Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15ef58e0-ff71-4e52-9fee-9f8bb7bac661.cer
File:                     15ef58e0-ff71-4e52-9fee-9f8bb7bac661.cer (raw, json)
Hash identifier:          I1DeD0iQAnbJTbS1tmz9Bq8RLtlOZHxKLepjHz5B3+g=
Subject key identifier:   F8:72:3C:A6:D0:C5:73:7E:EC:33:BC:D7:0D:92:7B:13:04:62:08:E1
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F4328584203E09E183767731E7177ADC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15ef58e0-ff71-4e52-9fee-9f8bb7bac661/15ef58e0-ff71-4e52-9fee-9f8bb7bac661.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15ef58e0-ff71-4e52-9fee-9f8bb7bac661/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 27 May 2023 00:45:16 +0000
Certificate not after:    Fri 29 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 16580

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:03:e0:9e:18:37:67:73:1e:71:77:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: May 27 00:45:16 2023 GMT
            Not After : Aug 29 00:45:16 2025 GMT
        Subject: CN=15ef58e0-ff71-4e52-9fee-9f8bb7bac661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e1:cd:7f:96:14:f1:53:27:35:1b:96:90:cc:
                    73:d6:f7:ad:3e:f2:38:0b:0b:98:73:20:f3:b8:f1:
                    90:9c:6b:52:2f:23:cb:20:ac:65:1a:be:1f:8f:2b:
                    84:fc:27:75:38:d8:ed:a0:c9:76:99:a7:4e:25:1d:
                    57:4b:66:ae:37:ba:05:81:7b:2f:7c:36:20:c1:4e:
                    ae:53:62:42:06:df:92:d1:92:7c:06:cd:a7:18:24:
                    56:e4:c9:ec:d3:95:fd:94:6b:0c:3c:d3:4b:4b:fe:
                    53:7d:f4:ab:da:84:ec:63:e4:6f:35:ef:0f:c7:40:
                    b6:d4:5f:28:5e:6f:40:60:fe:92:24:1c:5d:59:02:
                    d4:7c:73:7a:93:b1:05:d1:1e:93:b0:49:09:38:00:
                    57:54:00:86:93:28:8d:6b:19:54:d3:f4:c8:8e:4e:
                    83:90:6f:db:b3:9a:b6:4e:ec:30:e9:0e:51:5a:07:
                    cd:3b:d2:3f:18:ef:be:89:ea:3d:8d:fe:48:ca:36:
                    8b:62:46:c9:0a:9a:9b:b6:6f:8a:4b:7e:ee:4e:90:
                    85:9b:93:18:2a:94:90:5d:38:0b:4c:21:8e:dd:88:
                    e9:f3:29:29:97:93:b9:ef:ea:e4:b0:60:05:b6:3b:
                    57:65:86:56:28:66:bf:01:9f:c5:10:e0:18:19:88:
                    e0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:72:3C:A6:D0:C5:73:7E:EC:33:BC:D7:0D:92:7B:13:04:62:08:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15ef58e0-ff71-4e52-9fee-9f8bb7bac661/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/15ef58e0-ff71-4e52-9fee-9f8bb7bac661/15ef58e0-ff71-4e52-9fee-9f8bb7bac661.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16580

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4b:25:00:f9:33:98:b8:35:e0:54:c1:41:63:ff:f3:fc:d5:
         f2:cd:03:68:1f:49:b9:fb:19:50:08:0a:5c:84:49:29:12:29:
         a6:c1:ae:07:ea:90:ca:1a:b2:99:05:2a:e5:2a:6a:76:50:6b:
         cf:36:c5:8a:e3:bd:61:f6:fa:16:c3:66:52:35:90:44:85:d3:
         da:07:a6:ea:91:74:b9:da:17:5d:0e:88:5d:24:36:62:7b:2f:
         4b:2c:33:ca:99:c0:54:b6:f6:8d:aa:64:75:19:8b:02:80:c1:
         54:47:10:fc:b8:4a:65:b9:82:33:46:03:6f:f3:0f:27:28:82:
         91:d0:81:66:72:8f:a2:ff:fb:a5:58:89:05:fb:33:f0:83:a4:
         5d:48:5f:65:f4:45:03:7e:a5:b3:91:1a:23:ad:67:52:dd:57:
         9f:58:6b:5d:ce:cb:5a:e9:73:ac:b2:dd:09:3a:ed:66:2b:70:
         fe:61:91:3d:3c:a6:65:81:46:26:d8:e9:17:69:95:ef:2c:16:
         84:2d:0f:7c:dc:7d:2e:04:6e:ce:d2:59:62:d5:fd:26:af:f6:
         a4:9d:ec:bc:14:1a:2b:e8:3d:2a:d2:1e:3f:ba:80:4b:c1:1b:
         d3:8d:11:1b:36:38:a4:fd:a8:53:3a:23:52:ba:d2:c1:fc:f7:
         a1:18:6c:a2
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEID4J4YN2dzHnF3rcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy
ZTI5MB4XDTIzMDUyNzAwNDUxNloXDTI1MDgyOTAwNDUxNlowLzEtMCsGA1UEAxMk
MTVlZjU4ZTAtZmY3MS00ZTUyLTlmZWUtOWY4YmI3YmFjNjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOHNf5YU8VMnNRuWkMxz1vetPvI4CwuYcyDz
uPGQnGtSLyPLIKxlGr4fjyuE/Cd1ONjtoMl2madOJR1XS2auN7oFgXsvfDYgwU6u
U2JCBt+S0ZJ8Bs2nGCRW5Mns05X9lGsMPNNLS/5TffSr2oTsY+RvNe8Px0C21F8o
Xm9AYP6SJBxdWQLUfHN6k7EF0R6TsEkJOABXVACGkyiNaxlU0/TIjk6DkG/bs5q2
Tuww6Q5RWgfNO9I/GO++ieo9jf5IyjaLYkbJCpqbtm+KS37uTpCFm5MYKpSQXTgL
TCGO3Yjp8ykpl5O57+rksGAFtjtXZYZWKGa/AZ/FEOAYGYjgYwIDAQABo4ID+TCC
A/UwHQYDVR0OBBYEFPhyPKbQxXN+7DO81w2SexMEYgjhMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x
NWVmNThlMC1mZjcxLTRlNTItOWZlZS05ZjhiYjdiYWM2NjEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt
YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzE1ZWY1OGUwLWZmNzEtNGU1Mi05
ZmVlLTlmOGJiN2JhYzY2MS8xNWVmNThlMC1mZjcxLTRlNTItOWZlZS05ZjhiYjdi
YWM2NjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5
ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz
MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O
1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2
MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwGQYIKwYBBQUH
AQgBAf8ECjAIoAYwBAICQMQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAB0slAPkzmLg14FTBQWP/8/zV8s0D
aB9JufsZUAgKXIRJKRIppsGuB+qQyhqymQUq5SpqdlBrzzbFiuO9Yfb6FsNmUjWQ
RIXT2gem6pF0udoXXQ6IXSQ2YnsvSywzypnAVLb2japkdRmLAoDBVEcQ/LhKZbmC
M0YDb/MPJyiCkdCBZnKPov/7pViJBfsz8IOkXUhfZfRFA36ls5EaI61nUt1Xn1hr
Xc7LWulzrLLdCTrtZitw/mGRPTymZYFGJtjpF2mV7ywWhC0PfNx9LgRuztJZYtX9
Jq/2pJ3svBQaK+g9KtIeP7qAS8Eb040RGzY4pP2oUzojUrrSwfz3oRhsog==
-----END CERTIFICATE-----