Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f3699a0-fc4a-44bd-beb3-a374427cf3b1.cer
File:                     9f3699a0-fc4a-44bd-beb3-a374427cf3b1.cer (raw, json)
Hash identifier:          yySpenBz70y1XfOt2XqANVfZeUtwAyYV4Uck+ea2SP4=
Subject key identifier:   0D:37:BF:80:3C:3F:06:BB:BA:D5:11:4C:E2:F1:B1:14:E7:59:A9:9E
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16ECD4B1E5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f3699a0-fc4a-44bd-beb3-a374427cf3b1/9f3699a0-fc4a-44bd-beb3-a374427cf3b1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f3699a0-fc4a-44bd-beb3-a374427cf3b1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Dec 2016 11:41:52 +0000
Certificate not after:    Tue 15 Dec 2026 11:41:52 +0000
Subordinate resources:    AS: 13629
                          IP: 208.94.216.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Jul 2023 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4b:1e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Dec 15 11:41:52 2016 GMT
            Not After : Dec 15 11:41:52 2026 GMT
        Subject: CN=9f3699a0-fc4a-44bd-beb3-a374427cf3b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:6c:3c:bd:a8:e3:04:d8:cc:25:b0:20:c4:
                    e7:a3:94:5a:0c:57:fb:c2:c2:d6:39:2e:65:cc:ea:
                    2b:6e:e9:df:d5:58:d1:f2:d7:3f:27:57:f0:32:59:
                    d7:fa:4e:f2:69:f1:69:3c:66:dd:8e:24:8a:0d:62:
                    bb:17:a6:9a:d9:7c:22:16:2c:66:34:51:bd:00:bf:
                    71:a2:b6:66:28:68:4a:6e:73:d2:a8:1d:5b:5b:a7:
                    b3:10:e5:8e:92:9c:af:42:5a:18:73:01:37:6d:b1:
                    1a:3d:4f:07:50:54:07:36:33:82:4a:31:86:22:64:
                    e8:62:22:42:eb:9f:4d:e6:48:71:7c:6c:ee:91:a6:
                    fd:0a:40:6b:df:b7:8c:e7:e7:ad:9b:02:bd:00:4d:
                    d6:cb:77:c5:61:b2:69:7d:01:43:9b:f4:5f:57:35:
                    41:11:ce:5f:d2:91:54:d9:5a:36:1e:63:df:1a:c6:
                    91:86:54:22:ae:62:da:25:62:ac:54:b2:a4:62:84:
                    06:62:6e:ef:e0:3c:c7:40:31:ea:af:68:76:df:ac:
                    2a:90:b5:99:89:94:b4:b3:13:78:af:c3:d2:d3:4d:
                    bf:27:da:4e:6a:5e:19:65:76:2b:08:52:f0:a7:f5:
                    49:f3:9d:12:19:50:84:cf:5c:28:19:53:9a:07:10:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:37:BF:80:3C:3F:06:BB:BA:D5:11:4C:E2:F1:B1:14:E7:59:A9:9E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f3699a0-fc4a-44bd-beb3-a374427cf3b1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9f3699a0-fc4a-44bd-beb3-a374427cf3b1/9f3699a0-fc4a-44bd-beb3-a374427cf3b1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.216.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13629

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:75:dd:77:af:2f:6e:ee:76:ef:17:e2:72:cf:26:91:6a:c9:
         c6:09:60:8d:c4:9a:ac:d4:03:11:80:15:f5:02:8f:09:01:69:
         34:ab:cf:85:31:2f:7c:34:3e:20:ae:ce:ec:1b:77:6e:81:5f:
         bf:f5:df:18:c2:94:9c:be:4c:01:5a:16:2d:53:38:bc:e1:5e:
         11:0c:4e:7f:99:4e:53:a4:44:10:30:de:8a:dd:32:b6:92:b8:
         ab:5b:cb:65:42:6c:82:b7:b3:5a:0f:20:e1:e3:a4:3c:ab:6b:
         02:02:fa:49:5f:67:6b:4a:f5:1e:43:67:84:10:dc:00:5a:1b:
         87:9d:18:80:aa:5a:c5:5d:08:c1:3f:64:9c:3d:e2:00:b7:55:
         ad:bc:58:d0:69:4b:ca:35:cf:fe:d0:65:dc:bf:45:66:37:35:
         6a:a3:ed:df:e3:3f:6b:df:ce:cc:b4:96:f0:ed:e8:53:1f:c3:
         a8:8a:93:d7:df:2c:f3:cd:8f:63:1d:ea:75:1c:c5:c7:e7:f8:
         4c:b9:20:80:de:c0:d3:dd:e4:f8:73:7a:ef:21:42:d3:85:92:
         d2:e9:6d:b9:2d:10:59:86:47:31:32:e5:e4:4b:2b:59:c2:9e:
         a5:52:51:b2:4c:42:63:de:d1:30:2f:25:ed:8d:5b:75:ed:af:
         8f:26:89:8d
-----BEGIN CERTIFICATE-----
MIIHBDCCBe6gAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbs1LHl0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTli
MjAeFw0xNjEyMTUxMTQxNTJaFw0yNjEyMTUxMTQxNTJaMC8xLTArBgNVBAMTJDlm
MzY5OWEwLWZjNGEtNDRiZC1iZWIzLWEzNzQ0MjdjZjNiMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALctbDy9qOME2MwlsCDE56OUWgxX+8LC1jkuZczq
K27p39VY0fLXPydX8DJZ1/pO8mnxaTxm3Y4kig1iuxemmtl8IhYsZjRRvQC/caK2
ZihoSm5z0qgdW1unsxDljpKcr0JaGHMBN22xGj1PB1BUBzYzgkoxhiJk6GIiQuuf
TeZIcXxs7pGm/QpAa9+3jOfnrZsCvQBN1st3xWGyaX0BQ5v0X1c1QRHOX9KRVNla
Nh5j3xrGkYZUIq5i2iVirFSypGKEBmJu7+A8x0Ax6q9odt+sKpC1mYmUtLMTeK/D
0tNNvyfaTmpeGWV2KwhS8Kf1SfOdEhlQhM9cKBlTmgcQ9Z0CAwEAAaOCBBowggQW
MB0GA1UdDgQWBBQNN7+APD8Gu7rVEUzi8bEU51mpnjCCAcgGCCsGAQUFBwELBIIB
ujCCAbYwgaoGCCsGAQUFBzAFhoGdcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z
aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk
YTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWYz
Njk5YTAtZmM0YS00NGJkLWJlYjMtYTM3NDQyN2NmM2IxLzCB0gYIKwYBBQUHMAqG
gcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEv
NWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJk
NjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZjM2OTlhMC1mYzRhLTQ0YmQtYmVi
My1hMzc0NDI3Y2YzYjEvOWYzNjk5YTAtZmM0YS00NGJkLWJlYjMtYTM3NDQyN2Nm
M2IxLm1mdDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLmFyaW4ubmV0L25vdGlm
aWNhdGlvbi54bWwwDwYDVR0TAQH/BAUwAwEB/zCBtwYDVR0fBIGvMIGsMIGpoIGm
oIGjhoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp
LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0
Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmEyNDY5NDctMmQ2Mi00YTZj
LWJhMDUtODcxODdmMDA5OWIyLmNybDAfBgNVHSMEGDAWgBTInVpFZBpr0iP6ypaC
MI7W0natfDAOBgNVHQ8BAf8EBAMCAQYwgZoGCCsGAQUFBwEBBIGNMIGKMIGHBggr
BgEFBQcwAoZ7cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1y
cGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0
Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIuY2VyMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQD0F7YMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjU9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcN
AQELA4IBAQCDdd13ry9u7nbvF+JyzyaRasnGCWCNxJqs1AMRgBX1Ao8JAWk0q8+F
MS98ND4grs7sG3dugV+/9d8YwpScvkwBWhYtUzi84V4RDE5/mU5TpEQQMN6K3TK2
krirW8tlQmyCt7NaDyDh46Q8q2sCAvpJX2drSvUeQ2eEENwAWhuHnRiAqlrFXQjB
P2ScPeIAt1WtvFjQaUvKNc/+0GXcv0VmNzVqo+3f4z9r387MtJbw7ehTH8OoipPX
3yzzzY9jHep1HMXH5/hMuSCA3sDT3eT4c3rvIULThZLS6W25LRBZhkcxMuXkSytZ
wp6lUlGyTEJj3tEwLyXtjVt17a+PJomN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:23 2023 by rpki-client on console-ams.rpki-client.org