Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ec605926-d989-4f1a-a715-48237b84b83e.cer
File:                     ec605926-d989-4f1a-a715-48237b84b83e.cer (raw, json)
Hash identifier:          T5zLBkCGFTaEsnQkGoEakXpBGtl/nf4QQijstZtLhGk=
Subject key identifier:   31:04:DA:DC:C9:91:D3:D8:C8:02:88:BB:D3:D1:B3:80:76:CF:97:C1
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285845C706A577E16504F097838A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ec605926-d989-4f1a-a715-48237b84b83e/ec605926-d989-4f1a-a715-48237b84b83e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ec605926-d989-4f1a-a715-48237b84b83e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 06 May 2024 00:45:19 +0000
Certificate not after:    Sun 09 Aug 2026 00:45:19 +0000
Subordinate resources:    AS: 62538
                          IP: 23.157.112.0/23
                          IP: 2605:c640::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c7:06:a5:77:e1:65:04:f0:97:83:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: May  6 00:45:19 2024 GMT
            Not After : Aug  9 00:45:19 2026 GMT
        Subject: CN=ec605926-d989-4f1a-a715-48237b84b83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f5:8a:79:5c:9a:5c:21:39:fb:2b:34:94:c9:
                    a0:85:3c:43:80:18:f2:f1:78:22:0c:fe:33:00:0e:
                    40:c8:fa:ee:80:bf:fe:09:ae:86:c5:ba:86:b2:73:
                    d0:1d:38:ce:f9:9e:87:2f:1e:3b:ff:b4:08:7d:e7:
                    fe:2e:68:f5:c8:45:ea:6c:39:63:06:fe:bb:07:ca:
                    14:dc:2a:0b:5c:36:73:a5:16:fc:b5:05:78:c5:4e:
                    d8:0d:8b:ef:0d:89:90:67:20:ae:eb:45:1c:c8:76:
                    a9:1a:7f:31:25:b5:b5:43:76:d3:65:db:69:f4:b7:
                    4a:bd:57:a5:9b:17:43:47:07:73:bd:61:bc:53:43:
                    a7:a3:c4:f4:3e:1a:b6:4b:19:ef:ae:2b:7d:d5:e8:
                    0a:36:72:6e:00:36:36:d1:04:71:60:94:36:ff:5a:
                    3c:2b:02:e5:b8:2c:20:b9:91:40:7e:66:75:f8:0a:
                    62:47:e9:bc:50:04:2a:bf:40:d6:06:21:c3:74:15:
                    59:95:64:30:48:bb:be:1b:3c:da:db:7e:53:ec:0c:
                    b0:2f:f1:33:85:0d:b3:ef:1e:d2:31:b9:5e:ce:69:
                    d6:4d:66:ff:3c:7f:59:af:3c:56:cb:e3:a9:a2:48:
                    d5:78:c9:74:de:f1:1a:f0:d4:93:2c:af:03:9c:14:
                    86:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:04:DA:DC:C9:91:D3:D8:C8:02:88:BB:D3:D1:B3:80:76:CF:97:C1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ec605926-d989-4f1a-a715-48237b84b83e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ec605926-d989-4f1a-a715-48237b84b83e/ec605926-d989-4f1a-a715-48237b84b83e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.112.0/23
                IPv6:
                  2605:c640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62538

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c4:b0:c9:18:46:f8:01:7c:ad:89:74:f3:c3:c8:91:da:61:
         c4:bf:69:cb:89:58:99:87:bc:49:59:86:86:f7:8a:65:20:a0:
         7b:27:7a:ac:51:c4:46:56:67:0c:9a:b1:f5:6e:90:a1:e7:d8:
         31:97:8f:34:63:0f:66:1f:d8:a7:50:aa:1c:91:80:5a:5b:b0:
         18:79:d9:da:42:e5:45:5c:cf:62:17:3f:69:1e:26:41:4b:0e:
         e7:80:6c:fd:b8:ed:3d:5c:54:19:8f:08:31:12:2f:30:50:b6:
         e8:a2:28:9c:d6:0d:5d:c0:e9:77:e3:a0:51:c4:ef:fc:de:59:
         e6:db:4d:dd:bb:ee:f3:68:e2:21:23:fb:47:90:a6:17:d5:90:
         e9:c0:c4:7f:e9:0d:fd:62:1f:4e:d0:73:8b:cd:85:cc:f0:af:
         7e:6e:bd:74:92:67:9b:22:44:15:05:4e:e2:f2:3d:6c:eb:94:
         cd:14:e4:20:07:bf:dd:71:2e:3a:ed:30:bc:75:8e:49:1d:48:
         10:79:ab:53:28:39:6e:0a:fa:a1:2a:19:31:11:6f:ac:87:67:
         ac:0a:60:16:67:b0:f1:ba:75:cf:95:19:2b:72:2c:f9:b4:91:
         e2:b8:f3:b6:bb:f4:82:5d:34:ca:d8:da:28:62:8b:7a:e7:35:
         af:25:7a:71
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEXHBqV34WUE8JeDioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI0MDUwNjAwNDUxOVoXDTI2MDgwOTAwNDUxOVowLzEtMCsGA1UEAxMk
ZWM2MDU5MjYtZDk4OS00ZjFhLWE3MTUtNDgyMzdiODRiODNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvWKeVyaXCE5+ys0lMmghTxDgBjy8XgiDP4z
AA5AyPrugL/+Ca6GxbqGsnPQHTjO+Z6HLx47/7QIfef+Lmj1yEXqbDljBv67B8oU
3CoLXDZzpRb8tQV4xU7YDYvvDYmQZyCu60UcyHapGn8xJbW1Q3bTZdtp9LdKvVel
mxdDRwdzvWG8U0Ono8T0Phq2Sxnvrit91egKNnJuADY20QRxYJQ2/1o8KwLluCwg
uZFAfmZ1+ApiR+m8UAQqv0DWBiHDdBVZlWQwSLu+Gzza235T7AywL/EzhQ2z7x7S
MblezmnWTWb/PH9ZrzxWy+OpokjVeMl03vEa8NSTLK8DnBSG4QIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFDEE2tzJkdPYyAKIu9PRs4B2z5fBMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9l
YzYwNTkyNi1kOTg5LTRmMWEtYTcxNS00ODIzN2I4NGI4M2UvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2VjNjA1OTI2LWQ5ODktNGYxYS1h
NzE1LTQ4MjM3Yjg0YjgzZS9lYzYwNTkyNi1kOTg5LTRmMWEtYTcxNS00ODIzN2I4
NGI4M2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBAEXnXAwDQQCAAIwBwMFACYFxkAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAPRKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEbEsMkYRvgBfK2JdPPDyJHaYcS/
acuJWJmHvElZhob3imUgoHsneqxRxEZWZwyasfVukKHn2DGXjzRjD2Yf2KdQqhyR
gFpbsBh52dpC5UVcz2IXP2keJkFLDueAbP247T1cVBmPCDESLzBQtuiiKJzWDV3A
6XfjoFHE7/zeWebbTd277vNo4iEj+0eQphfVkOnAxH/pDf1iH07Qc4vNhczwr35u
vXSSZ5siRBUFTuLyPWzrlM0U5CAHv91xLjrtMLx1jkkdSBB5q1MoOW4K+qEqGTER
b6yHZ6wKYBZnsPG6dc+VGStyLPm0keK487a79IJdNMrY2ihii3rnNa8lenE=
-----END CERTIFICATE-----