Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862.cer
File:                     44b5f84d-3917-4ce9-99a1-9bded53bb862.cer (raw, json)
Hash identifier:          66JrFIokYmFEO/u5uJYBW5nn8eLyuqzQx6aAHvzmMQY=
Subject key identifier:   F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285842FF223B53974B4D20C2025C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 25 Aug 2023 00:45:21 +0000
Certificate not after:    Thu 27 Nov 2025 01:45:21 +0000
Subordinate resources:    AS: 398841
                          IP: 64.190.206.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ff:22:3b:53:97:4b:4d:20:c2:02:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug 25 00:45:21 2023 GMT
            Not After : Nov 27 01:45:21 2025 GMT
        Subject: CN=44b5f84d-3917-4ce9-99a1-9bded53bb862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4b:bf:ac:34:ee:e9:c7:84:40:3e:01:06:cc:
                    d3:d4:73:a4:cc:c9:ac:cc:ae:87:4f:c9:7e:8c:38:
                    12:69:b6:17:57:6a:3b:07:34:fb:b8:a2:60:ff:ef:
                    43:1e:fb:26:ba:17:89:66:a1:bf:84:70:9b:b2:ff:
                    63:1d:bc:e2:f8:b1:b0:76:d0:0d:db:04:52:47:29:
                    8c:b5:02:25:b5:68:c8:1e:40:1b:0e:c6:e4:e0:4d:
                    21:68:ca:93:b0:46:6c:7a:2b:76:79:fd:f5:bf:26:
                    16:7f:e5:0d:9a:02:9f:c5:fd:05:45:ba:96:43:90:
                    b6:54:52:12:1e:d8:37:0e:73:1b:49:45:26:13:7d:
                    94:1d:3b:cf:5c:63:78:fc:cb:54:d0:a5:6f:47:c5:
                    db:88:c2:e9:84:fc:53:a8:96:97:bd:8f:78:ca:6d:
                    e8:00:d0:44:b2:ca:aa:64:e2:76:af:24:d5:4c:62:
                    a8:d6:d2:05:0a:b2:40:05:d2:b0:26:08:46:ce:0f:
                    ab:83:00:4b:53:9b:d3:5d:98:e7:cd:c1:6d:72:55:
                    ff:ea:6e:2b:f9:51:a9:25:9f:da:21:03:81:cd:1d:
                    86:c5:1d:5f:52:ac:59:f2:0e:7f:b9:bb:9b:d0:38:
                    eb:dd:5e:2a:67:84:3f:50:1d:ff:92:f0:c2:fa:ca:
                    51:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:34:8E:21:9E:BD:32:34:08:9F:F6:DA:D3:D3:89:90:5B:84:AE:81
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/44b5f84d-3917-4ce9-99a1-9bded53bb862/44b5f84d-3917-4ce9-99a1-9bded53bb862.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.206.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398841

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:23:07:f8:bb:1e:f7:99:ce:a1:9a:39:8b:f5:54:9a:e3:df:
         31:40:1e:e3:55:cc:fa:e5:57:62:c9:3a:0f:5a:c1:ce:29:c5:
         e6:da:36:17:2b:dc:57:6b:13:c3:0a:14:d5:9d:ac:1d:78:71:
         d5:df:c8:38:a2:7d:ac:48:34:35:b2:62:dd:e6:ed:b3:84:f7:
         bc:6d:b9:21:19:67:51:53:95:2f:10:95:d8:15:64:7a:22:a8:
         63:7f:ce:78:c7:f8:a4:bb:5a:f0:5a:17:aa:8d:5a:12:26:b9:
         24:3a:e9:4a:ae:44:56:a1:b0:ab:5b:70:45:fb:c7:b5:b4:b2:
         a3:17:f2:cb:97:e6:ab:f7:08:a6:3c:51:a4:57:ab:dd:73:21:
         36:bf:18:70:9e:88:01:a0:90:25:6f:16:7e:2a:ec:91:18:02:
         60:bd:76:3f:c0:0f:be:75:67:5a:af:8f:b4:49:39:4d:76:eb:
         d0:f2:dd:7e:da:cf:cd:5d:a7:a0:b6:77:1f:50:09:95:c8:64:
         36:b3:d6:32:70:a3:13:15:46:55:38:40:98:ce:e2:40:71:ca:
         6a:79:ce:e8:c4:06:ba:fb:a3:04:fc:6a:15:07:cd:84:0f:75:
         9e:98:87:dd:cd:b1:3d:2c:a9:a3:25:ce:32:b8:cb:41:d2:34:
         7c:f2:4b:bb
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEL/IjtTl0tNIMICXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMDgyNTAwNDUyMVoXDTI1MTEyNzAxNDUyMVowLzEtMCsGA1UEAxMk
NDRiNWY4NGQtMzkxNy00Y2U5LTk5YTEtOWJkZWQ1M2JiODYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Eu/rDTu6ceEQD4BBszT1HOkzMmszK6HT8l+
jDgSabYXV2o7BzT7uKJg/+9DHvsmuheJZqG/hHCbsv9jHbzi+LGwdtAN2wRSRymM
tQIltWjIHkAbDsbk4E0haMqTsEZseit2ef31vyYWf+UNmgKfxf0FRbqWQ5C2VFIS
Htg3DnMbSUUmE32UHTvPXGN4/MtU0KVvR8XbiMLphPxTqJaXvY94ym3oANBEssqq
ZOJ2ryTVTGKo1tIFCrJABdKwJghGzg+rgwBLU5vTXZjnzcFtclX/6m4r+VGpJZ/a
IQOBzR2GxR1fUqxZ8g5/ubub0Djr3V4qZ4Q/UB3/kvDC+spRnQIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFPY0jiGevTI0CJ/22tPTiZBbhK6BMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80
NGI1Zjg0ZC0zOTE3LTRjZTktOTlhMS05YmRlZDUzYmI4NjIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzQ0YjVmODRkLTM5MTctNGNlOS05
OWExLTliZGVkNTNiYjg2Mi80NGI1Zjg0ZC0zOTE3LTRjZTktOTlhMS05YmRlZDUz
YmI4NjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBABAvs4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
BhX5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABMjB/i7HveZzqGaOYv1VJrj3zFAHuNVzPrlV2LJOg9awc4p
xebaNhcr3FdrE8MKFNWdrB14cdXfyDiifaxINDWyYt3m7bOE97xtuSEZZ1FTlS8Q
ldgVZHoiqGN/znjH+KS7WvBaF6qNWhImuSQ66UquRFahsKtbcEX7x7W0sqMX8suX
5qv3CKY8UaRXq91zITa/GHCeiAGgkCVvFn4q7JEYAmC9dj/AD751Z1qvj7RJOU12
69Dy3X7az81dp6C2dx9QCZXIZDaz1jJwoxMVRlU4QJjO4kBxymp5zujEBrr7owT8
ahUHzYQPdZ6Yh93NsT0sqaMlzjK4y0HSNHzyS7s=
-----END CERTIFICATE-----