Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer
File:                     e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer (raw, json)
Hash identifier:          k/ExS/4WElSbDNmn+vpTqGztr5hENljUL26MNo0BEWs=
Subject key identifier:   E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F4328584398ADCC301A1A361E9F552700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Oct 2023 00:45:15 +0000
Certificate not after:    Wed 21 Jan 2026 01:45:15 +0000
Subordinate resources:    AS: 398999
                          IP: 172.98.29.0/24
                          IP: 2602:fb41::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:98:ad:cc:30:1a:1a:36:1e:9f:55:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Oct 19 00:45:15 2023 GMT
            Not After : Jan 21 01:45:15 2026 GMT
        Subject: CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:00:44:01:5b:6d:c0:86:f0:02:01:dd:47:5c:
                    f4:ce:37:cc:46:d1:45:82:6f:ca:eb:63:67:bb:76:
                    8c:2b:a4:93:e1:34:5b:eb:5e:e1:8b:fa:99:d7:6c:
                    a2:2c:f3:c3:3c:e0:09:c1:fc:7e:4a:24:5d:2d:36:
                    d4:63:9a:30:f0:69:d7:c1:90:a2:06:63:2e:4a:23:
                    e5:76:4a:de:3a:6b:67:cf:05:50:10:9b:ca:c1:14:
                    c2:5f:13:95:37:df:fa:8a:78:22:e7:4b:f7:8c:60:
                    c6:22:d1:a3:a0:7f:aa:e6:af:40:90:cb:a4:24:2a:
                    99:b9:69:cf:11:fa:54:62:40:6e:74:7a:09:95:4c:
                    49:13:76:7a:c3:ea:d8:83:ed:c2:a5:97:a5:2a:dd:
                    dd:b1:22:4a:20:93:0d:7f:0f:6b:81:88:e6:00:42:
                    3b:10:60:13:4c:2a:b8:2e:08:bb:2c:ba:50:24:97:
                    18:ca:f1:eb:af:9b:f0:cf:b9:9f:9e:6c:c0:10:c6:
                    00:2e:e6:ec:d7:00:50:c0:e6:d5:c4:6c:5d:c5:17:
                    98:69:55:b6:03:8f:af:62:60:3b:bb:12:69:81:21:
                    7c:1a:5d:91:ab:1b:2d:a3:68:ac:26:5e:60:22:29:
                    96:87:c1:ce:e5:af:d5:bc:9f:39:bd:fe:1e:8a:e6:
                    16:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.29.0/24
                IPv6:
                  2602:fb41::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398999

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:6d:98:00:ed:c4:9a:72:b3:d1:1b:47:e9:0f:f7:3c:3e:df:
         13:28:8d:39:53:5e:f7:eb:7a:51:de:c2:e5:f6:ce:73:a2:5c:
         1b:8e:01:97:c7:1e:c7:6a:c0:ae:78:36:99:4b:60:23:b1:f7:
         62:4f:bb:fa:c5:6a:53:b6:66:ad:4a:b7:97:d9:75:69:9e:39:
         9c:a0:ac:a4:08:2d:d3:ec:f2:78:e0:1d:fb:e0:96:e0:00:d6:
         6e:01:0a:d5:e0:c4:bf:b0:17:a5:54:b8:e8:33:bd:79:df:a7:
         32:81:43:e2:0c:aa:13:61:c5:9d:4a:22:d7:11:a7:23:bc:5e:
         f2:4f:97:7a:56:95:d6:e6:1a:4c:f5:ef:69:30:3d:1d:97:e6:
         c6:b8:8e:fb:86:e6:0a:2c:69:57:9f:61:41:b8:f5:e8:cc:d3:
         5b:49:02:65:d2:86:f5:98:a2:49:25:78:d7:1a:43:d6:78:ff:
         25:a9:2d:4f:7f:93:c4:f6:c6:5c:9b:68:18:e0:09:42:21:cf:
         5b:2a:de:01:b8:ad:33:25:e5:46:1d:ee:4b:11:2b:a5:f5:a7:
         a2:6c:71:94:fe:30:12:e2:72:92:89:c9:58:5f:13:b8:0f:90:
         f1:85:0d:c2:fb:8f:4d:27:15:41:d8:71:a4:3a:71:d9:47:2b:
         fc:c7:de:e1
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEOYrcwwGho2Hp9VJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMTAxOTAwNDUxNVoXDTI2MDEyMTAxNDUxNVowLzEtMCsGA1UEAxMk
ZTQ3MGViNGUtZDIxNC00MWRjLThmMGQtOWExOTM2ZWNjNzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgABEAVttwIbwAgHdR1z0zjfMRtFFgm/K62Nn
u3aMK6ST4TRb617hi/qZ12yiLPPDPOAJwfx+SiRdLTbUY5ow8GnXwZCiBmMuSiPl
dkreOmtnzwVQEJvKwRTCXxOVN9/6ingi50v3jGDGItGjoH+q5q9AkMukJCqZuWnP
EfpUYkBudHoJlUxJE3Z6w+rYg+3CpZelKt3dsSJKIJMNfw9rgYjmAEI7EGATTCq4
Lgi7LLpQJJcYyvHrr5vwz7mfnmzAEMYALubs1wBQwObVxGxdxReYaVW2A4+vYmA7
uxJpgSF8Gl2Rqxsto2isJl5gIimWh8HO5a/VvJ85vf4eiuYWRQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFOSwofhhtJLNkw6r4mWvvqW1Z7bxMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9l
NDcwZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5MzZlY2M3NzgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2U0NzBlYjRlLWQyMTQtNDFkYy04
ZjBkLTlhMTkzNmVjYzc3OC9lNDcwZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5MzZl
Y2M3NzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBACsYh0wDgQCAAIwCAMGBCYC+0EAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYWlzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7bZgA7cSacrPRG0fpD/c8Pt8T
KI05U17363pR3sLl9s5zolwbjgGXxx7HasCueDaZS2AjsfdiT7v6xWpTtmatSreX
2XVpnjmcoKykCC3T7PJ44B374JbgANZuAQrV4MS/sBelVLjoM71536cygUPiDKoT
YcWdSiLXEacjvF7yT5d6VpXW5hpM9e9pMD0dl+bGuI77huYKLGlXn2FBuPXozNNb
SQJl0ob1mKJJJXjXGkPWeP8lqS1Pf5PE9sZcm2gY4AlCIc9bKt4BuK0zJeVGHe5L
ESul9aeibHGU/jAS4nKSiclYXxO4D5DxhQ3C+49NJxVB2HGkOnHZRyv8x97h
-----END CERTIFICATE-----