Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280.cer
File:                     acdcf67c-3f56-42fa-a790-eac540e58280.cer (raw, json)
Hash identifier:          Lf0oeP9gRxrlFBqqJ85Y+9ZmONtOJBvQIDKPqAyLG+g=
Subject key identifier:   C9:67:19:6F:42:9D:1A:2A:28:CB:B6:E1:55:9B:9F:38:40:A6:84:68
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584445E1FD7D2E59B3ED72AB8180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/acdcf67c-3f56-42fa-a790-eac540e58280.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 20 Dec 2023 01:45:15 +0000
Certificate not after:    Tue 24 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 16744
                          AS: 20174
                          AS: 20293
                          AS: 36154
                          AS: 62799
                          AS: 395299
                          IP: 66.218.160.0/20
                          IP: 2620:112:6000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:45:e1:fd:7d:2e:59:b3:ed:72:ab:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Dec 20 01:45:15 2023 GMT
            Not After : Mar 24 00:45:15 2026 GMT
        Subject: CN=acdcf67c-3f56-42fa-a790-eac540e58280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:ef:4e:47:59:c2:46:75:52:d2:94:12:05:
                    9b:0a:33:a6:b2:73:46:86:54:aa:63:14:9f:1f:23:
                    54:34:f9:b5:15:10:ce:04:53:81:81:28:ba:f7:a2:
                    b6:c6:05:3b:52:df:bf:cf:01:0d:b0:b8:93:de:71:
                    06:3c:25:78:d9:44:dd:a0:52:73:f9:d9:65:24:e6:
                    ad:c6:91:97:aa:69:fb:ac:f9:34:a7:b3:cc:3b:3f:
                    31:4c:00:8f:73:1d:23:b6:06:bd:af:a4:dc:86:51:
                    ea:a5:08:42:de:60:da:98:e9:b7:a9:5e:04:87:7f:
                    fb:2f:04:fc:64:9b:b1:42:a5:99:23:f7:e3:ce:cb:
                    be:5d:c6:2b:94:51:06:32:04:61:06:7d:cf:f1:ad:
                    fd:8d:b9:8e:9b:66:a5:1c:16:4b:4a:9f:3b:a9:e1:
                    af:2f:62:61:7c:b4:d4:02:a3:fd:1b:86:7e:3b:6c:
                    de:00:03:c8:3e:c2:96:75:b7:50:4c:75:31:26:47:
                    0c:8c:60:9d:b7:a4:0a:0f:6d:98:77:23:e0:5d:77:
                    0a:8c:31:c9:35:1f:e7:49:62:1f:a1:97:fc:cc:d5:
                    19:e2:a4:e0:56:2c:54:6a:c1:a5:3d:a5:70:da:4f:
                    17:cc:36:c2:c0:6c:f4:5b:d0:8a:62:fe:52:67:f7:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:67:19:6F:42:9D:1A:2A:28:CB:B6:E1:55:9B:9F:38:40:A6:84:68
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/acdcf67c-3f56-42fa-a790-eac540e58280.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.218.160.0/20
                IPv6:
                  2620:112:6000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16744
                  20174
                  20293
                  36154
                  62799
                  395299

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:0a:2d:ce:d5:a1:dd:40:27:c7:f6:59:e6:5d:b1:de:76:8e:
         4a:4c:55:fd:a2:e1:6a:57:5c:99:af:17:c4:59:6d:32:1b:6e:
         6f:e6:4f:0c:0a:4d:d7:98:32:0c:4e:59:91:35:9a:da:ae:26:
         95:9c:aa:b3:23:48:09:09:6c:9f:24:0d:6f:24:9c:49:11:15:
         86:50:0d:47:09:19:93:06:2d:50:4c:4b:f9:8e:17:ec:b9:7e:
         8f:bb:8b:6e:2a:3d:b1:f5:f6:d0:c6:1a:10:2d:c1:40:19:c8:
         24:c7:ac:ad:57:ef:1d:ed:69:68:21:a8:b5:89:ec:5c:f9:c8:
         2f:2d:24:f1:df:d9:41:f7:cd:00:41:ef:99:bc:fc:d4:83:7a:
         fb:66:10:4d:51:44:50:e3:e7:9f:5a:8c:46:b5:27:68:85:54:
         2d:91:7a:b4:21:b0:46:8e:91:77:c4:2b:8a:55:15:c2:00:2c:
         c7:42:24:8d:02:2f:6e:59:da:14:00:0e:3a:2c:9b:dc:bb:8b:
         08:ea:3f:6d:fe:d4:3e:6f:38:76:e3:08:08:3d:1c:35:93:f8:
         d1:65:b9:e9:73:a3:80:7f:22:f5:e1:10:43:15:bf:2b:0d:a0:
         eb:84:9b:7e:9e:cc:51:db:8e:8a:f5:53:9c:04:ef:42:81:76:
         54:33:a6:07
-----BEGIN CERTIFICATE-----
MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWERF4f19Llmz7XKrgYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMTIyMDAxNDUxNVoXDTI2MDMyNDAwNDUxNVowLzEtMCsGA1UEAxMk
YWNkY2Y2N2MtM2Y1Ni00MmZhLWE3OTAtZWFjNTQwZTU4MjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybTvTkdZwkZ1UtKUEgWbCjOmsnNGhlSqYxSf
HyNUNPm1FRDOBFOBgSi696K2xgU7Ut+/zwENsLiT3nEGPCV42UTdoFJz+dllJOat
xpGXqmn7rPk0p7PMOz8xTACPcx0jtga9r6TchlHqpQhC3mDamOm3qV4Eh3/7LwT8
ZJuxQqWZI/fjzsu+XcYrlFEGMgRhBn3P8a39jbmOm2alHBZLSp87qeGvL2JhfLTU
AqP9G4Z+O2zeAAPIPsKWdbdQTHUxJkcMjGCdt6QKD22YdyPgXXcKjDHJNR/nSWIf
oZf8zNUZ4qTgVixUasGlPaVw2k8XzDbCwGz0W9CKYv5SZ/fDwwIDAQABo4IEQjCC
BD4wHQYDVR0OBBYEFMlnGW9CnRoqKMu24VWbnzhApoRoMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9h
Y2RjZjY3Yy0zZjU2LTQyZmEtYTc5MC1lYWM1NDBlNTgyODAvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2FjZGNmNjdjLTNmNTYtNDJmYS1h
NzkwLWVhYzU0MGU1ODI4MC9hY2RjZjY3Yy0zZjU2LTQyZmEtYTc5MC1lYWM1NDBl
NTgyODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBARC2qAwDwQCAAIwCQMHBCYgARJgADAwBggrBgEF
BQcBCAEB/wQhMB+gHTAbAgJBaAICTs4CAk9FAgMAjToCAwD1TwIDBggjMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD
ggEBALQKLc7Vod1AJ8f2WeZdsd52jkpMVf2i4WpXXJmvF8RZbTIbbm/mTwwKTdeY
MgxOWZE1mtquJpWcqrMjSAkJbJ8kDW8knEkRFYZQDUcJGZMGLVBMS/mOF+y5fo+7
i24qPbH19tDGGhAtwUAZyCTHrK1X7x3taWghqLWJ7Fz5yC8tJPHf2UH3zQBB75m8
/NSDevtmEE1RRFDj559ajEa1J2iFVC2RerQhsEaOkXfEK4pVFcIALMdCJI0CL25Z
2hQADjosm9y7iwjqP23+1D5vOHbjCAg9HDWT+NFluelzo4B/IvXhEEMVvysNoOuE
m36ezFHbjor1U5wE70KBdlQzpgc=
-----END CERTIFICATE-----