Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f70c503d-42ba-410e-abae-b2c6f9ea42f4.cer
File:                     f70c503d-42ba-410e-abae-b2c6f9ea42f4.cer (raw, json)
Hash identifier:          ohdD0oK/iU+1TBeTBtXhPd1qHO3OL3qh79sW6bJUICk=
Subject key identifier:   39:6B:79:66:1C:74:13:B6:72:4B:F0:16:41:43:7F:59:FE:9D:82:87
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285841E483488861AA90E315548440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f70c503d-42ba-410e-abae-b2c6f9ea42f4/f70c503d-42ba-410e-abae-b2c6f9ea42f4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f70c503d-42ba-410e-abae-b2c6f9ea42f4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 16 May 2025 19:06:39 +0000
Subordinate resources:    AS: 399906

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:48:88:61:aa:90:e3:15:54:84:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May 16 19:06:39 2025 GMT
        Subject: CN=f70c503d-42ba-410e-abae-b2c6f9ea42f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:9e:08:1a:bf:5d:58:ee:b7:a0:14:98:2f:
                    d6:ec:09:4b:b3:ad:e6:ec:3e:df:07:e8:5a:60:2a:
                    b4:ca:78:0f:9d:c0:08:a9:58:95:60:18:9f:81:d8:
                    96:80:ab:c1:9f:a1:4e:45:fa:62:c6:c2:01:95:26:
                    97:de:57:c3:d4:66:a1:50:80:e4:78:32:ea:a1:f8:
                    97:48:cb:84:22:99:53:b8:28:86:38:a1:df:76:8b:
                    12:a6:b0:14:44:20:9f:82:ee:d4:e1:42:56:e2:7a:
                    c1:ea:e5:e2:3d:b4:c6:16:b1:88:9f:e5:cf:ea:80:
                    aa:d6:53:b9:b8:e9:f7:10:c0:3b:39:be:15:6c:34:
                    fd:f3:59:bf:bc:6d:ee:0d:0d:ad:5f:09:0e:97:f6:
                    2c:50:e6:bd:ef:af:d2:ea:7f:50:94:67:28:9f:36:
                    e5:3e:12:e5:e0:27:6e:be:fd:63:64:50:0f:34:81:
                    45:48:fc:c6:2f:06:7a:93:14:c7:03:54:87:21:83:
                    80:21:ce:47:19:24:4a:1a:56:b1:32:28:2c:40:e8:
                    7c:ab:81:9c:02:dc:9b:49:5b:3d:4c:f2:46:e7:b7:
                    0e:07:4c:95:ee:6a:49:36:ed:56:26:a3:1c:46:f5:
                    f3:d8:d2:df:2e:0e:61:a1:71:5a:d9:e9:11:ec:74:
                    ec:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6B:79:66:1C:74:13:B6:72:4B:F0:16:41:43:7F:59:FE:9D:82:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f70c503d-42ba-410e-abae-b2c6f9ea42f4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f70c503d-42ba-410e-abae-b2c6f9ea42f4/f70c503d-42ba-410e-abae-b2c6f9ea42f4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399906

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:c2:51:4d:de:1f:0b:cd:55:99:b5:eb:28:2b:2f:6d:75:fb:
         fd:50:5b:e6:48:65:98:1e:83:5a:54:07:15:64:59:bf:0c:5f:
         5a:3b:e2:fa:b5:fe:10:ac:0e:b0:58:7b:3f:4e:5c:98:45:a3:
         fd:52:7d:d5:36:90:64:fb:3c:c9:dc:5f:88:85:7c:50:65:0f:
         6c:16:9f:92:83:3b:18:b9:ac:6a:a1:46:ea:a3:82:10:c3:dc:
         53:7c:50:b6:fa:80:36:92:f8:3c:24:78:8a:4c:6c:9e:fe:9c:
         2d:b3:db:55:34:59:3a:41:63:47:d8:68:ac:40:e2:15:c5:0f:
         25:87:6d:e9:ac:cb:6e:82:91:47:8b:08:67:8b:f3:9f:52:74:
         eb:95:bf:95:76:87:99:5a:1f:de:43:59:bf:98:bc:f8:20:df:
         bf:4a:dd:1f:09:15:f2:3d:5e:c3:6c:3c:fa:87:9b:88:5a:15:
         5b:2d:8b:4b:63:5f:4d:72:6d:7f:f7:f6:a1:bb:ba:7a:bc:ea:
         9d:9a:87:df:e4:b0:3f:5d:9d:7e:83:3a:d0:28:ad:dd:f7:f1:
         8e:30:a4:06:d9:c9:3f:79:19:03:a3:7f:c3:80:e7:cf:d2:d2:
         99:4a:93:73:3a:19:77:a7:40:c1:68:6f:06:73:c2:dc:63:99:
         bb:87:83:df
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEHkg0iIYaqQ4xVUhEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUxNjE5MDYzOVowLzEtMCsGA1UEAxMk
ZjcwYzUwM2QtNDJiYS00MTBlLWFiYWUtYjJjNmY5ZWE0MmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ueCBq/XVjut6AUmC/W7AlLs63m7D7fB+ha
YCq0yngPncAIqViVYBifgdiWgKvBn6FORfpixsIBlSaX3lfD1GahUIDkeDLqofiX
SMuEIplTuCiGOKHfdosSprAURCCfgu7U4UJW4nrB6uXiPbTGFrGIn+XP6oCq1lO5
uOn3EMA7Ob4VbDT981m/vG3uDQ2tXwkOl/YsUOa976/S6n9QlGconzblPhLl4Cdu
vv1jZFAPNIFFSPzGLwZ6kxTHA1SHIYOAIc5HGSRKGlaxMigsQOh8q4GcAtybSVs9
TPJG57cOB0yV7mpJNu1WJqMcRvXz2NLfLg5hoXFa2ekR7HTsWwIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFDlreWYcdBO2ckvwFkFDf1n+nYKHMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m
NzBjNTAzZC00MmJhLTQxMGUtYWJhZS1iMmM2ZjllYTQyZjQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Y3MGM1MDNkLTQyYmEtNDEwZS1h
YmFlLWIyYzZmOWVhNDJmNC9mNzBjNTAzZC00MmJhLTQxMGUtYWJhZS1iMmM2Zjll
YTQyZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBhoiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIvCUU3eHwvNVZm16ygrL211+/1Q
W+ZIZZgeg1pUBxVkWb8MX1o74vq1/hCsDrBYez9OXJhFo/1SfdU2kGT7PMncX4iF
fFBlD2wWn5KDOxi5rGqhRuqjghDD3FN8ULb6gDaS+DwkeIpMbJ7+nC2z21U0WTpB
Y0fYaKxA4hXFDyWHbemsy26CkUeLCGeL859SdOuVv5V2h5laH95DWb+YvPgg379K
3R8JFfI9XsNsPPqHm4haFVsti0tjX01ybX/39qG7unq86p2ah9/ksD9dnX6DOtAo
rd338Y4wpAbZyT95GQOjf8OA58/S0plKk3M6GXenQMFobwZzwtxjmbuHg98=
-----END CERTIFICATE-----