Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c615cdee-8d21-44d3-accf-72fa34a6a55a.cer
File:                     c615cdee-8d21-44d3-accf-72fa34a6a55a.cer (raw, json)
Hash identifier:          Z7vHZEwSK+klloBO1GFFxGl7AoWYFNp1rIvSYUHpAhc=
Subject key identifier:   F9:15:23:BC:DE:54:9B:15:B9:A4:66:67:2B:3E:E9:99:6C:20:E7:DA
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858483ACB0F845E1F8951891AE400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c615cdee-8d21-44d3-accf-72fa34a6a55a/c615cdee-8d21-44d3-accf-72fa34a6a55a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c615cdee-8d21-44d3-accf-72fa34a6a55a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 16 Dec 2024 21:32:55 +0000
Certificate not after:    Sun 21 Mar 2027 20:32:55 +0000
Subordinate resources:    AS: 35918

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Dec 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3a:cb:0f:84:5e:1f:89:51:89:1a:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 16 21:32:55 2024 GMT
            Not After : Mar 21 20:32:55 2027 GMT
        Subject: CN=c615cdee-8d21-44d3-accf-72fa34a6a55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d1:9d:16:c8:42:64:11:2d:e4:83:8b:3f:d3:
                    6b:8c:14:53:f1:ac:c6:d0:8a:fa:f1:18:3c:a0:95:
                    cf:54:3b:eb:7e:e6:c4:b9:5a:a5:78:a1:56:17:ba:
                    94:8b:1a:45:b1:06:e8:65:d5:fb:6e:91:8a:59:61:
                    39:62:48:92:66:2d:12:ba:2a:bf:70:a6:e8:b0:5c:
                    7c:95:5f:c1:5e:56:6f:e9:df:7d:d2:0f:41:1f:2a:
                    7e:6c:2b:5c:76:02:fc:88:f1:6f:09:0e:7f:dc:cd:
                    ac:05:88:53:b2:81:08:f2:9b:73:00:d3:13:71:87:
                    8c:66:d0:f7:22:8c:13:17:ce:8c:ca:b6:c4:07:dc:
                    c9:83:8b:64:35:c1:df:b6:72:a2:5a:f9:42:cd:e4:
                    c9:1d:e3:46:12:eb:88:cd:45:6b:57:f9:e1:cf:ab:
                    42:b3:3e:70:84:e6:37:69:5e:f2:d9:bf:04:62:ec:
                    91:b9:bb:ea:75:e1:5a:f5:1e:2d:a2:62:13:70:e3:
                    4d:2f:45:40:88:a3:b4:81:c3:fd:0a:bb:d2:61:1e:
                    ac:e4:45:69:7e:ca:b8:56:6b:28:eb:26:0e:b5:d5:
                    0d:73:75:73:35:6e:f0:83:24:13:44:58:53:b6:b2:
                    47:16:4b:e4:0c:c3:f9:36:29:bb:c1:76:c4:d6:f0:
                    c5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:15:23:BC:DE:54:9B:15:B9:A4:66:67:2B:3E:E9:99:6C:20:E7:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c615cdee-8d21-44d3-accf-72fa34a6a55a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c615cdee-8d21-44d3-accf-72fa34a6a55a/c615cdee-8d21-44d3-accf-72fa34a6a55a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  35918

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b2:04:6e:ac:33:ed:63:59:1f:94:b6:ce:05:86:03:39:f9:
         79:94:3c:4e:a0:10:07:69:5c:5a:fe:d2:c3:1f:fb:32:bf:3a:
         ca:29:07:80:d8:1a:61:8e:0a:0f:c2:f6:08:44:4c:13:16:5a:
         97:8e:6e:9b:39:43:21:33:47:7e:16:72:d0:d4:94:57:ad:b5:
         77:28:f1:c6:a8:22:84:a1:57:fb:a6:03:f0:16:d5:e8:2b:66:
         ad:45:f5:09:66:73:c4:a3:d4:cf:14:4e:85:37:67:14:2d:41:
         c3:fe:05:00:af:71:b8:92:8b:82:f8:28:12:f0:ae:c4:19:16:
         c7:0a:14:f2:1f:37:0a:45:90:44:75:ce:cc:ae:d9:68:4e:7c:
         81:83:49:43:8c:d5:90:e5:25:60:7a:3f:d9:b2:95:73:f9:fa:
         9c:d8:05:49:cf:50:db:dc:d8:db:c1:70:b9:2d:86:d2:cf:b8:
         bd:ba:b0:2d:1f:ea:8b:f4:39:4c:d5:84:78:7d:46:6f:b0:25:
         13:35:f8:eb:b4:29:ed:0c:f4:17:03:91:3b:7d:15:4b:62:dc:
         77:9a:2b:fb:f1:f4:f8:9d:10:eb:20:1e:3c:c7:86:f7:05:28:
         5d:a1:b3:fd:6f:fd:7c:a3:4d:e3:f1:07:23:42:0b:c0:33:50:
         15:d5:eb:db
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEg6yw+EXh+JUYka5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk
OWJmMB4XDTI0MTIxNjIxMzI1NVoXDTI3MDMyMTIwMzI1NVowLzEtMCsGA1UEAxMk
YzYxNWNkZWUtOGQyMS00NGQzLWFjY2YtNzJmYTM0YTZhNTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9GdFshCZBEt5IOLP9NrjBRT8azG0Ir68Rg8
oJXPVDvrfubEuVqleKFWF7qUixpFsQboZdX7bpGKWWE5YkiSZi0Suiq/cKbosFx8
lV/BXlZv6d990g9BHyp+bCtcdgL8iPFvCQ5/3M2sBYhTsoEI8ptzANMTcYeMZtD3
IowTF86MyrbEB9zJg4tkNcHftnKiWvlCzeTJHeNGEuuIzUVrV/nhz6tCsz5whOY3
aV7y2b8EYuyRubvqdeFa9R4tomITcONNL0VAiKO0gcP9CrvSYR6s5EVpfsq4Vmso
6yYOtdUNc3VzNW7wgyQTRFhTtrJHFkvkDMP5Nim7wXbE1vDFnwIDAQABo4ID+jCC
A/YwHQYDVR0OBBYEFPkVI7zeVJsVuaRmZys+6ZlsIOfaMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9j
NjE1Y2RlZS04ZDIxLTQ0ZDMtYWNjZi03MmZhMzRhNmE1NWEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt
NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2M2MTVjZGVlLThkMjEtNDRkMy1h
Y2NmLTcyZmEzNGE2YTU1YS9jNjE1Y2RlZS04ZDIxLTQ0ZDMtYWNjZi03MmZhMzRh
NmE1NWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1
NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj
ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI
8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5
ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDAIxOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC+yBG6sM+1jWR+Uts4FhgM5+XmU
PE6gEAdpXFr+0sMf+zK/OsopB4DYGmGOCg/C9ghETBMWWpeObps5QyEzR34WctDU
lFettXco8caoIoShV/umA/AW1egrZq1F9Qlmc8Sj1M8UToU3ZxQtQcP+BQCvcbiS
i4L4KBLwrsQZFscKFPIfNwpFkER1zsyu2WhOfIGDSUOM1ZDlJWB6P9mylXP5+pzY
BUnPUNvc2NvBcLkthtLPuL26sC0f6ov0OUzVhHh9Rm+wJRM1+Ou0Ke0M9BcDkTt9
FUti3HeaK/vx9PidEOsgHjzHhvcFKF2hs/1v/XyjTePxByNCC8AzUBXV69s=
-----END CERTIFICATE-----