Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544.cer
File:                     e20d7b51-a205-4e55-9426-e473f80b2544.cer (raw, json)
Hash identifier:          D1TGUlYWBMFivh7HNN8X96vxieUJLuJR/A/B7F8WJto=
Subject key identifier:   98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285842DDA2058C4DD58E4699D3AA30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 13 Aug 2023 00:45:21 +0000
Certificate not after:    Sat 15 Nov 2025 01:45:21 +0000
Subordinate resources:    AS: 397736
                          IP: 23.174.16.0/24
                          IP: 2602:807:d000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:dd:a2:05:8c:4d:d5:8e:46:99:d3:aa:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Aug 13 00:45:21 2023 GMT
            Not After : Nov 15 01:45:21 2025 GMT
        Subject: CN=e20d7b51-a205-4e55-9426-e473f80b2544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:03:87:26:49:e4:92:3f:56:a4:47:90:7e:7c:
                    2d:78:8b:98:dd:b8:36:8e:4b:cc:12:f5:12:54:40:
                    6d:ca:a7:89:19:6d:c1:47:1b:75:c6:f7:b7:42:83:
                    38:1e:c5:e1:74:7d:3c:a5:a4:15:6b:08:e1:07:32:
                    38:49:18:88:98:bf:9c:c8:1f:e0:9d:0b:7f:db:58:
                    f8:db:0a:8b:a9:41:d9:36:72:b2:18:7a:2a:e3:32:
                    51:32:f4:5d:2e:83:27:f9:18:27:27:c0:24:77:26:
                    f0:f6:5e:ff:92:f2:f6:0c:aa:9d:6e:bc:9a:0e:31:
                    74:0f:75:59:4b:3c:dd:39:ad:e2:fa:07:c4:f9:24:
                    2c:7f:32:9b:b6:54:4a:c0:ee:cc:c0:5c:03:f5:6e:
                    8c:73:c8:22:aa:8b:6e:c0:27:da:ba:6a:e5:4b:7a:
                    72:e0:64:6d:25:9d:77:be:9a:18:1d:af:70:43:45:
                    5a:a9:87:49:91:e8:ce:ce:59:a9:21:0c:12:fd:00:
                    b9:d1:3e:f1:c0:47:b4:30:42:76:f6:d9:f4:d3:47:
                    24:c9:b9:ef:af:56:61:54:59:e8:bc:ad:52:1c:eb:
                    df:1b:1d:68:ec:e8:50:7b:b4:96:4e:57:88:3c:1f:
                    98:12:69:20:1a:c0:24:87:1b:77:31:d8:c2:e0:17:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5B:5F:D7:36:C4:EC:98:8A:7F:FD:88:22:70:B1:32:07:74:14:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e20d7b51-a205-4e55-9426-e473f80b2544/e20d7b51-a205-4e55-9426-e473f80b2544.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.16.0/24
                IPv6:
                  2602:807:d000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397736

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4b:7b:6a:00:57:c2:86:df:97:d7:0d:84:9a:3f:f9:71:7a:
         22:80:99:d6:31:99:e3:75:1b:d7:23:b3:0b:d3:2c:60:f6:e8:
         6f:38:49:80:1b:ea:6d:3a:02:0c:0a:1a:a4:f3:b1:a5:f5:53:
         7a:b2:0f:94:7d:bd:25:69:68:a4:41:c8:74:65:94:9f:ee:0b:
         a1:e6:30:ee:46:ac:54:38:31:dd:5f:4a:14:6b:a1:7a:33:06:
         05:b3:00:85:8c:3d:cd:1f:5d:21:e5:24:63:a8:f0:be:41:8e:
         11:a0:67:b5:ff:ef:45:42:f7:61:ff:f5:a4:f3:6c:58:bb:ea:
         fa:af:4b:a8:25:31:cc:e8:6b:ad:20:c0:c4:90:2d:64:4d:15:
         b0:d9:cd:40:74:82:e0:86:73:3f:03:13:75:9e:b5:d5:b1:e0:
         99:eb:7c:37:4a:12:4d:47:26:ef:6a:76:f1:6c:3a:4f:ca:71:
         53:e2:65:64:21:eb:58:32:89:33:57:a6:77:27:4b:3c:d3:fc:
         7b:9a:ed:5d:84:5e:5f:43:e7:a6:61:b2:b4:a0:21:2a:ea:0b:
         34:4a:ea:21:29:e4:7e:a4:91:4d:08:66:f6:18:49:27:a0:c7:
         fe:ff:8e:b2:9a:70:e5:d8:2e:78:b4:db:c1:ac:02:4e:b1:b7:
         f5:c6:46:0c
-----BEGIN CERTIFICATE-----
MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWELdogWMTdWORpnTqjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMDgxMzAwNDUyMVoXDTI1MTExNTAxNDUyMVowLzEtMCsGA1UEAxMk
ZTIwZDdiNTEtYTIwNS00ZTU1LTk0MjYtZTQ3M2Y4MGIyNTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAOHJknkkj9WpEeQfnwteIuY3bg2jkvMEvUS
VEBtyqeJGW3BRxt1xve3QoM4HsXhdH08paQVawjhBzI4SRiImL+cyB/gnQt/21j4
2wqLqUHZNnKyGHoq4zJRMvRdLoMn+RgnJ8Akdybw9l7/kvL2DKqdbryaDjF0D3VZ
SzzdOa3i+gfE+SQsfzKbtlRKwO7MwFwD9W6Mc8giqotuwCfaumrlS3py4GRtJZ13
vpoYHa9wQ0VaqYdJkejOzlmpIQwS/QC50T7xwEe0MEJ29tn000ckybnvr1ZhVFno
vK1SHOvfGx1o7OhQe7SWTleIPB+YEmkgGsAkhxt3MdjC4Bep9QIDAQABo4IELDCC
BCgwHQYDVR0OBBYEFJhbX9c2xOyYin/9iCJwsTIHdBTWMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9l
MjBkN2I1MS1hMjA1LTRlNTUtOTQyNi1lNDczZjgwYjI1NDQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2UyMGQ3YjUxLWEyMDUtNGU1NS05
NDI2LWU0NzNmODBiMjU0NC9lMjBkN2I1MS1hMjA1LTRlNTUtOTQyNi1lNDczZjgw
YjI1NDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBAAXrhAwDwQCAAIwCQMHBCYCCAfQADAaBggrBgEF
BQcBCAEB/wQLMAmgBzAFAgMGEagwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAikt7agBXwobfl9cNhJo/+XF6
IoCZ1jGZ43Ub1yOzC9MsYPbobzhJgBvqbToCDAoapPOxpfVTerIPlH29JWlopEHI
dGWUn+4LoeYw7kasVDgx3V9KFGuhejMGBbMAhYw9zR9dIeUkY6jwvkGOEaBntf/v
RUL3Yf/1pPNsWLvq+q9LqCUxzOhrrSDAxJAtZE0VsNnNQHSC4IZzPwMTdZ611bHg
met8N0oSTUcm72p28Ww6T8pxU+JlZCHrWDKJM1emdydLPNP8e5rtXYReX0PnpmGy
tKAhKuoLNErqISnkfqSRTQhm9hhJJ6DH/v+Osppw5dgueLTbwawCTrG39cZGDA==
-----END CERTIFICATE-----