Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a.cer
File:                     c66eadbc-5490-4fb5-ab87-936c9491420a.cer (raw, json)
Hash identifier:          gELHt/fOLG+yv+QcjFVEjnL30se0gVs+UMurFMUdcf0=
Subject key identifier:   4E:55:A4:53:C4:4B:D7:A1:F3:50:82:A4:32:56:98:2A:B9:01:EE:DA
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858459D266808C22FE232F735AC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c66eadbc-5490-4fb5-ab87-936c9491420a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 21 Apr 2024 00:45:22 +0000
Certificate not after:    Sat 25 Jul 2026 00:45:22 +0000
Subordinate resources:    IP: 104.255.220.0/22
                          IP: 2605:b6c0::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9d:26:68:08:c2:2f:e2:32:f7:35:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Apr 21 00:45:22 2024 GMT
            Not After : Jul 25 00:45:22 2026 GMT
        Subject: CN=c66eadbc-5490-4fb5-ab87-936c9491420a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ec:6b:ff:42:15:ab:db:b9:e8:0f:46:17:d0:
                    bb:67:6a:7b:35:6e:8c:bb:f1:4f:3d:52:7d:72:9d:
                    cd:2c:e7:0b:0e:b8:0c:e3:c8:37:8e:db:d5:ea:21:
                    1a:1e:3c:fd:0e:ea:42:48:a1:d4:7c:6e:10:5d:fd:
                    ea:e0:ed:c1:35:c8:8f:1c:89:57:11:52:a3:69:fc:
                    ff:86:fe:39:e7:20:fd:7c:94:e3:20:25:5d:6c:6c:
                    d6:a0:f4:df:4a:65:28:91:ed:bd:f4:bb:1b:2b:fe:
                    ab:af:b5:be:e4:26:94:0f:45:39:75:7e:d1:2c:2c:
                    1c:96:73:9f:4f:40:42:3d:21:78:a1:8c:da:f1:24:
                    3b:33:47:8a:f2:d6:bc:2c:0e:32:22:4d:86:9c:b6:
                    1f:81:72:2b:17:e6:a5:56:da:c8:22:67:6b:10:bf:
                    0a:5c:60:25:8f:21:2f:59:8f:5e:9c:0f:2b:4c:2d:
                    8c:5a:5e:62:ad:b5:65:a8:30:71:e8:86:b7:68:e3:
                    84:59:dd:0d:37:ed:3a:6f:2c:59:2d:cd:98:57:60:
                    a8:fd:44:79:26:ca:0b:35:a9:d3:51:a4:92:59:79:
                    11:e7:6f:e7:ab:bf:70:45:95:8e:9c:ce:48:07:31:
                    e8:f6:91:af:8d:19:38:a8:19:6f:b7:23:1f:a5:b7:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:55:A4:53:C4:4B:D7:A1:F3:50:82:A4:32:56:98:2A:B9:01:EE:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c66eadbc-5490-4fb5-ab87-936c9491420a/c66eadbc-5490-4fb5-ab87-936c9491420a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.220.0/22
                IPv6:
                  2605:b6c0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:d9:de:fc:45:a1:08:d4:49:b5:7f:29:a7:e5:ef:4a:60:e1:
         0c:f2:a5:6e:66:a6:ee:c2:b1:c1:f9:9f:73:f5:c1:8a:ad:99:
         85:84:a6:de:55:e3:af:19:79:b5:11:92:17:9d:37:e9:c5:85:
         31:38:02:1f:59:70:ba:3d:5f:04:4b:f1:ad:16:38:51:63:a2:
         6b:92:e8:4d:96:77:5f:d4:d8:ec:40:1c:5b:a7:22:9c:d8:e6:
         cd:69:93:c3:2b:8d:69:56:5b:7e:11:94:d9:e2:fc:cc:10:be:
         41:13:22:22:fa:5f:cb:71:34:9c:82:90:f7:7c:8c:ed:cb:3f:
         40:96:57:25:0b:03:54:8e:04:7a:51:75:b6:ec:99:f4:49:70:
         a7:48:8e:7a:2d:c4:cf:49:17:27:0c:32:5c:65:15:0c:d6:34:
         be:a4:d0:9c:e6:5b:20:60:a7:36:e5:70:1f:96:f6:3b:d7:38:
         8b:bb:4c:a7:6f:f2:5b:03:9a:6c:e3:95:dc:15:92:ca:8e:f0:
         79:14:fb:2c:57:96:c4:03:8c:2d:07:03:24:d6:4c:dc:41:4a:
         89:a1:af:00:d9:7c:e4:8b:23:1b:f4:b1:8f:97:b5:64:51:8c:
         b6:a1:37:f4:f7:3b:bc:72:f6:f7:39:c5:9d:1c:e5:78:5e:62:
         2f:81:5c:88
-----BEGIN CERTIFICATE-----
MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEWdJmgIwi/iMvc1rIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI0MDQyMTAwNDUyMloXDTI2MDcyNTAwNDUyMlowLzEtMCsGA1UEAxMk
YzY2ZWFkYmMtNTQ5MC00ZmI1LWFiODctOTM2Yzk0OTE0MjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuxr/0IVq9u56A9GF9C7Z2p7NW6Mu/FPPVJ9
cp3NLOcLDrgM48g3jtvV6iEaHjz9DupCSKHUfG4QXf3q4O3BNciPHIlXEVKjafz/
hv455yD9fJTjICVdbGzWoPTfSmUoke299LsbK/6rr7W+5CaUD0U5dX7RLCwclnOf
T0BCPSF4oYza8SQ7M0eK8ta8LA4yIk2GnLYfgXIrF+alVtrIImdrEL8KXGAljyEv
WY9enA8rTC2MWl5irbVlqDBx6Ia3aOOEWd0NN+06byxZLc2YV2Co/UR5JsoLNanT
UaSSWXkR52/nq79wRZWOnM5IBzHo9pGvjRk4qBlvtyMfpbdj0QIDAQABo4IEDzCC
BAswHQYDVR0OBBYEFE5VpFPES9eh81CCpDJWmCq5Ae7aMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9j
NjZlYWRiYy01NDkwLTRmYjUtYWI4Ny05MzZjOTQ5MTQyMGEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2M2NmVhZGJjLTU0OTAtNGZiNS1h
Yjg3LTkzNmM5NDkxNDIwYS9jNjZlYWRiYy01NDkwLTRmYjUtYWI4Ny05MzZjOTQ5
MTQyMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAJo/9wwDgQCAAIwCAMGBCYFtsAAMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
ADXZ3vxFoQjUSbV/Kafl70pg4QzypW5mpu7CscH5n3P1wYqtmYWEpt5V468ZebUR
khedN+nFhTE4Ah9ZcLo9XwRL8a0WOFFjomuS6E2Wd1/U2OxAHFunIpzY5s1pk8Mr
jWlWW34RlNni/MwQvkETIiL6X8txNJyCkPd8jO3LP0CWVyULA1SOBHpRdbbsmfRJ
cKdIjnotxM9JFycMMlxlFQzWNL6k0JzmWyBgpzblcB+W9jvXOIu7TKdv8lsDmmzj
ldwVksqO8HkU+yxXlsQDjC0HAyTWTNxBSomhrwDZfOSLIxv0sY+XtWRRjLahN/T3
O7xy9vc5xZ0c5XheYi+BXIg=
-----END CERTIFICATE-----