Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24.cer
File:                     f8377ba0-d92d-4969-a666-84ce4e67eb24.cer (raw, json)
Hash identifier:          P2EXTeX8C5+E4Hr65AYSa6WBqku2Rc5lK8p2FCRSyng=
Subject key identifier:   FE:5F:C0:80:58:74:0D:BE:B7:4A:A8:60:2D:D3:71:E8:85:23:D1:18
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285842FC579074A5F6784016C10480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/f8377ba0-d92d-4969-a666-84ce4e67eb24.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 24 Aug 2023 00:45:23 +0000
Certificate not after:    Wed 26 Nov 2025 01:45:23 +0000
Subordinate resources:    AS: 4195
                          AS: 4210
                          IP: 149.77.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fc:57:90:74:a5:f6:78:40:16:c1:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Aug 24 00:45:23 2023 GMT
            Not After : Nov 26 01:45:23 2025 GMT
        Subject: CN=f8377ba0-d92d-4969-a666-84ce4e67eb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:25:0e:f4:30:39:a0:d9:d5:d8:1d:6d:27:
                    6f:a8:5a:75:41:2d:13:d6:91:0f:16:3b:b7:b3:77:
                    aa:c5:58:bf:33:4f:1f:9f:97:89:4b:ae:4c:0b:d9:
                    b4:6a:4d:45:8a:ac:5f:be:46:44:f7:72:bd:32:e0:
                    1e:2e:fd:c6:34:02:ba:a7:33:f0:53:18:17:97:56:
                    eb:e3:dc:66:21:a5:4d:84:fd:6d:f5:b6:1c:4a:bf:
                    9c:8e:61:26:41:aa:cc:53:bf:d2:70:9d:8e:81:53:
                    0d:17:59:a8:25:d3:f6:a8:b6:34:2b:31:b5:15:a0:
                    e8:f7:2a:4a:b8:48:b8:56:78:6c:bd:90:85:f7:f7:
                    70:9a:21:20:c4:30:0a:7d:db:d2:7c:b3:df:a6:6d:
                    52:15:98:a8:2a:8b:19:51:cf:d1:6e:fe:11:0d:53:
                    33:e5:27:8b:63:7a:13:db:0d:a4:69:33:65:a8:22:
                    23:42:d4:16:ed:3f:98:c4:c4:43:e0:2c:dd:b7:85:
                    97:01:27:c4:ea:f4:55:2b:32:21:07:6d:14:e0:a9:
                    88:83:39:14:ed:1a:ce:49:f5:f2:3e:45:6a:b1:09:
                    96:28:45:6a:45:90:c5:7d:d4:c7:bb:77:65:d8:d1:
                    56:55:47:a9:31:de:04:2b:4a:dc:55:51:74:f6:9c:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5F:C0:80:58:74:0D:BE:B7:4A:A8:60:2D:D3:71:E8:85:23:D1:18
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/f8377ba0-d92d-4969-a666-84ce4e67eb24.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.77.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4195
                  4210

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fe:e6:53:69:58:2d:6e:ad:0d:16:95:9d:db:bd:49:03:b1:
         a1:7a:0b:d1:cb:1b:0b:9a:64:c2:97:25:c0:30:f8:c6:71:62:
         46:0d:94:0c:99:6b:84:d7:f8:7e:c4:3a:2c:f1:cb:ab:68:ef:
         0c:ea:fc:dd:9b:eb:59:c8:57:9c:6f:82:35:0f:cf:31:e0:20:
         37:0d:71:1d:28:ec:f7:94:f7:1c:17:53:8e:1e:32:1a:02:5f:
         83:6f:8b:25:f7:2a:43:e5:29:7f:ad:e3:de:bf:67:29:d1:a8:
         6c:e3:51:1f:5d:91:69:f3:d6:1c:16:65:94:37:d5:e3:4a:c3:
         17:c2:79:b7:38:54:a6:e6:b5:57:cd:51:05:bc:3d:f9:02:84:
         01:65:2d:49:d4:4a:7c:2b:14:32:56:67:a3:5f:2f:c3:4d:07:
         76:bc:d6:a0:b2:f6:32:d5:10:22:bb:97:b3:60:e1:65:15:46:
         af:27:3e:29:da:88:6c:bb:41:f6:c2:8c:85:4b:d5:85:6d:0d:
         24:89:50:bf:d4:21:d0:33:61:08:78:81:eb:65:4e:f9:b2:fc:
         7a:0b:8c:63:59:66:db:75:51:45:89:e7:e6:b6:cb:a3:e8:74:
         ee:92:15:b5:d6:13:c9:17:ec:3f:72:10:a7:b6:cd:79:f4:ba:
         fa:86:c5:76
-----BEGIN CERTIFICATE-----
MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEL8V5B0pfZ4QBbBBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTIzMDgyNDAwNDUyM1oXDTI1MTEyNjAxNDUyM1owLzEtMCsGA1UEAxMk
ZjgzNzdiYTAtZDkyZC00OTY5LWE2NjYtODRjZTRlNjdlYjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1wlDvQwOaDZ1dgdbSdvqFp1QS0T1pEPFju3
s3eqxVi/M08fn5eJS65MC9m0ak1FiqxfvkZE93K9MuAeLv3GNAK6pzPwUxgXl1br
49xmIaVNhP1t9bYcSr+cjmEmQarMU7/ScJ2OgVMNF1moJdP2qLY0KzG1FaDo9ypK
uEi4VnhsvZCF9/dwmiEgxDAKfdvSfLPfpm1SFZioKosZUc/Rbv4RDVMz5SeLY3oT
2w2kaTNlqCIjQtQW7T+YxMRD4Czdt4WXASfE6vRVKzIhB20U4KmIgzkU7RrOSfXy
PkVqsQmWKEVqRZDFfdTHu3dl2NFWVUepMd4EK0rcVVF09pyd4wIDAQABo4IEHTCC
BBkwHQYDVR0OBBYEFP5fwIBYdA2+t0qoYC3TceiFI9EYMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9m
ODM3N2JhMC1kOTJkLTQ5NjktYTY2Ni04NGNlNGU2N2ViMjQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2Y4Mzc3YmEwLWQ5MmQtNDk2OS1h
NjY2LTg0Y2U0ZTY3ZWIyNC9mODM3N2JhMC1kOTJkLTQ5NjktYTY2Ni04NGNlNGU2
N2ViMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCVTTAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIQ
YwICEHIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAef7mU2lYLW6tDRaVndu9SQOxoXoL0csbC5pkwpclwDD4
xnFiRg2UDJlrhNf4fsQ6LPHLq2jvDOr83ZvrWchXnG+CNQ/PMeAgNw1xHSjs95T3
HBdTjh4yGgJfg2+LJfcqQ+Upf63j3r9nKdGobONRH12RafPWHBZllDfV40rDF8J5
tzhUpua1V81RBbw9+QKEAWUtSdRKfCsUMlZno18vw00HdrzWoLL2MtUQIruXs2Dh
ZRVGryc+KdqIbLtB9sKMhUvVhW0NJIlQv9Qh0DNhCHiB62VO+bL8eguMY1lm23VR
RYnn5rbLo+h07pIVtdYTyRfsP3IQp7bNefS6+obFdg==
-----END CERTIFICATE-----