Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer
File:                     375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.cer (raw, json)
Hash identifier:          lRviy4xqg64yAsnTraUhP8JofIxW/LJ3AKVvDGWm32E=
Subject key identifier:   5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285841E48354A1F122E77DB35193C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Thu 07 Aug 2025 19:06:39 +0000
Subordinate resources:    AS: 393431
                          IP: 104.219.100.0/22
                          IP: 2620:80:c000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:54:a1:f1:22:e7:7d:b3:51:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Aug  7 19:06:39 2025 GMT
        Subject: CN=375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1c:02:eb:51:c3:93:c4:1d:50:7c:a2:84:26:
                    27:10:26:f0:2d:42:00:37:2e:9c:68:fd:8f:3f:26:
                    81:a0:68:67:2a:f2:4f:7b:10:48:24:c7:7e:a0:13:
                    33:a5:70:79:a2:2c:e7:e6:41:0e:77:bc:a2:bd:e1:
                    11:fd:d0:d8:72:a5:11:81:2e:4d:90:43:9c:44:b1:
                    0a:57:ac:20:d8:be:de:de:67:81:70:ee:14:04:de:
                    93:9a:b1:9e:ce:d2:71:7c:91:cd:b4:4e:d0:07:1c:
                    c9:51:71:b2:0a:f3:d4:28:7b:72:3a:ef:fd:0d:91:
                    17:2e:10:ec:7a:36:50:df:74:c3:69:68:9e:e9:d2:
                    50:03:9b:8f:0f:fb:e1:83:e9:a4:94:3f:67:fd:90:
                    79:c8:30:03:22:30:64:6a:aa:cf:df:ab:f6:5b:18:
                    6a:fc:f2:cf:71:16:1d:c6:04:f7:ee:d4:94:9d:b5:
                    c4:6b:68:81:c6:7a:1c:71:88:b6:45:0e:24:e9:fd:
                    7c:91:84:da:6e:4e:86:b9:aa:7c:4a:37:3a:1f:8a:
                    e2:f1:63:8f:c3:f9:d4:da:91:80:7a:76:0b:f4:89:
                    cc:6e:aa:8c:d2:37:c0:29:4a:8c:8e:02:f2:04:c0:
                    5d:13:e6:4b:22:f0:c5:8b:f4:d1:2c:74:05:12:3e:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:97:7B:A8:1E:1E:10:47:93:C3:C1:73:60:3E:59:CA:0F:95:EF:9F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4/375e9bf4-b6d8-423c-91eb-2cbf90b0d6e4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.100.0/22
                IPv6:
                  2620:80:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393431

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c9:ea:d2:41:1f:2d:ec:f6:22:a2:fb:07:e8:2d:e0:a2:c1:
         27:a6:b4:64:52:0d:41:b2:63:7a:e1:5a:d5:55:0c:fe:d2:d1:
         eb:67:52:c7:ae:38:c1:e2:d0:52:bd:aa:5f:d3:b5:af:fa:3f:
         be:00:1e:f0:3a:1c:17:b3:97:44:65:1b:c0:62:11:0e:12:6c:
         ee:9b:e0:62:6b:5e:56:29:ed:04:ca:bc:d1:e9:01:36:d1:1e:
         29:bb:1a:bf:86:09:d4:e0:bf:79:6f:2a:59:0b:85:7a:81:94:
         48:c2:37:e6:81:8c:88:df:8d:57:6a:9e:5d:84:f3:4c:da:04:
         b5:c6:22:24:c3:9e:39:b5:be:ab:6d:2c:ef:d8:c5:28:1e:d4:
         c0:56:e2:c4:ad:9e:52:63:ac:00:bd:3e:dd:69:27:e1:af:16:
         57:9a:f8:e3:8f:19:5b:90:2d:a1:0d:e0:22:04:7e:b1:1c:8d:
         05:29:2f:c8:be:4c:31:e3:50:43:bf:d5:bd:30:db:ba:7e:1f:
         1c:55:cf:46:17:2c:3b:8a:89:77:8a:68:da:96:1b:b4:03:9e:
         54:95:20:63:92:a5:7b:04:44:4f:dc:e7:32:81:59:f6:a2:c8:
         f4:07:9e:34:50:f0:fc:b9:8c:ce:c0:ee:80:22:13:8f:47:72:
         92:db:43:9f
-----BEGIN CERTIFICATE-----
MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEHkg1Sh8SLnfbNRk8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgwNzE5MDYzOVowLzEtMCsGA1UEAxMk
Mzc1ZTliZjQtYjZkOC00MjNjLTkxZWItMmNiZjkwYjBkNmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BwC61HDk8QdUHyihCYnECbwLUIANy6caP2P
PyaBoGhnKvJPexBIJMd+oBMzpXB5oizn5kEOd7yiveER/dDYcqURgS5NkEOcRLEK
V6wg2L7e3meBcO4UBN6TmrGeztJxfJHNtE7QBxzJUXGyCvPUKHtyOu/9DZEXLhDs
ejZQ33TDaWie6dJQA5uPD/vhg+mklD9n/ZB5yDADIjBkaqrP36v2Wxhq/PLPcRYd
xgT37tSUnbXEa2iBxnoccYi2RQ4k6f18kYTabk6Guap8Sjc6H4ri8WOPw/nU2pGA
enYL9InMbqqM0jfAKUqMjgLyBMBdE+ZLIvDFi/TRLHQFEj6y5QIDAQABo4IELDCC
BCgwHQYDVR0OBBYEFFqXe6geHhBHk8PBc2A+WcoPle+fMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z
NzVlOWJmNC1iNmQ4LTQyM2MtOTFlYi0yY2JmOTBiMGQ2ZTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzM3NWU5YmY0LWI2ZDgtNDIzYy05
MWViLTJjYmY5MGIwZDZlNC8zNzVlOWJmNC1iNmQ4LTQyM2MtOTFlYi0yY2JmOTBi
MGQ2ZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAJo22QwDwQCAAIwCQMHACYgAIDAADAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMGANcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATMnq0kEfLez2IqL7B+gt4KLB
J6a0ZFINQbJjeuFa1VUM/tLR62dSx644weLQUr2qX9O1r/o/vgAe8DocF7OXRGUb
wGIRDhJs7pvgYmteVintBMq80ekBNtEeKbsav4YJ1OC/eW8qWQuFeoGUSMI35oGM
iN+NV2qeXYTzTNoEtcYiJMOeObW+q20s79jFKB7UwFbixK2eUmOsAL0+3Wkn4a8W
V5r4448ZW5AtoQ3gIgR+sRyNBSkvyL5MMeNQQ7/VvTDbun4fHFXPRhcsO4qJd4po
2pYbtAOeVJUgY5KlewRET9znMoFZ9qLI9AeeNFDw/LmMzsDugCITj0dykttDnw==
-----END CERTIFICATE-----