Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc.cer
File:                     d721f6df-da07-469d-be94-82504f071adc.cer (raw, json)
Hash identifier:          4SFdr0yxF32ZIRbgXtCLwitIuTG8pq9eXrlLTWPgbeY=
Subject key identifier:   8E:B4:7F:97:79:EA:46:A8:29:E5:88:23:27:23:E0:D2:6A:7A:CC:58
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858440E0C4F8E15F7CB0891ADCD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/d721f6df-da07-469d-be94-82504f071adc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 30 Nov 2023 01:45:15 +0000
Certificate not after:    Wed 04 Mar 2026 01:45:15 +0000
Subordinate resources:    IP: 207.174.51.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0e:0c:4f:8e:15:f7:cb:08:91:ad:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Nov 30 01:45:15 2023 GMT
            Not After : Mar  4 01:45:15 2026 GMT
        Subject: CN=d721f6df-da07-469d-be94-82504f071adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:18:50:2b:86:9a:22:8d:fc:9e:20:82:b2:
                    7c:78:49:a6:3b:5f:81:f6:fd:aa:6b:18:28:94:ef:
                    5d:d5:97:9d:95:8d:b9:02:bb:3f:30:b2:72:98:e2:
                    85:73:dc:e8:48:91:cf:5d:ed:8a:ae:48:a4:44:a8:
                    3b:51:be:3d:41:31:1c:67:6f:1f:03:1c:a6:53:75:
                    db:af:12:6b:74:8f:74:60:ba:41:32:82:11:40:62:
                    f3:b4:08:26:a2:74:d0:05:82:c7:91:70:05:de:d0:
                    b1:0e:04:ca:5b:68:0d:cf:de:d8:f9:05:6f:15:19:
                    8a:13:b1:f9:1e:e5:a0:7b:1e:6a:26:56:47:84:aa:
                    86:16:af:34:03:17:a9:63:93:6a:0a:2c:92:d7:fd:
                    63:26:fe:4d:59:99:0c:00:31:b8:ad:35:c1:59:ad:
                    5b:83:9f:b2:50:9d:5a:63:aa:19:75:d1:93:0c:9b:
                    b4:19:78:ff:30:db:b5:32:13:ce:84:0a:0d:c1:dc:
                    5a:20:ce:3f:11:d8:9e:b3:b3:ee:e5:c1:b7:16:83:
                    a2:74:96:fd:8a:bb:7d:f0:9a:dd:55:76:42:98:fb:
                    47:42:29:32:ca:72:30:f7:0a:de:2d:15:0b:6d:9f:
                    21:2d:de:53:f3:98:55:ca:c8:d6:1f:81:ce:55:d4:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B4:7F:97:79:EA:46:A8:29:E5:88:23:27:23:E0:D2:6A:7A:CC:58
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d721f6df-da07-469d-be94-82504f071adc/d721f6df-da07-469d-be94-82504f071adc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:69:1e:74:27:1f:a9:73:76:90:e3:df:85:b3:92:58:a1:c0:
         04:6e:80:f8:32:1b:ea:20:a8:e4:c5:54:6c:66:cc:4a:64:48:
         8f:a4:43:cf:8d:30:27:ed:3e:b6:13:28:ea:c1:e6:39:8a:e0:
         b5:2d:48:d1:34:86:9d:9d:65:c3:25:40:6b:72:5e:6f:62:ab:
         5a:d9:2d:a1:9b:cd:dc:3b:66:d8:de:bc:14:1f:d3:43:cb:93:
         5d:d6:0d:16:e7:45:4d:79:2e:00:d2:81:f5:94:40:9f:ec:a0:
         4a:3f:b5:b7:9d:ab:4b:96:65:91:95:77:99:d0:41:05:1c:9e:
         21:90:49:0b:60:f7:02:22:8e:d2:af:8a:1b:c5:64:c4:f5:7e:
         77:66:02:94:99:9b:a3:d4:16:48:09:e2:0c:40:5c:a0:e4:c8:
         e4:1e:11:5b:88:b4:3d:78:a6:48:68:a5:82:74:4b:3b:df:1a:
         69:eb:86:3c:b1:e0:36:86:c8:83:f7:59:7d:3d:9b:bf:59:09:
         43:2c:37:2d:32:55:5d:91:a5:af:86:31:1c:eb:e0:e5:0a:ab:
         6f:8e:d6:fa:a3:75:e8:50:53:94:03:d0:39:fd:bd:26:e2:80:
         93:1e:c1:27:0e:ec:6b:d4:9a:96:65:9e:a7:77:a0:73:4a:de:
         95:bf:f0:64
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEQODE+OFffLCJGtzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMTEzMDAxNDUxNVoXDTI2MDMwNDAxNDUxNVowLzEtMCsGA1UEAxMk
ZDcyMWY2ZGYtZGEwNy00NjlkLWJlOTQtODI1MDRmMDcxYWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGYYUCuGmiKN/J4ggrJ8eEmmO1+B9v2qaxgo
lO9d1ZedlY25Ars/MLJymOKFc9zoSJHPXe2KrkikRKg7Ub49QTEcZ28fAxymU3Xb
rxJrdI90YLpBMoIRQGLztAgmonTQBYLHkXAF3tCxDgTKW2gNz97Y+QVvFRmKE7H5
HuWgex5qJlZHhKqGFq80AxepY5NqCiyS1/1jJv5NWZkMADG4rTXBWa1bg5+yUJ1a
Y6oZddGTDJu0GXj/MNu1MhPOhAoNwdxaIM4/Edies7Pu5cG3FoOidJb9irt98Jrd
VXZCmPtHQikyynIw9wreLRULbZ8hLd5T85hVysjWH4HOVdSFMwIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFI60f5d56kaoKeWIIycj4NJqesxYMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9k
NzIxZjZkZi1kYTA3LTQ2OWQtYmU5NC04MjUwNGYwNzFhZGMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2Q3MjFmNmRmLWRhMDctNDY5ZC1i
ZTk0LTgyNTA0ZjA3MWFkYy9kNzIxZjZkZi1kYTA3LTQ2OWQtYmU5NC04MjUwNGYw
NzFhZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADPrjMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqWkedCcfqXN2kOPfhbOS
WKHABG6A+DIb6iCo5MVUbGbMSmRIj6RDz40wJ+0+thMo6sHmOYrgtS1I0TSGnZ1l
wyVAa3Jeb2KrWtktoZvN3Dtm2N68FB/TQ8uTXdYNFudFTXkuANKB9ZRAn+ygSj+1
t52rS5ZlkZV3mdBBBRyeIZBJC2D3AiKO0q+KG8VkxPV+d2YClJmbo9QWSAniDEBc
oOTI5B4RW4i0PXimSGilgnRLO98aaeuGPLHgNobIg/dZfT2bv1kJQyw3LTJVXZGl
r4YxHOvg5Qqrb47W+qN16FBTlAPQOf29JuKAkx7BJw7sa9SalmWep3egc0relb/w
ZA==
-----END CERTIFICATE-----