Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5615d12-8558-4019-b1d5-797e6ca333fe.cer
File:                     b5615d12-8558-4019-b1d5-797e6ca333fe.cer (raw, json)
Hash identifier:          11Zb95FCabvD2W40QQiIMuJxZlxkm46yXc5Rf2GP6/w=
Subject key identifier:   44:CB:A0:C4:B3:F3:4D:A9:A1:D7:FC:F6:32:88:F2:52:F4:88:4D:FA
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841EAC07615D52F4A89F6F23490
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5615d12-8558-4019-b1d5-797e6ca333fe/b5615d12-8558-4019-b1d5-797e6ca333fe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5615d12-8558-4019-b1d5-797e6ca333fe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 18 May 2023 00:45:16 +0000
Certificate not after:    Wed 20 Aug 2025 00:45:16 +0000
Subordinate resources:    AS: 396395

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ea:c0:76:15:d5:2f:4a:89:f6:f2:34:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 18 00:45:16 2023 GMT
            Not After : Aug 20 00:45:16 2025 GMT
        Subject: CN=b5615d12-8558-4019-b1d5-797e6ca333fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:ec:04:2f:5a:b9:3a:c8:cd:fc:dd:f0:7f:
                    d6:e5:5e:66:0e:0b:13:b2:3d:de:45:04:70:45:4f:
                    9b:73:01:fa:c9:e0:77:6a:5a:39:73:7c:22:d1:2f:
                    f4:43:4e:a4:5b:6f:6e:ec:c3:e2:88:70:06:1d:2b:
                    cd:be:d6:fb:6a:68:ef:76:a7:35:cb:0e:75:24:d2:
                    ab:61:90:62:d1:5e:fc:12:43:63:fb:e7:8b:22:6c:
                    b4:d1:10:35:4b:38:f1:53:79:5d:24:b0:01:1b:db:
                    2f:3a:01:3c:80:31:f5:10:f9:03:13:1b:85:a6:34:
                    42:4e:42:bd:b1:35:cf:27:bd:6b:91:0b:42:49:42:
                    e4:e0:6b:5a:10:3f:97:9d:7a:55:0d:54:4b:2f:67:
                    f6:17:09:5a:62:be:3f:a1:9b:8d:9c:2b:15:a4:00:
                    2d:69:a2:76:0f:f6:d1:c1:9e:57:11:ed:53:a5:6c:
                    75:03:90:14:5b:9f:bf:f6:be:3d:75:26:84:10:6b:
                    dd:5f:73:27:82:b3:0e:d0:8c:08:43:97:d3:1e:06:
                    62:96:12:a0:d9:ef:10:4b:48:d3:3f:c4:0c:6e:42:
                    f8:ae:49:c3:67:ff:8d:b3:58:9d:76:a0:e8:92:a9:
                    fa:48:33:dd:7b:3c:fb:b0:49:83:ee:89:91:13:3b:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CB:A0:C4:B3:F3:4D:A9:A1:D7:FC:F6:32:88:F2:52:F4:88:4D:FA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5615d12-8558-4019-b1d5-797e6ca333fe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b5615d12-8558-4019-b1d5-797e6ca333fe/b5615d12-8558-4019-b1d5-797e6ca333fe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396395

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b0:48:d6:32:c0:95:25:a8:b4:c4:69:65:fa:b3:6d:26:8f:
         ac:a6:88:f6:cb:86:67:e9:71:8d:7b:e1:5b:fe:45:d7:b1:6b:
         ec:e9:7a:d1:cb:e0:f9:6f:1d:f6:36:f0:54:f2:43:9d:fd:b6:
         5f:97:6d:6b:88:bd:e9:bd:2f:7f:e0:c9:fa:a2:8a:d5:26:94:
         5a:a5:78:c1:0d:1b:0d:e5:32:c2:75:db:93:7a:d0:fb:d8:f0:
         ef:4c:e3:01:ad:89:b2:a3:17:32:fe:06:02:ae:56:d7:c4:d5:
         ae:ab:ac:44:ea:6f:3f:fa:cd:34:d6:3d:5c:c8:4c:23:6e:24:
         70:a6:e9:85:5f:d1:44:dc:9e:d6:2a:15:d4:62:b8:d9:89:fd:
         99:f7:2d:be:dc:7a:b0:26:01:93:26:5a:8f:df:70:ab:ae:1b:
         c1:06:f0:a4:d3:79:00:16:f7:ea:9c:95:a4:f9:42:b6:9a:aa:
         94:b7:7c:f8:33:0c:49:47:f2:40:b0:23:14:ee:12:e0:b8:a5:
         c3:a3:49:bb:20:38:ab:55:50:ea:40:84:21:f8:28:ff:10:0a:
         06:8d:f6:ff:b0:1c:bf:60:11:f6:b8:1c:ad:0a:48:c8:e6:45:
         b0:58:17:ef:5f:82:f0:05:2c:08:5b:c5:c7:08:e1:7f:45:eb:
         27:cf:d1:16
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEHqwHYV1S9KifbyNJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMDUxODAwNDUxNloXDTI1MDgyMDAwNDUxNlowLzEtMCsGA1UEAxMk
YjU2MTVkMTItODU1OC00MDE5LWIxZDUtNzk3ZTZjYTMzM2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOrsBC9auTrIzfzd8H/W5V5mDgsTsj3eRQRw
RU+bcwH6yeB3alo5c3wi0S/0Q06kW29u7MPiiHAGHSvNvtb7amjvdqc1yw51JNKr
YZBi0V78EkNj++eLImy00RA1SzjxU3ldJLABG9svOgE8gDH1EPkDExuFpjRCTkK9
sTXPJ71rkQtCSULk4GtaED+XnXpVDVRLL2f2FwlaYr4/oZuNnCsVpAAtaaJ2D/bR
wZ5XEe1TpWx1A5AUW5+/9r49dSaEEGvdX3MngrMO0IwIQ5fTHgZilhKg2e8QS0jT
P8QMbkL4rknDZ/+Ns1iddqDokqn6SDPdezz7sEmD7omREzsefwIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFETLoMSz802podf89jKI8lL0iE36MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9i
NTYxNWQxMi04NTU4LTQwMTktYjFkNS03OTdlNmNhMzMzZmUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2I1NjE1ZDEyLTg1NTgtNDAxOS1i
MWQ1LTc5N2U2Y2EzMzNmZS9iNTYxNWQxMi04NTU4LTQwMTktYjFkNS03OTdlNmNh
MzMzZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBgxrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIuwSNYywJUlqLTEaWX6s20mj6ym
iPbLhmfpcY174Vv+Rdexa+zpetHL4PlvHfY28FTyQ539tl+XbWuIvem9L3/gyfqi
itUmlFqleMENGw3lMsJ125N60PvY8O9M4wGtibKjFzL+BgKuVtfE1a6rrETqbz/6
zTTWPVzITCNuJHCm6YVf0UTcntYqFdRiuNmJ/Zn3Lb7cerAmAZMmWo/fcKuuG8EG
8KTTeQAW9+qclaT5QraaqpS3fPgzDElH8kCwIxTuEuC4pcOjSbsgOKtVUOpAhCH4
KP8QCgaN9v+wHL9gEfa4HK0KSMjmRbBYF+9fgvAFLAhbxccI4X9F6yfP0RY=
-----END CERTIFICATE-----