Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e.cer
File:                     fedbf02b-de87-4991-b290-2a4b996f676e.cer (raw, json)
Hash identifier:          h7JwUVdx+rYQH+3eYSVFUDqgKNzqV3p6byj/Mp9xzRU=
Subject key identifier:   04:2B:D7:75:B3:A8:34:C3:B8:84:AF:1C:04:9A:B2:51:53:F9:47:08
Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B
Certificate issuer:       /CN=746e0111-fafb-430f-b778-d204cfcd99a8
Certificate serial:       010D0C9F43285844C64D80F476333E2B013E6900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/fedbf02b-de87-4991-b290-2a4b996f676e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 04 Feb 2024 01:45:21 +0000
Certificate not after:    Sat 09 May 2026 00:45:21 +0000
Subordinate resources:    AS: 394244
                          IP: 199.33.116.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c6:4d:80:f4:76:33:3e:2b:01:3e:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8
        Validity
            Not Before: Feb  4 01:45:21 2024 GMT
            Not After : May  9 00:45:21 2026 GMT
        Subject: CN=fedbf02b-de87-4991-b290-2a4b996f676e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:ed:bd:bb:86:3a:8a:d9:4a:c5:63:6c:ec:
                    83:da:b2:f1:6f:3b:eb:ff:25:bc:86:81:1f:3e:b0:
                    2d:03:47:c5:64:82:33:93:dd:8a:56:61:fc:44:10:
                    6b:28:66:53:89:a2:66:b0:1a:20:7f:03:fb:cd:87:
                    80:10:71:b4:b8:18:d7:c9:33:51:5d:78:e5:e2:2d:
                    f7:fe:e5:2c:df:eb:69:75:4a:cd:81:04:f9:13:e2:
                    bd:6f:be:3b:50:7c:8c:e8:47:5e:ba:35:62:92:56:
                    d9:36:4d:f2:28:c4:35:c3:b6:4a:a3:61:e3:1a:9f:
                    3e:da:c0:64:79:58:e9:60:e5:ec:20:07:42:35:22:
                    c6:4a:97:b5:a9:50:f9:0e:2a:a7:9d:70:8d:a7:3f:
                    4d:7a:20:b4:8f:09:0c:27:46:80:b9:17:59:a0:bc:
                    9d:90:6a:ce:7b:db:9e:9e:5d:28:b5:50:94:80:b0:
                    d2:f3:63:c7:df:e3:81:c0:e5:a7:4d:7b:18:a6:87:
                    4d:60:64:f5:3f:3d:8c:b4:5e:85:bb:c8:35:65:60:
                    42:bb:7c:4b:1e:e8:8c:5b:3f:b7:d5:d9:18:e2:a6:
                    68:1f:8a:f3:53:23:70:e4:68:d2:09:db:61:b7:5a:
                    2d:cf:ed:0e:2d:36:9c:4c:d2:7c:a3:0a:dc:9b:67:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2B:D7:75:B3:A8:34:C3:B8:84:AF:1C:04:9A:B2:51:53:F9:47:08
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/fedbf02b-de87-4991-b290-2a4b996f676e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl

            X509v3 Authority Key Identifier:
                keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.116.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394244

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:97:47:a9:98:61:78:62:d6:0d:b8:53:ef:6c:d0:fa:5c:6f:
         ec:d9:20:2f:98:52:52:3b:e1:ad:bd:28:e5:b3:e3:2b:b2:40:
         cb:ea:e9:ba:c0:5c:0d:e8:86:c7:6a:1b:14:7c:9d:31:fc:67:
         39:d6:31:e9:d3:9b:52:75:9b:1d:2c:43:93:6e:90:f6:c8:a9:
         5e:2f:9f:ea:c9:3f:d0:0d:5e:74:db:e5:30:d7:20:2d:90:d2:
         3c:97:90:77:a1:16:ff:8a:78:3b:e5:c4:83:af:2f:91:c5:14:
         3f:fc:0b:9a:ca:2e:5e:79:2d:4a:a5:f6:6e:35:29:fb:91:6a:
         4d:b6:63:de:65:36:f8:a4:4b:b4:17:ff:70:0d:41:49:0b:6b:
         dd:e5:71:a8:25:5c:a5:6c:a3:a3:42:98:e1:d1:19:48:0c:e1:
         35:af:f7:c0:18:85:f8:4f:81:d0:fb:6e:47:a9:c8:a4:70:1e:
         ac:5f:0b:6f:13:bf:10:43:0f:75:ff:d8:53:ba:5b:6a:35:36:
         bb:78:0d:d6:82:3c:45:5f:b5:80:1f:08:7d:a9:77:93:7c:60:
         78:6b:e1:fc:50:90:43:50:7c:1a:9e:29:7f:67:f3:d5:86:99:
         84:00:fe:38:76:4b:e6:b6:d1:c1:35:d4:43:4f:13:00:8b:65:
         7b:11:8d:29
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWETGTYD0djM+KwE+aQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5
OWE4MB4XDTI0MDIwNDAxNDUyMVoXDTI2MDUwOTAwNDUyMVowLzEtMCsGA1UEAxMk
ZmVkYmYwMmItZGU4Ny00OTkxLWIyOTAtMmE0Yjk5NmY2NzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqftvbuGOorZSsVjbOyD2rLxbzvr/yW8hoEf
PrAtA0fFZIIzk92KVmH8RBBrKGZTiaJmsBogfwP7zYeAEHG0uBjXyTNRXXjl4i33
/uUs3+tpdUrNgQT5E+K9b747UHyM6EdeujViklbZNk3yKMQ1w7ZKo2HjGp8+2sBk
eVjpYOXsIAdCNSLGSpe1qVD5DiqnnXCNpz9NeiC0jwkMJ0aAuRdZoLydkGrOe9ue
nl0otVCUgLDS82PH3+OBwOWnTXsYpodNYGT1Pz2MtF6Fu8g1ZWBCu3xLHuiMWz+3
1dkY4qZoH4rzUyNw5GjSCdtht1otz+0OLTacTNJ8owrcm2dX3QIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFAQr13WzqDTDuISvHASaslFT+UcIMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9m
ZWRiZjAyYi1kZTg3LTQ5OTEtYjI5MC0yYTRiOTk2ZjY3NmUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt
ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2ZlZGJmMDJiLWRlODctNDk5MS1i
MjkwLTJhNGI5OTZmNjc2ZS9mZWRiZjAyYi1kZTg3LTQ5OTEtYjI5MC0yYTRiOTk2
ZjY3NmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw
MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz
MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc
vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0
NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHHIXQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BgQEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALGXR6mYYXhi1g24U+9s0Ppcb+zZIC+YUlI74a29KOWz4yuy
QMvq6brAXA3ohsdqGxR8nTH8ZznWMenTm1J1mx0sQ5NukPbIqV4vn+rJP9ANXnTb
5TDXIC2Q0jyXkHehFv+KeDvlxIOvL5HFFD/8C5rKLl55LUql9m41KfuRak22Y95l
NvikS7QX/3ANQUkLa93lcaglXKVso6NCmOHRGUgM4TWv98AYhfhPgdD7bkepyKRw
HqxfC28TvxBDD3X/2FO6W2o1Nrt4DdaCPEVftYAfCH2pd5N8YHhr4fxQkENQfBqe
KX9n89WGmYQA/jh2S+a20cE11ENPEwCLZXsRjSk=
-----END CERTIFICATE-----