Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dac844f2-a729-4ff7-bb65-b32f431c3248.cer
File:                     dac844f2-a729-4ff7-bb65-b32f431c3248.cer (raw, json)
Hash identifier:          NyAou8bs91Xi2GQMrqaekQBu+qjBFpR5/zdHdlGO+Go=
Subject key identifier:   B5:83:1A:7D:B3:2A:69:67:78:22:F0:F2:91:54:BE:DF:0D:96:86:21
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F432858473788FF3F4A96F9DD17B3DE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dac844f2-a729-4ff7-bb65-b32f431c3248/dac844f2-a729-4ff7-bb65-b32f431c3248.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dac844f2-a729-4ff7-bb65-b32f431c3248/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 15 Sep 2024 00:45:26 +0000
Certificate not after:    Sat 19 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 394585
                          IP: 204.231.196.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:37:88:ff:3f:4a:96:f9:dd:17:b3:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Sep 15 00:45:26 2024 GMT
            Not After : Dec 19 01:45:26 2026 GMT
        Subject: CN=dac844f2-a729-4ff7-bb65-b32f431c3248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:98:bd:64:dd:7f:0b:ab:c3:b8:99:1b:d7:
                    3b:01:12:d7:d2:c8:49:88:e8:cc:9a:ea:6f:55:37:
                    5f:83:4b:cf:60:1e:f1:ab:ab:ba:fe:fb:6f:9f:8e:
                    de:02:e5:47:fd:c1:20:a7:ed:6c:2d:25:bf:f7:83:
                    13:1d:7e:63:17:23:19:40:21:5d:0b:a7:84:fd:06:
                    bf:c2:f9:0e:f9:bd:5c:e1:6b:76:19:05:6c:fa:5e:
                    bc:92:9c:79:a2:48:dc:e5:1d:25:c8:77:a6:06:c5:
                    d8:22:93:03:f8:50:37:57:f7:ac:96:7b:57:01:03:
                    62:ff:78:ab:03:d1:2c:93:40:dc:43:ec:59:d1:fa:
                    f7:f9:41:34:47:b7:b1:f2:d5:81:d4:86:3e:27:6c:
                    72:16:23:f9:c3:e2:c9:9a:44:a9:19:59:91:9e:af:
                    60:fb:e2:4c:19:c5:db:24:8a:ee:33:0c:96:3e:c6:
                    be:06:74:dd:c6:df:60:e2:46:03:04:0b:cd:58:1a:
                    19:95:2b:89:e3:78:cb:56:e9:3b:a7:96:9a:b3:47:
                    ce:a6:61:e7:ac:8a:49:4b:78:c2:ec:9d:52:3c:45:
                    a8:22:99:6e:24:ee:0b:12:6a:f7:81:be:81:eb:a1:
                    f6:e0:1d:12:90:b4:6d:90:61:4f:bb:96:e7:63:58:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:1A:7D:B3:2A:69:67:78:22:F0:F2:91:54:BE:DF:0D:96:86:21
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dac844f2-a729-4ff7-bb65-b32f431c3248/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dac844f2-a729-4ff7-bb65-b32f431c3248/dac844f2-a729-4ff7-bb65-b32f431c3248.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.231.196.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394585

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:de:e6:8f:09:ed:b5:b7:51:4e:8f:f9:43:08:99:5d:b9:dd:
         5c:f1:5c:7e:78:3b:06:3d:8e:d1:40:cd:ba:3b:fc:60:5c:06:
         64:80:c1:99:cd:d1:12:f5:b0:17:be:cd:6b:e4:1b:ef:30:b0:
         c4:6b:e1:24:12:70:c2:0f:b7:95:4b:08:bf:e1:62:da:37:23:
         5e:b5:bb:67:8f:3f:45:28:b6:f3:4a:85:6c:65:ac:7a:54:42:
         d0:46:5e:a3:43:b9:36:07:4f:12:a3:a1:5a:d6:bf:a5:eb:75:
         35:cc:c0:1f:dd:37:d4:21:fe:61:09:80:88:b3:02:d7:f4:e1:
         fe:6e:2a:87:96:d7:6b:b1:45:25:ba:d6:60:ae:94:1c:7b:29:
         ea:4f:09:17:c4:cf:cb:09:7c:b3:5f:55:66:92:ab:8a:e8:65:
         58:54:0d:64:ac:da:0a:50:e0:f1:76:51:b8:2b:27:f7:83:e5:
         83:0c:9e:95:1a:f9:f4:8c:6b:64:16:54:69:3a:61:92:a3:d3:
         a0:69:32:4e:cb:15:3c:17:72:28:dc:d4:0b:70:1f:c2:28:0d:
         60:07:08:b9:ec:f7:34:86:9b:b9:34:11:74:46:82:60:cb:e9:
         c0:07:3d:19:0b:c7:32:1f:88:e4:c2:62:40:79:21:0a:a1:90:
         3c:93:07:24
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEc3iP8/Spb53Rez3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI0MDkxNTAwNDUyNloXDTI2MTIxOTAxNDUyNlowLzEtMCsGA1UEAxMk
ZGFjODQ0ZjItYTcyOS00ZmY3LWJiNjUtYjMyZjQzMWMzMjQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBaYvWTdfwurw7iZG9c7ARLX0shJiOjMmupv
VTdfg0vPYB7xq6u6/vtvn47eAuVH/cEgp+1sLSW/94MTHX5jFyMZQCFdC6eE/Qa/
wvkO+b1c4Wt2GQVs+l68kpx5okjc5R0lyHemBsXYIpMD+FA3V/eslntXAQNi/3ir
A9Esk0DcQ+xZ0fr3+UE0R7ex8tWB1IY+J2xyFiP5w+LJmkSpGVmRnq9g++JMGcXb
JIruMwyWPsa+BnTdxt9g4kYDBAvNWBoZlSuJ43jLVuk7p5aas0fOpmHnrIpJS3jC
7J1SPEWoIpluJO4LEmr3gb6B66H24B0SkLRtkGFPu5bnY1gxtQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFLWDGn2zKmlneCLw8pFUvt8NloYhMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9k
YWM4NDRmMi1hNzI5LTRmZjctYmI2NS1iMzJmNDMxYzMyNDgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2RhYzg0NGYyLWE3MjktNGZmNy1i
YjY1LWIzMmY0MzFjMzI0OC9kYWM4NDRmMi1hNzI5LTRmZjctYmI2NS1iMzJmNDMx
YzMyNDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADM58QwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BgVZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAB3e5o8J7bW3UU6P+UMImV253VzxXH54OwY9jtFAzbo7/GBc
BmSAwZnN0RL1sBe+zWvkG+8wsMRr4SQScMIPt5VLCL/hYto3I161u2ePP0UotvNK
hWxlrHpUQtBGXqNDuTYHTxKjoVrWv6XrdTXMwB/dN9Qh/mEJgIizAtf04f5uKoeW
12uxRSW61mCulBx7KepPCRfEz8sJfLNfVWaSq4roZVhUDWSs2gpQ4PF2UbgrJ/eD
5YMMnpUa+fSMa2QWVGk6YZKj06BpMk7LFTwXcijc1AtwH8IoDWAHCLns9zSGm7k0
EXRGgmDL6cAHPRkLxzIfiOTCYkB5IQqhkDyTByQ=
-----END CERTIFICATE-----