Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1.cer
File:                     5de35d89-662a-401a-a494-7d5da6facae1.cer (raw, json)
Hash identifier:          xyhJ6ZQeflmoXWi0Jazf283D9maHjqZPiMQTCns4+QU=
Subject key identifier:   82:C2:14:32:47:64:53:0A:2A:10:B1:B2:91:5A:E2:83:9D:40:66:DD
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285843B498A28FD6DC7EFAA1060A40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 29 Oct 2023 00:45:14 +0000
Certificate not after:    Sat 31 Jan 2026 01:45:14 +0000
Subordinate resources:    AS: 3833
                          IP: 204.227.192.0/19
                          IP: 206.54.64.0/18
                          IP: 216.67.128.0/18
                          IP: 2604:1300::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b4:98:a2:8f:d6:dc:7e:fa:a1:06:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Oct 29 00:45:14 2023 GMT
            Not After : Jan 31 01:45:14 2026 GMT
        Subject: CN=5de35d89-662a-401a-a494-7d5da6facae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:9d:61:60:00:1d:2a:fb:45:af:df:a4:23:
                    40:63:f7:f8:a9:86:a8:7d:8e:e5:b5:47:a9:29:c1:
                    63:37:99:a4:65:2a:79:df:a7:83:28:12:fd:c1:e8:
                    65:f0:52:82:94:86:e7:5f:70:40:6f:f2:59:60:fd:
                    f7:30:75:74:ca:61:7e:ce:89:14:df:25:c0:fb:0c:
                    4f:65:bb:c8:af:99:35:ae:6b:d5:a3:8b:3c:98:bc:
                    68:33:51:21:5f:74:23:e7:98:9d:98:e2:3f:17:65:
                    98:86:c7:6d:16:97:5c:bd:80:a2:29:a1:10:24:56:
                    33:6e:ac:60:4b:4a:a3:3a:f8:c9:47:a0:87:a1:0d:
                    ac:2b:e9:d6:e2:2e:77:28:21:17:c2:69:a1:2f:ea:
                    9b:3c:f0:9a:df:ef:38:27:58:a2:8a:d1:ed:ca:65:
                    f4:a4:b3:35:c1:89:2f:cb:79:23:9a:82:4c:ba:b9:
                    70:33:62:5a:32:00:8d:2b:a6:2f:c1:91:d7:9c:24:
                    83:c7:0d:e6:97:86:eb:d9:0d:d0:99:40:f4:53:51:
                    d2:55:20:19:4e:ad:3b:7c:68:8d:5d:ae:0e:3c:a4:
                    ce:85:74:d6:49:7f:ec:0b:d7:bd:b9:2b:02:f9:7d:
                    b0:99:bc:0e:16:40:af:dc:2d:d4:5f:da:3b:52:e2:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C2:14:32:47:64:53:0A:2A:10:B1:B2:91:5A:E2:83:9D:40:66:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.227.192.0/19
                  206.54.64.0/18
                  216.67.128.0/18
                IPv6:
                  2604:1300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3833

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c8:e2:25:c3:78:29:ee:13:74:83:1d:02:ff:2c:6a:32:28:
         fc:7b:d5:c4:74:df:94:aa:7f:c9:5e:8f:12:11:35:17:0d:88:
         43:f2:d0:d0:15:cf:50:c1:4d:f6:c9:0e:60:a4:6d:81:ae:15:
         d9:cd:c4:da:90:dc:23:83:79:07:f9:36:7b:99:29:f8:1e:26:
         41:37:e0:47:42:4f:d9:20:3d:d7:b1:13:cb:1c:a2:1e:de:d3:
         70:85:0a:c7:3e:a9:41:51:7a:c3:e6:c9:72:c4:b4:e0:fa:29:
         44:92:31:d3:af:4c:32:73:71:ab:2c:6b:cd:4c:7f:7c:8c:4a:
         77:a7:9f:02:4a:86:19:93:d9:17:a5:31:8b:6e:c1:fe:82:64:
         a2:92:17:91:38:69:89:ca:cc:3d:da:42:27:a9:e6:e0:08:b8:
         a3:cc:b7:5b:12:36:a4:42:42:4a:ec:c1:4d:85:50:04:ec:66:
         06:65:6e:6c:1f:04:9b:07:19:a2:e2:81:b5:5d:53:7a:07:41:
         c7:df:12:cd:6a:1f:2e:68:ce:20:b5:7c:a2:24:06:24:b7:73:
         07:f9:c2:0a:dd:b9:06:d5:8e:18:95:bd:1d:20:69:96:b3:0c:
         a6:b8:72:90:fa:66:37:19:6f:5d:61:2e:0b:63:8e:9b:9d:ba:
         15:d9:0c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----