Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551.cer
File:                     b93a005b-1892-459c-bf41-c019bbf34551.cer (raw, json)
Hash identifier:          glnYVaGoQrEcmfd1klpt86EbgEvdKSnf41kWaBAxKWE=
Subject key identifier:   86:41:C2:29:BD:B1:91:BC:B6:4E:ED:2E:0B:AC:36:F7:6D:DE:44:11
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285841E4834C60DD799C6D8DE46180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/b93a005b-1892-459c-bf41-c019bbf34551.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Thu 12 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 54699
                          IP: 2620:43:6000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:4c:60:dd:79:9c:6d:8d:e4:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jun 12 19:06:39 2025 GMT
        Subject: CN=b93a005b-1892-459c-bf41-c019bbf34551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:42:55:94:ff:ca:47:e2:b2:86:46:80:41:
                    1a:cc:ec:13:02:ec:a9:ff:76:c2:45:35:f4:1b:fb:
                    66:42:37:3a:03:a2:10:d1:fe:cb:ac:c0:7f:10:00:
                    5f:17:9b:6c:67:c9:e6:09:3b:eb:08:9f:28:cf:d8:
                    97:07:78:7b:b3:8b:b5:a9:bd:49:9b:32:42:c8:8b:
                    0b:e2:65:2c:e0:b5:b6:4b:37:9c:c1:bc:60:67:e2:
                    eb:2a:b7:b1:a2:58:0c:da:9c:85:a0:7d:00:20:4c:
                    04:e4:d1:c5:b8:5c:5d:61:46:73:68:ab:dd:a2:5e:
                    8e:ea:38:92:27:12:90:ec:68:9d:b7:df:72:6a:ec:
                    09:cf:e3:7a:4d:f3:ff:8e:c9:14:79:fe:89:f2:f5:
                    db:79:d5:da:eb:ca:20:bf:71:25:28:70:d8:07:f6:
                    e4:1f:1b:d5:e4:79:c5:b2:16:0d:aa:fd:69:2e:49:
                    dc:f7:0c:9b:74:53:a5:f3:2e:c1:2c:04:d6:58:5f:
                    d1:0f:85:6a:52:f1:9c:9e:46:cf:99:be:fd:02:54:
                    8f:11:04:22:d8:18:16:26:70:87:3f:ca:b7:06:21:
                    1a:20:25:bb:91:ca:e5:cb:67:10:8b:c9:aa:9f:04:
                    1b:1f:3c:bf:98:6c:99:a0:89:18:04:b3:19:15:4a:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:41:C2:29:BD:B1:91:BC:B6:4E:ED:2E:0B:AC:36:F7:6D:DE:44:11
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b93a005b-1892-459c-bf41-c019bbf34551/b93a005b-1892-459c-bf41-c019bbf34551.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:43:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54699

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:34:31:45:b0:ee:ac:6b:d6:ce:ce:fa:c7:e2:e4:2e:05:d2:
         0b:cb:25:e2:ad:94:8e:ee:16:f5:8d:8f:f7:e7:da:bd:49:02:
         77:74:55:2e:24:74:fc:d4:f0:9d:52:13:eb:02:bf:91:eb:d3:
         1f:c5:86:0b:ca:de:ad:bf:c8:34:b2:87:2c:e6:88:ef:19:10:
         1c:8e:a2:b2:e2:21:5e:cd:4c:aa:95:91:59:e2:77:70:98:56:
         1e:42:4f:b9:f8:3d:6f:2c:1f:7b:04:57:ab:66:4a:18:46:a0:
         aa:25:2c:94:f7:8c:a8:83:b8:e9:cc:13:29:67:46:00:d7:8c:
         7e:60:6a:b7:02:ac:85:39:0b:99:9c:49:ef:4a:63:52:63:1d:
         a5:d6:cd:32:6f:ed:c7:45:1b:84:8b:53:a2:9d:0c:a3:c1:90:
         84:6c:91:9f:1c:4b:c8:1a:6f:7e:51:f6:5d:ab:12:8c:00:ee:
         2a:02:e5:a2:8d:5f:33:19:17:22:71:c1:b9:45:ca:83:66:95:
         bf:a5:e1:b9:a7:17:62:69:82:d1:97:f0:78:f5:bb:90:a1:b0:
         91:fe:f1:27:50:21:95:4d:25:b4:21:36:ff:d8:50:bf:2e:90:
         35:6d:dc:67:46:9a:7f:53:1c:69:46:f9:fc:06:53:93:21:fe:
         b5:81:92:c9
-----BEGIN CERTIFICATE-----
MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWEHkg0xg3XmcbY3kYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYxMjE5MDYzOVowLzEtMCsGA1UEAxMk
YjkzYTAwNWItMTg5Mi00NTljLWJmNDEtYzAxOWJiZjM0NTUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwplCVZT/ykfisoZGgEEazOwTAuyp/3bCRTX0
G/tmQjc6A6IQ0f7LrMB/EABfF5tsZ8nmCTvrCJ8oz9iXB3h7s4u1qb1JmzJCyIsL
4mUs4LW2SzecwbxgZ+LrKrexolgM2pyFoH0AIEwE5NHFuFxdYUZzaKvdol6O6jiS
JxKQ7Gidt99yauwJz+N6TfP/jskUef6J8vXbedXa68ogv3ElKHDYB/bkHxvV5HnF
shYNqv1pLknc9wybdFOl8y7BLATWWF/RD4VqUvGcnkbPmb79AlSPEQQi2BgWJnCH
P8q3BiEaICW7kcrly2cQi8mqnwQbHzy/mGyZoIkYBLMZFUpBCQIDAQABo4IEHjCC
BBowHQYDVR0OBBYEFIZBwim9sZG8tk7tLgusNvdt3kQRMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i
OTNhMDA1Yi0xODkyLTQ1OWMtYmY0MS1jMDE5YmJmMzQ1NTEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2I5M2EwMDViLTE4OTItNDU5Yy1i
ZjQxLWMwMTliYmYzNDU1MS9iOTNhMDA1Yi0xODkyLTQ1OWMtYmY0MS1jMDE5YmJm
MzQ1NTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAmIABDYAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw
BQIDANWrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAAc0MUWw7qxr1s7O+sfi5C4F0gvLJeKtlI7uFvWNj/fn
2r1JAnd0VS4kdPzU8J1SE+sCv5Hr0x/FhgvK3q2/yDSyhyzmiO8ZEByOorLiIV7N
TKqVkVnid3CYVh5CT7n4PW8sH3sEV6tmShhGoKolLJT3jKiDuOnMEylnRgDXjH5g
arcCrIU5C5mcSe9KY1JjHaXWzTJv7cdFG4SLU6KdDKPBkIRskZ8cS8gab35R9l2r
EowA7ioC5aKNXzMZFyJxwblFyoNmlb+l4bmnF2JpgtGX8Hj1u5ChsJH+8SdQIZVN
JbQhNv/YUL8ukDVt3GdGmn9THGlG+fwGU5Mh/rWBksk=
-----END CERTIFICATE-----