Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
File:                     27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer (raw, json)
Hash identifier:          AjDOn2NWT1TChURtgG0jv5tR0QZ8uHXoV9gstNawOdw=
Subject key identifier:   F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E4834C13E1FEA8D7797D7480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Tue 10 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 54825
                          IP: 192.80.8.0/24
                          IP: 198.16.4.0/22
                          IP: 2604:1380::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4c:13:e1:fe:a8:d7:79:7d:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 10 19:06:39 2025 GMT
        Subject: CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4d:db:2d:a6:65:fc:b6:1f:77:60:cb:9f:a2:
                    76:72:bc:03:18:5f:93:1b:ae:41:d4:3e:08:b2:60:
                    c3:dc:16:a7:7b:58:c6:54:0b:e5:46:24:67:9e:e3:
                    d8:71:04:14:2b:d6:41:aa:68:57:ef:af:e0:fb:7f:
                    59:24:e0:eb:ee:c4:99:9c:14:88:01:c9:24:d6:ff:
                    b7:86:1c:30:7b:18:84:fd:4a:13:ba:35:21:c5:0f:
                    fa:1e:14:57:ff:24:a4:35:a7:e5:86:fe:5f:c4:1f:
                    57:ed:54:c7:d3:1b:aa:f9:e3:20:45:08:2f:3e:49:
                    9a:9a:f1:4c:53:93:e8:34:74:ea:a1:b5:92:15:6c:
                    d4:aa:8e:f5:ae:ef:e0:48:75:8e:20:fb:8f:ca:51:
                    42:dd:c2:30:57:47:4e:17:66:02:7d:5f:3a:17:1e:
                    0d:53:b9:a2:0f:0e:d8:8b:2d:16:09:32:02:26:26:
                    90:23:a5:69:9b:88:3d:83:1f:cc:5d:d2:de:68:9a:
                    9b:88:8e:7e:a0:0d:e2:ba:af:7b:f6:2a:80:b9:28:
                    0f:43:0d:76:78:9b:40:5e:d1:87:41:72:67:5c:c3:
                    48:d0:71:c2:7e:b3:5e:91:75:ce:38:89:a4:23:b2:
                    b7:af:2c:58:1b:bc:59:f8:c3:6e:d5:f3:17:63:bb:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.8.0/24
                  198.16.4.0/22
                IPv6:
                  2604:1380::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54825

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:e8:b0:93:18:2f:1a:c9:ba:d3:01:07:ef:83:90:1d:82:04:
         b0:65:ac:00:e6:eb:c2:56:32:ae:33:11:d7:57:c4:12:8f:12:
         31:a8:61:ab:dc:4c:04:9f:52:7f:78:d0:e6:eb:6d:a6:70:c2:
         2a:d4:f5:64:b4:b9:6f:65:fc:d3:f3:08:8e:66:6d:af:36:ed:
         ac:f1:a2:8a:5d:77:6d:33:65:ab:f1:e0:09:df:d7:55:0e:21:
         3b:df:79:20:45:38:a1:eb:31:66:29:84:99:7b:3b:ce:bd:0f:
         79:20:09:8d:fb:bd:98:6a:ec:d2:9b:62:89:3a:f9:87:7a:46:
         44:40:62:64:32:01:a1:30:06:89:3b:11:76:79:2e:6e:00:9c:
         02:e7:8a:ee:18:58:61:b2:82:f1:f8:31:be:e3:2a:7f:59:84:
         bb:fa:cd:24:d1:e1:46:de:44:55:29:f3:f9:76:0c:4e:72:c6:
         16:19:3c:e9:4e:9f:f2:18:51:b6:5d:93:b5:d2:ec:39:7c:8b:
         f9:e0:c9:08:93:ef:04:98:58:6b:d9:23:7d:cd:59:22:66:0a:
         2d:18:c4:5f:78:80:89:0a:7f:b8:16:2a:ac:7b:57:87:a2:6c:
         fe:0d:31:b0:6a:6f:95:3e:08:52:35:62:99:a3:21:ce:a9:ad:
         76:f4:ef:26
-----BEGIN CERTIFICATE-----
MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEHkg0wT4f6o13l9dIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYxMDE5MDYzOVowLzEtMCsGA1UEAxMk
MjdlMmQ3ZWUtZDIzOS00OTI4LTkxMDctY2ViOTVjYWNkMGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk3bLaZl/LYfd2DLn6J2crwDGF+TG65B1D4I
smDD3Bane1jGVAvlRiRnnuPYcQQUK9ZBqmhX76/g+39ZJODr7sSZnBSIAckk1v+3
hhwwexiE/UoTujUhxQ/6HhRX/ySkNaflhv5fxB9X7VTH0xuq+eMgRQgvPkmamvFM
U5PoNHTqobWSFWzUqo71ru/gSHWOIPuPylFC3cIwV0dOF2YCfV86Fx4NU7miDw7Y
iy0WCTICJiaQI6Vpm4g9gx/MXdLeaJqbiI5+oA3iuq979iqAuSgPQw12eJtAXtGH
QXJnXMNI0HHCfrNekXXOOImkI7K3ryxYG7xZ+MNu1fMXY7u9SwIDAQABo4IEMDCC
BCwwHQYDVR0OBBYEFPbNJd8VOXRDEHu5yz9DcRzQOq/HMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y
N2UyZDdlZS1kMjM5LTQ5MjgtOTEwNy1jZWI5NWNhY2QwYjgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzI3ZTJkN2VlLWQyMzktNDkyOC05
MTA3LWNlYjk1Y2FjZDBiOC8yN2UyZDdlZS1kMjM5LTQ5MjgtOTEwNy1jZWI5NWNh
Y2QwYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNAYIKwYBBQUH
AQcBAf8EJTAjMBIEAgABMAwDBADAUAgDBALGEAQwDQQCAAIwBwMFACYEE4AwGgYI
KwYBBQUHAQgBAf8ECzAJoAcwBQIDANYpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALnosJMYLxrJutMBB++D
kB2CBLBlrADm68JWMq4zEddXxBKPEjGoYavcTASfUn940ObrbaZwwirU9WS0uW9l
/NPzCI5mba827azxoopdd20zZavx4Anf11UOITvfeSBFOKHrMWYphJl7O869D3kg
CY37vZhq7NKbYok6+Yd6RkRAYmQyAaEwBok7EXZ5Lm4AnALniu4YWGGygvH4Mb7j
Kn9ZhLv6zSTR4UbeRFUp8/l2DE5yxhYZPOlOn/IYUbZdk7XS7Dl8i/ngyQiT7wSY
WGvZI33NWSJmCi0YxF94gIkKf7gWKqx7V4eibP4NMbBqb5U+CFI1YpmjIc6prXb0
7yY=
-----END CERTIFICATE-----