Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f70c503d-42ba-410e-abae-b2c6f9ea42f4.cer
File:                     f70c503d-42ba-410e-abae-b2c6f9ea42f4.cer (raw, json)
Hash identifier:          RTOB9Sd3ZjR1TpwU5uGg67eREE62lfRBDCVPcVaDp88=
Subject key identifier:   39:6B:79:66:1C:74:13:B6:72:4B:F0:16:41:43:7F:59:FE:9D:82:87
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285845E5BC2D3F773F91FFF534D560
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f70c503d-42ba-410e-abae-b2c6f9ea42f4/f70c503d-42ba-410e-abae-b2c6f9ea42f4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f70c503d-42ba-410e-abae-b2c6f9ea42f4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 17 May 2024 00:45:20 +0000
Certificate not after:    Thu 20 Aug 2026 00:45:20 +0000
Subordinate resources:    AS: 399906

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e5:bc:2d:3f:77:3f:91:ff:f5:34:d5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: May 17 00:45:20 2024 GMT
            Not After : Aug 20 00:45:20 2026 GMT
        Subject: CN=f70c503d-42ba-410e-abae-b2c6f9ea42f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:9e:08:1a:bf:5d:58:ee:b7:a0:14:98:2f:
                    d6:ec:09:4b:b3:ad:e6:ec:3e:df:07:e8:5a:60:2a:
                    b4:ca:78:0f:9d:c0:08:a9:58:95:60:18:9f:81:d8:
                    96:80:ab:c1:9f:a1:4e:45:fa:62:c6:c2:01:95:26:
                    97:de:57:c3:d4:66:a1:50:80:e4:78:32:ea:a1:f8:
                    97:48:cb:84:22:99:53:b8:28:86:38:a1:df:76:8b:
                    12:a6:b0:14:44:20:9f:82:ee:d4:e1:42:56:e2:7a:
                    c1:ea:e5:e2:3d:b4:c6:16:b1:88:9f:e5:cf:ea:80:
                    aa:d6:53:b9:b8:e9:f7:10:c0:3b:39:be:15:6c:34:
                    fd:f3:59:bf:bc:6d:ee:0d:0d:ad:5f:09:0e:97:f6:
                    2c:50:e6:bd:ef:af:d2:ea:7f:50:94:67:28:9f:36:
                    e5:3e:12:e5:e0:27:6e:be:fd:63:64:50:0f:34:81:
                    45:48:fc:c6:2f:06:7a:93:14:c7:03:54:87:21:83:
                    80:21:ce:47:19:24:4a:1a:56:b1:32:28:2c:40:e8:
                    7c:ab:81:9c:02:dc:9b:49:5b:3d:4c:f2:46:e7:b7:
                    0e:07:4c:95:ee:6a:49:36:ed:56:26:a3:1c:46:f5:
                    f3:d8:d2:df:2e:0e:61:a1:71:5a:d9:e9:11:ec:74:
                    ec:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6B:79:66:1C:74:13:B6:72:4B:F0:16:41:43:7F:59:FE:9D:82:87
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f70c503d-42ba-410e-abae-b2c6f9ea42f4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f70c503d-42ba-410e-abae-b2c6f9ea42f4/f70c503d-42ba-410e-abae-b2c6f9ea42f4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399906

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:04:b5:50:6a:14:f2:cb:3d:ee:a4:57:a9:65:52:d9:fa:11:
         27:62:a8:ea:f0:bc:8c:17:2e:8d:de:12:1d:2b:08:7f:92:89:
         57:ac:07:7f:bc:ef:0c:19:a4:ab:e2:ec:e9:99:3e:9d:d4:00:
         83:92:25:64:76:05:56:e6:a6:40:5e:70:b1:fd:1d:7c:2c:29:
         ef:26:dd:65:7d:73:b1:58:bb:6c:4d:f3:fc:e6:6c:a6:e5:67:
         c0:f0:be:30:c7:f3:cf:77:d8:ca:07:c4:27:89:3b:cb:4f:a3:
         01:4d:de:ae:4e:0b:52:73:69:cf:4b:9d:4b:6c:f4:da:b6:b3:
         01:61:a5:c8:3e:ea:17:bf:6a:88:20:bb:96:32:9d:84:00:ed:
         0d:74:29:84:36:9f:e9:0a:9f:b5:a9:ca:19:b1:34:98:8c:bc:
         d3:92:a5:8a:70:96:59:53:b4:59:f1:cb:30:3d:26:a5:8c:78:
         f7:e1:e7:aa:22:94:7d:fb:e4:1a:e3:de:d5:1b:4d:30:3f:95:
         67:30:05:45:9d:48:cd:db:e5:d4:e7:2a:94:c3:b3:d8:f1:0a:
         d3:ee:4e:62:3a:60:40:8f:b0:83:0d:16:5b:79:f1:3c:08:d2:
         00:a6:f7:29:00:97:06:f8:99:9f:d8:17:1e:bb:b7:e0:b9:0a:
         58:dd:07:c7
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEXlvC0/dz+R//U01WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI0MDUxNzAwNDUyMFoXDTI2MDgyMDAwNDUyMFowLzEtMCsGA1UEAxMk
ZjcwYzUwM2QtNDJiYS00MTBlLWFiYWUtYjJjNmY5ZWE0MmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1ueCBq/XVjut6AUmC/W7AlLs63m7D7fB+ha
YCq0yngPncAIqViVYBifgdiWgKvBn6FORfpixsIBlSaX3lfD1GahUIDkeDLqofiX
SMuEIplTuCiGOKHfdosSprAURCCfgu7U4UJW4nrB6uXiPbTGFrGIn+XP6oCq1lO5
uOn3EMA7Ob4VbDT981m/vG3uDQ2tXwkOl/YsUOa976/S6n9QlGconzblPhLl4Cdu
vv1jZFAPNIFFSPzGLwZ6kxTHA1SHIYOAIc5HGSRKGlaxMigsQOh8q4GcAtybSVs9
TPJG57cOB0yV7mpJNu1WJqMcRvXz2NLfLg5hoXFa2ekR7HTsWwIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFDlreWYcdBO2ckvwFkFDf1n+nYKHMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9m
NzBjNTAzZC00MmJhLTQxMGUtYWJhZS1iMmM2ZjllYTQyZjQvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1L2Y3MGM1MDNkLTQyYmEtNDEwZS1h
YmFlLWIyYzZmOWVhNDJmNC9mNzBjNTAzZC00MmJhLTQxMGUtYWJhZS1iMmM2Zjll
YTQyZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBhoiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG4EtVBqFPLLPe6kV6llUtn6ESdi
qOrwvIwXLo3eEh0rCH+SiVesB3+87wwZpKvi7OmZPp3UAIOSJWR2BVbmpkBecLH9
HXwsKe8m3WV9c7FYu2xN8/zmbKblZ8DwvjDH88932MoHxCeJO8tPowFN3q5OC1Jz
ac9LnUts9Nq2swFhpcg+6he/aoggu5YynYQA7Q10KYQ2n+kKn7WpyhmxNJiMvNOS
pYpwlllTtFnxyzA9JqWMePfh56oilH375Brj3tUbTTA/lWcwBUWdSM3b5dTnKpTD
s9jxCtPuTmI6YECPsIMNFlt58TwI0gCm9ykAlwb4mZ/YFx67t+C5CljdB8c=
-----END CERTIFICATE-----