Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094.cer
File:                     54db6675-c607-4f3e-820c-24f5519df094.cer (raw, json)
Hash identifier:          3mLtEmJ99q7RhbsU1EUPjkSw5pLizHshlmLCr522n2M=
Subject key identifier:   39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584304B799106CD1017DCB9D9700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 27 Aug 2023 00:45:21 +0000
Certificate not after:    Sat 29 Nov 2025 01:45:21 +0000
Subordinate resources:    AS: 63040
                          IP: 52.128.0.0/20
                          IP: 52.128.160.0 -- 52.128.223.255
                          IP: 162.252.24.0/21
                          IP: 2602:ffcf::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:04:b7:99:10:6c:d1:01:7d:cb:9d:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Aug 27 00:45:21 2023 GMT
            Not After : Nov 29 01:45:21 2025 GMT
        Subject: CN=54db6675-c607-4f3e-820c-24f5519df094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:e2:cc:9a:80:fa:0d:a8:9a:3e:19:1a:b9:
                    76:29:99:40:3b:38:29:92:fc:2f:1e:31:93:30:af:
                    e3:42:cf:d5:b6:03:87:32:6f:f7:fb:50:82:36:7a:
                    01:5f:12:21:a6:a4:2e:ee:68:fe:20:94:24:1f:cb:
                    90:d9:5b:ad:4a:0d:59:7e:af:c3:32:2d:99:69:d5:
                    d8:34:10:fe:18:a2:c2:e9:43:76:92:50:a5:04:2b:
                    4c:fe:55:6a:ba:c3:fe:b6:2c:4f:94:af:80:92:68:
                    64:d1:cf:f0:60:8b:06:44:a5:74:76:a6:fd:d8:53:
                    21:01:b6:8a:ea:c7:30:d2:ac:a2:14:d0:60:cf:a5:
                    85:0c:6b:b6:db:ae:69:c0:70:df:db:98:a6:0e:53:
                    13:75:71:95:95:00:8e:9f:80:05:c6:b9:38:d8:a5:
                    c3:cc:34:55:a9:bd:60:e1:75:6b:84:f7:c3:f9:aa:
                    ba:93:95:c8:45:09:fd:5c:83:dc:43:ca:f3:11:bf:
                    ee:50:36:77:82:97:ac:46:67:5f:2c:ba:7a:22:75:
                    0a:b0:e0:94:b9:18:76:40:7a:be:3f:0d:44:30:90:
                    45:c6:bf:10:f6:06:4f:1a:8d:9b:b5:85:da:da:55:
                    ff:42:84:04:85:12:34:9c:44:96:2a:b1:b2:61:5a:
                    50:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:95:99:A7:47:6D:EF:F7:70:A0:28:B2:D8:E1:9C:F2:52:FA:AE:09
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/54db6675-c607-4f3e-820c-24f5519df094/54db6675-c607-4f3e-820c-24f5519df094.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.0.0/20
                  52.128.160.0-52.128.223.255
                  162.252.24.0/21
                IPv6:
                  2602:ffcf::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63040

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:18:ec:a3:7a:5f:18:35:d5:74:cd:c6:af:38:a0:5b:63:a3:
         3f:d7:9f:a2:c3:33:a7:27:ce:db:72:96:a0:c4:9a:06:77:e5:
         9a:e6:22:ff:38:97:b0:30:80:cd:4e:48:6c:1c:6f:6f:ba:42:
         43:4e:cf:a1:9a:25:a3:ae:ad:39:73:5b:d6:16:88:dd:28:d7:
         77:13:03:18:e6:5e:2e:d7:55:0d:fe:4b:49:ad:d0:80:98:0c:
         f5:af:2c:93:22:aa:72:bc:ca:40:21:82:d0:1b:e6:c0:52:8c:
         0c:0c:25:83:16:32:3c:9d:3f:85:98:22:75:cd:df:ff:03:0a:
         9a:4c:69:63:64:2e:fa:51:cd:41:17:1f:f0:76:75:58:59:80:
         eb:10:4b:00:79:00:cb:9f:88:44:e7:93:8f:73:ea:f1:eb:6e:
         72:e7:0d:53:9f:05:54:c0:dd:f4:8d:46:fa:9e:e6:d2:2e:37:
         dc:b4:17:17:07:ee:cf:e3:4e:0a:db:32:4c:c5:cd:76:e1:32:
         5b:7e:b6:4b:d0:5e:b5:fc:5e:82:ac:13:0e:10:6e:21:4b:a0:
         82:44:db:fa:b7:17:5d:7b:30:47:9b:89:e8:b9:95:b5:eb:e4:
         f2:54:76:6e:01:91:10:28:23:54:85:07:bd:11:43:1e:b2:c4:
         6e:28:b0:80
-----BEGIN CERTIFICATE-----
MIIHLTCCBhWgAwIBAgIUAQ0Mn0MoWEMEt5kQbNEBfcudlwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMDgyNzAwNDUyMVoXDTI1MTEyOTAxNDUyMVowLzEtMCsGA1UEAxMk
NTRkYjY2NzUtYzYwNy00ZjNlLTgyMGMtMjRmNTUxOWRmMDk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUXizJqA+g2omj4ZGrl2KZlAOzgpkvwvHjGT
MK/jQs/VtgOHMm/3+1CCNnoBXxIhpqQu7mj+IJQkH8uQ2VutSg1Zfq/DMi2ZadXY
NBD+GKLC6UN2klClBCtM/lVqusP+tixPlK+Akmhk0c/wYIsGRKV0dqb92FMhAbaK
6scw0qyiFNBgz6WFDGu2265pwHDf25imDlMTdXGVlQCOn4AFxrk42KXDzDRVqb1g
4XVrhPfD+aq6k5XIRQn9XIPcQ8rzEb/uUDZ3gpesRmdfLLp6InUKsOCUuRh2QHq+
Pw1EMJBFxr8Q9gZPGo2btYXa2lX/QoQEhRI0nESWKrGyYVpQlwIDAQABo4IEPzCC
BDswHQYDVR0OBBYEFDmVmadHbe/3cKAostjhnPJS+q4JMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81
NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5ZGYwOTQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzU0ZGI2Njc1LWM2MDctNGYzZS04
MjBjLTI0ZjU1MTlkZjA5NC81NGRiNjY3NS1jNjA3LTRmM2UtODIwYy0yNGY1NTE5
ZGYwOTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwQwYIKwYBBQUH
AQcBAf8ENDAyMCAEAgABMBoDBAQ0gAAwDAMEBTSAoAMEBTSAwAMEA6L8GDAOBAIA
AjAIAwYEJgL/zwAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPZAMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AGgY7KN6Xxg11XTNxq84oFtjoz/Xn6LDM6cnzttylqDEmgZ35ZrmIv84l7AwgM1O
SGwcb2+6QkNOz6GaJaOurTlzW9YWiN0o13cTAxjmXi7XVQ3+S0mt0ICYDPWvLJMi
qnK8ykAhgtAb5sBSjAwMJYMWMjydP4WYInXN3/8DCppMaWNkLvpRzUEXH/B2dVhZ
gOsQSwB5AMufiETnk49z6vHrbnLnDVOfBVTA3fSNRvqe5tIuN9y0FxcH7s/jTgrb
MkzFzXbhMlt+tkvQXrX8XoKsEw4QbiFLoIJE2/q3F117MEebiei5lbXr5PJUdm4B
kRAoI1SFB70RQx6yxG4osIA=
-----END CERTIFICATE-----