Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee.cer
File:                     e1244068-c968-4296-891d-ffade60c06ee.cer (raw, json)
Hash identifier:          FFE4Lxw6/qQW03G93x6VOBUju5PNCbzzcmrL2ibzKZo=
Subject key identifier:   12:D0:A8:1B:ED:15:C2:E9:1F:03:D1:EA:57:63:09:94:13:E6:E9:6B
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285843F4EC275838EBEFE53E4B2700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/e1244068-c968-4296-891d-ffade60c06ee.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Nov 2023 01:45:15 +0000
Certificate not after:    Mon 23 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 400609
                          IP: 110.44.6.0/24
                          IP: 2607:58c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f4:ec:27:58:38:eb:ef:e5:3e:4b:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 21 01:45:15 2023 GMT
            Not After : Feb 23 01:45:15 2026 GMT
        Subject: CN=e1244068-c968-4296-891d-ffade60c06ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9b:bd:82:e1:3b:fe:9e:5f:5e:90:24:a2:49:
                    ba:5d:22:02:65:cb:cc:90:52:6e:f2:3b:0e:c9:da:
                    6f:e1:5f:c8:5f:5e:26:7e:13:9b:99:fe:ef:45:ca:
                    22:33:cc:e1:1b:dc:07:7e:c7:ef:60:13:7a:2b:ca:
                    16:2e:96:0a:a6:47:21:a0:e0:56:6f:a1:44:21:8b:
                    f8:aa:ab:fd:27:56:e6:fa:b5:44:dc:eb:59:a2:f0:
                    bb:75:5d:d8:1f:3a:64:2f:ae:7b:35:9c:49:7c:73:
                    0d:8e:cd:67:2d:48:4e:8c:e9:e2:a8:1f:46:7d:03:
                    dc:e7:77:52:5a:43:d8:90:55:df:62:3c:40:b1:fd:
                    a3:67:e1:27:f4:9d:02:97:3e:3b:52:95:f3:83:91:
                    1e:91:8f:31:33:1c:bb:93:93:74:b0:81:45:8e:cc:
                    0d:cb:72:a6:21:b1:25:67:d8:3d:b6:17:4a:61:ef:
                    eb:8c:73:47:46:16:89:be:69:f9:c3:89:21:d2:9e:
                    ba:f9:99:ac:66:cb:b9:cf:a4:f8:d8:f6:26:e2:9e:
                    94:02:d4:9c:97:a4:51:9a:39:ab:b4:1e:fe:c9:dc:
                    0b:c0:73:c3:27:9a:b8:a2:fb:3f:e9:20:de:dc:22:
                    f5:70:c1:8b:fa:ae:c1:65:6f:33:3d:89:c3:62:4e:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D0:A8:1B:ED:15:C2:E9:1F:03:D1:EA:57:63:09:94:13:E6:E9:6B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1244068-c968-4296-891d-ffade60c06ee/e1244068-c968-4296-891d-ffade60c06ee.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.6.0/24
                IPv6:
                  2607:58c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400609

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:88:a7:9d:e3:8e:7a:99:44:1c:c8:e9:1d:63:67:2d:9f:1c:
         db:c1:ab:ff:c7:88:85:75:24:31:a2:c9:22:70:c6:39:13:7a:
         74:66:6f:da:cf:00:c8:e4:cf:63:11:e8:53:7b:4f:a9:60:e8:
         58:e1:79:a4:f4:60:6e:c1:9b:0f:ab:76:30:78:fb:14:e9:da:
         2f:f3:bb:ee:eb:ba:d0:06:99:89:87:d2:a7:f5:df:a0:3d:03:
         c8:79:42:ae:3a:ac:7e:2d:f5:12:1f:51:36:81:ad:3d:29:74:
         94:d5:c8:ba:03:82:a1:6e:69:6c:ed:f7:b7:3a:73:ac:61:68:
         a1:c0:ed:10:e7:b2:6e:17:aa:72:bd:5e:9e:fb:ee:39:df:92:
         ac:48:7f:75:64:a1:48:cd:cd:2b:be:53:84:10:df:0e:4f:65:
         53:b2:f6:b1:9a:6e:a8:b0:1e:7b:a7:ea:29:45:03:e9:95:b4:
         7d:08:d1:c7:0c:43:1c:45:fa:a2:e9:e0:61:21:91:5d:4e:fe:
         be:7f:37:38:fd:e6:8a:5c:70:6a:09:57:de:ca:c2:19:4f:bf:
         de:b6:97:48:9b:9b:14:d9:23:94:e9:bb:a2:2d:f6:a8:04:bd:
         0f:c6:fd:51:cb:eb:ba:4a:59:ce:d3:c9:21:05:0b:5f:3e:cf:
         72:fd:ae:ae
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEP07CdYOOvv5T5LJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMTEyMTAxNDUxNVoXDTI2MDIyMzAxNDUxNVowLzEtMCsGA1UEAxMk
ZTEyNDQwNjgtYzk2OC00Mjk2LTg5MWQtZmZhZGU2MGMwNmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5u9guE7/p5fXpAkokm6XSICZcvMkFJu8jsO
ydpv4V/IX14mfhObmf7vRcoiM8zhG9wHfsfvYBN6K8oWLpYKpkchoOBWb6FEIYv4
qqv9J1bm+rVE3OtZovC7dV3YHzpkL657NZxJfHMNjs1nLUhOjOniqB9GfQPc53dS
WkPYkFXfYjxAsf2jZ+En9J0Clz47UpXzg5EekY8xMxy7k5N0sIFFjswNy3KmIbEl
Z9g9thdKYe/rjHNHRhaJvmn5w4kh0p66+ZmsZsu5z6T42PYm4p6UAtScl6RRmjmr
tB7+ydwLwHPDJ5q4ovs/6SDe3CL1cMGL+q7BZW8zPYnDYk6jZwIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFBLQqBvtFcLpHwPR6ldjCZQT5ulrMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l
MTI0NDA2OC1jOTY4LTQyOTYtODkxZC1mZmFkZTYwYzA2ZWUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2UxMjQ0MDY4LWM5NjgtNDI5Ni04
OTFkLWZmYWRlNjBjMDZlZS9lMTI0NDA2OC1jOTY4LTQyOTYtODkxZC1mZmFkZTYw
YzA2ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBABuLAYwDQQCAAIwBwMFACYHWMAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBhzhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHmIp53jjnqZRBzI6R1jZy2fHNvB
q//HiIV1JDGiySJwxjkTenRmb9rPAMjkz2MR6FN7T6lg6FjheaT0YG7Bmw+rdjB4
+xTp2i/zu+7rutAGmYmH0qf136A9A8h5Qq46rH4t9RIfUTaBrT0pdJTVyLoDgqFu
aWzt97c6c6xhaKHA7RDnsm4XqnK9Xp777jnfkqxIf3VkoUjNzSu+U4QQ3w5PZVOy
9rGabqiwHnun6ilFA+mVtH0I0ccMQxxF+qLp4GEhkV1O/r5/Nzj95opccGoJV97K
whlPv962l0ibmxTZI5Tpu6It9qgEvQ/G/VHL67pKWc7TySEFC18+z3L9rq4=
-----END CERTIFICATE-----