Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685.cer
File:                     e351cae3-e8b7-49f3-8533-235870399685.cer (raw, json)
Hash identifier:          KLKKRr4ZntcgrUFW6BARrEBUwg7iNJHWs69qeHVcak8=
Subject key identifier:   AD:DB:F0:AA:10:93:79:6B:CC:26:CD:4B:0D:D9:78:D5:55:5C:A4:F8
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858427EB6B7765E0D991C53B80528
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/e351cae3-e8b7-49f3-8533-235870399685.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Jul 2023 00:45:16 +0000
Certificate not after:    Sun 12 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 22673
                          AS: 40903
                          IP: 198.252.160.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:7e:b6:b7:76:5e:0d:99:1c:53:b8:05:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jul 10 00:45:16 2023 GMT
            Not After : Oct 12 00:45:16 2025 GMT
        Subject: CN=e351cae3-e8b7-49f3-8533-235870399685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:17:01:5c:b5:3f:4a:c7:32:ae:14:d0:af:
                    1b:2c:d3:19:de:53:cf:a1:bb:c6:a7:01:a7:15:b0:
                    5d:95:e5:38:00:bf:90:74:b1:48:d9:66:2f:48:e1:
                    8d:fe:7a:5d:61:bc:a1:55:0b:89:dd:18:21:60:ec:
                    22:a0:e3:08:db:4c:fc:cb:f6:68:db:59:53:77:d3:
                    82:3a:e3:2d:fc:d0:e0:b1:4c:3d:94:16:bd:02:39:
                    46:73:3e:d8:4e:9f:a2:c5:c8:f0:7d:9d:c4:61:1f:
                    2c:1e:f3:c2:8a:7a:40:d3:37:83:78:d9:70:6b:1f:
                    e7:0b:54:04:36:31:d7:8e:31:21:f2:03:76:a9:34:
                    86:90:07:ef:01:cb:6f:f5:9b:32:3d:cc:d4:fb:ad:
                    bb:f0:70:30:12:42:a1:b3:9d:01:66:a9:32:cd:51:
                    3c:de:c7:13:62:20:b1:5a:42:a5:c9:9b:29:6e:55:
                    a2:60:b0:66:d0:d5:f5:02:a8:9d:ec:d3:75:36:e3:
                    12:a8:42:3a:78:ed:54:1b:02:f1:61:3c:fb:c4:71:
                    0b:1c:bf:14:12:6c:2f:7e:e4:8f:5e:dd:c1:b1:d8:
                    77:6b:c1:a1:a4:4c:36:bc:c1:1b:b9:f7:90:69:cd:
                    0a:de:d2:b5:fe:6c:0d:c9:e5:d9:c4:85:c3:20:ed:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DB:F0:AA:10:93:79:6B:CC:26:CD:4B:0D:D9:78:D5:55:5C:A4:F8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e351cae3-e8b7-49f3-8533-235870399685/e351cae3-e8b7-49f3-8533-235870399685.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.160.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22673
                  40903

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7d:bc:f2:74:72:cc:43:47:9a:11:04:c8:ba:c6:25:b9:56:
         33:ea:e8:25:93:01:62:69:9c:80:28:9e:fc:02:db:ea:3f:82:
         17:cc:4b:5a:ba:c5:f7:3d:e3:c5:07:df:a3:10:08:48:46:f9:
         18:12:ae:85:c3:8d:68:cd:5c:4d:77:a2:f1:95:8f:6b:4b:66:
         93:08:13:69:be:a5:ac:5b:4d:3b:5b:3e:97:e8:55:32:53:d5:
         e7:ae:34:c0:e5:7b:92:5f:67:c2:47:34:74:9b:86:4d:97:02:
         f4:fc:aa:55:39:3e:29:c2:3d:50:e6:63:3a:28:ed:62:2d:40:
         31:1a:a8:b9:09:91:c0:08:7c:90:5d:91:23:7c:5e:14:4c:5f:
         77:1d:58:bf:8f:0b:ce:28:63:c9:37:c5:8e:75:03:69:e6:08:
         a9:14:3a:9c:8b:ce:65:59:aa:95:03:5b:0d:8c:de:73:30:07:
         c1:f6:e6:f0:be:fd:44:82:d0:eb:96:26:00:e3:49:c7:f9:7d:
         de:74:ec:9e:c1:e0:f2:77:42:3e:d2:b4:e4:c7:18:c0:24:84:
         72:ab:24:6f:22:b1:c5:46:a4:b2:34:70:00:8f:c6:a0:4f:c3:
         ce:12:95:4f:72:93:9a:6f:d2:6a:c2:60:58:de:3a:82:79:a2:
         c3:f6:7c:68
-----BEGIN CERTIFICATE-----
MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEJ+trd2Xg2ZHFO4BSgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5
OWIyMB4XDTIzMDcxMDAwNDUxNloXDTI1MTAxMjAwNDUxNlowLzEtMCsGA1UEAxMk
ZTM1MWNhZTMtZThiNy00OWYzLTg1MzMtMjM1ODcwMzk5Njg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bQXAVy1P0rHMq4U0K8bLNMZ3lPPobvGpwGn
FbBdleU4AL+QdLFI2WYvSOGN/npdYbyhVQuJ3RghYOwioOMI20z8y/Zo21lTd9OC
OuMt/NDgsUw9lBa9AjlGcz7YTp+ixcjwfZ3EYR8sHvPCinpA0zeDeNlwax/nC1QE
NjHXjjEh8gN2qTSGkAfvActv9ZsyPczU+6278HAwEkKhs50BZqkyzVE83scTYiCx
WkKlyZspblWiYLBm0NX1Aqid7NN1NuMSqEI6eO1UGwLxYTz7xHELHL8UEmwvfuSP
Xt3Bsdh3a8GhpEw2vMEbufeQac0K3tK1/mwNyeXZxIXDIO1nyQIDAQABo4IEHzCC
BBswHQYDVR0OBBYEFK3b8KoQk3lrzCbNSw3ZeNVVXKT4MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9l
MzUxY2FlMy1lOGI3LTQ5ZjMtODUzMy0yMzU4NzAzOTk2ODUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct
MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2UzNTFjYWUzLWU4YjctNDlmMy04
NTMzLTIzNTg3MDM5OTY4NS9lMzUxY2FlMy1lOGI3LTQ5ZjMtODUzMy0yMzU4NzAz
OTk2ODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2
OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh
NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK
loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh
MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADG/KAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC
WJECAwCfxzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQBXfbzydHLMQ0eaEQTIusYluVYz6uglkwFiaZyAKJ78
AtvqP4IXzEtausX3PePFB9+jEAhIRvkYEq6Fw41ozVxNd6LxlY9rS2aTCBNpvqWs
W007Wz6X6FUyU9XnrjTA5XuSX2fCRzR0m4ZNlwL0/KpVOT4pwj1Q5mM6KO1iLUAx
Gqi5CZHACHyQXZEjfF4UTF93HVi/jwvOKGPJN8WOdQNp5gipFDqci85lWaqVA1sN
jN5zMAfB9ubwvv1EgtDrliYA40nH+X3edOyeweDyd0I+0rTkxxjAJIRyqyRvIrHF
RqSyNHAAj8agT8POEpVPcpOab9JqwmBY3jqCeaLD9nxo
-----END CERTIFICATE-----