Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cbe1a77-a61f-4d32-baf3-519041b125fe.cer
File:                     3cbe1a77-a61f-4d32-baf3-519041b125fe.cer (raw, json)
Hash identifier:          wVozqXku1++oLOIHv2maZeDu4/gHCr90VFA4tHEyqWM=
Subject key identifier:   46:49:CF:0E:5B:18:07:7C:A6:0A:B0:AC:33:C3:6C:78:36:56:5F:3A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584249C0E69B4A8A6FD376BFFBC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cbe1a77-a61f-4d32-baf3-519041b125fe/3cbe1a77-a61f-4d32-baf3-519041b125fe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cbe1a77-a61f-4d32-baf3-519041b125fe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Jun 2023 01:27:57 +0000
Certificate not after:    Tue 23 Sep 2025 01:27:57 +0000
Subordinate resources:    AS: 40083

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:49:c0:e6:9b:4a:8a:6f:d3:76:bf:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jun 21 01:27:57 2023 GMT
            Not After : Sep 23 01:27:57 2025 GMT
        Subject: CN=3cbe1a77-a61f-4d32-baf3-519041b125fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:11:52:fa:57:da:8e:04:a1:a2:76:0b:7c:eb:
                    fb:18:3b:41:a9:bf:27:83:33:9c:bb:a3:7a:27:52:
                    ce:2e:00:04:ed:7a:a6:c7:89:b3:6f:ce:22:76:3b:
                    0e:46:6c:1e:ca:7b:2e:59:82:1b:d3:fc:5c:91:75:
                    02:87:43:33:db:b5:75:4f:08:4e:c5:93:7f:db:60:
                    74:96:8e:9b:d5:ca:9b:a6:1b:80:6b:1b:c3:65:27:
                    d2:61:e4:70:a9:af:a8:8c:ef:f2:b8:be:86:3d:a7:
                    39:03:cd:58:fd:75:63:10:90:0d:37:63:6a:71:e5:
                    6a:b5:37:36:56:11:46:ec:d2:f0:3a:46:07:ee:bd:
                    b9:1d:b7:85:f3:74:d3:83:62:88:5b:18:0b:99:2b:
                    42:1d:7f:10:8a:9b:90:f9:c6:ac:c9:68:89:80:e0:
                    ad:4d:88:85:a8:21:d8:bc:e0:97:0e:cf:5a:11:a4:
                    aa:ac:c1:53:7b:62:1a:9b:d0:81:36:c9:94:10:ca:
                    7d:ef:b8:49:cb:ef:d3:40:ac:37:d5:a1:1d:cb:51:
                    b1:38:02:60:93:b3:b0:ec:91:db:97:7c:cd:07:a5:
                    15:8a:1b:ab:10:ab:11:12:24:f4:aa:1e:11:45:99:
                    0e:02:b3:e1:89:17:29:88:f9:94:98:56:e8:86:63:
                    64:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:49:CF:0E:5B:18:07:7C:A6:0A:B0:AC:33:C3:6C:78:36:56:5F:3A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cbe1a77-a61f-4d32-baf3-519041b125fe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3cbe1a77-a61f-4d32-baf3-519041b125fe/3cbe1a77-a61f-4d32-baf3-519041b125fe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40083

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:af:f0:e8:2d:93:09:4d:52:ae:e8:d2:e4:a2:47:0a:62:
         e5:5e:96:55:53:b2:1d:6e:e9:5b:0e:c9:26:a6:12:5e:e2:3d:
         83:b4:ac:a2:6c:9a:a7:f0:2d:8a:3e:ea:dd:77:f9:28:85:5c:
         77:82:cb:46:35:1a:8d:b7:3f:0a:e7:51:86:aa:d6:16:48:7a:
         65:6a:17:58:b3:e7:fb:f3:28:b9:73:5c:db:2a:6f:2d:19:83:
         2e:5c:4f:97:28:2c:2e:dd:33:bb:4a:88:bb:39:dd:f1:84:cd:
         d4:aa:21:6f:db:da:d8:55:38:72:2f:e6:a5:09:36:7c:12:fc:
         9d:66:47:d8:70:5c:37:c0:9f:03:58:31:d8:f6:f2:a5:26:c5:
         e9:7c:49:5e:46:d5:a6:3a:79:e2:0a:39:6e:c7:15:e3:0c:1a:
         ce:b3:6c:d8:6b:ec:be:01:9c:de:81:1f:12:8c:13:36:56:43:
         db:6a:1c:1b:b3:51:b6:35:d8:d1:4c:84:aa:25:23:9b:bb:d8:
         07:31:b6:6e:f2:0d:99:56:b2:a3:53:ef:8e:d3:d0:43:36:3f:
         a9:32:0c:05:eb:41:48:56:d3:c1:7f:19:bf:86:5e:16:65:49:
         d2:e6:94:52:04:8a:3a:59:95:ab:c8:29:37:08:84:26:25:3e:
         78:d3:3e:b8
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEJJwOabSopv03a/+8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDYyMTAxMjc1N1oXDTI1MDkyMzAxMjc1N1owLzEtMCsGA1UEAxMk
M2NiZTFhNzctYTYxZi00ZDMyLWJhZjMtNTE5MDQxYjEyNWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhFS+lfajgShonYLfOv7GDtBqb8ngzOcu6N6
J1LOLgAE7Xqmx4mzb84idjsORmweynsuWYIb0/xckXUCh0Mz27V1TwhOxZN/22B0
lo6b1cqbphuAaxvDZSfSYeRwqa+ojO/yuL6GPac5A81Y/XVjEJANN2NqceVqtTc2
VhFG7NLwOkYH7r25HbeF83TTg2KIWxgLmStCHX8QipuQ+casyWiJgOCtTYiFqCHY
vOCXDs9aEaSqrMFTe2Iam9CBNsmUEMp977hJy+/TQKw31aEdy1GxOAJgk7Ow7JHb
l3zNB6UVihurEKsREiT0qh4RRZkOArPhiRcpiPmUmFbohmNkiQIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFEZJzw5bGAd8pgqwrDPDbHg2Vl86MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z
Y2JlMWE3Ny1hNjFmLTRkMzItYmFmMy01MTkwNDFiMTI1ZmUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzNjYmUxYTc3LWE2MWYtNGQzMi1i
YWYzLTUxOTA0MWIxMjVmZS8zY2JlMWE3Ny1hNjFmLTRkMzItYmFmMy01MTkwNDFi
MTI1ZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAJyTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAtKr/DoLZMJTVKu6NLkokcKYuVe
llVTsh1u6VsOySamEl7iPYO0rKJsmqfwLYo+6t13+SiFXHeCy0Y1Go23PwrnUYaq
1hZIemVqF1iz5/vzKLlzXNsqby0Zgy5cT5coLC7dM7tKiLs53fGEzdSqIW/b2thV
OHIv5qUJNnwS/J1mR9hwXDfAnwNYMdj28qUmxel8SV5G1aY6eeIKOW7HFeMMGs6z
bNhr7L4BnN6BHxKMEzZWQ9tqHBuzUbY12NFMhKolI5u72Acxtm7yDZlWsqNT747T
0EM2P6kyDAXrQUhW08F/Gb+GXhZlSdLmlFIEijpZlavIKTcIhCYlPnjTPrg=
-----END CERTIFICATE-----