBYEFP7Iqxx2xzr1RQ+HRcLLvA0+vPVeMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8y
YjNjMDIyZS00Njc5LTQ1MzAtYWQzYS0xZGYzMDQxZWZkZDIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzJiM2MwMjJlLTQ2NzktNDUzMC1h
ZDNhLTFkZjMwNDFlZmRkMi8yYjNjMDIyZS00Njc5LTQ1MzAtYWQzYS0xZGYzMDQx
ZWZkZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAQ/9dAwDgQCAAIwCAMGACYgAQGAMDwGCCsGAQUF
BwEIAQH/BC0wK6ApMCcCAnx6AgMAj/gCAwDQewIDBglSAgMGCVYCAwYJZgIDBgl3
AgMGCXowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEApQmdNNtREOpD9xYJ4mNf4GS8W+3dmpPmLoK4CmgSEi6I
3RsUB8IllxOTX1ecvDTbLu/F6Stu9YWDglG/olwwlNa794E5G9ty9z1NkGCdL49L
bRKcwT0WmyqcHtLAxxpeJ/AlBWMCRh4B6YrAOrtFCgU2RLxS1My+PeBax9ODrxQ6
VXf+jVVk916TKJhhZ4JXs+/k2zSVk60pGkpL6nxM0ulETi/1WiGErO2YmSHiewln
MHy8VFTUiEY+dxhQN2hs0tmqyr7cDxYFDFw5tg4Jh6syzPNPJcuUmXjsG/HWMPyg
wvEMvgsw7DhlVWn6vm9LAR7NFMekrC7XVFF9IVptDA==
-----END CERTIFICATE-----