Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer
File:                     7d31536a-f667-4473-abbf-040b249fa39f.cer (raw, json)
Hash identifier:          Nn4BNEK/BhlxvcDfyd7SkTR3iYi37Boj5PpNkMR7fac=
Subject key identifier:   D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285845ADE6805DCFBC38CD0AF80880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 27 Apr 2024 00:45:21 +0000
Certificate not after:    Fri 31 Jul 2026 00:45:21 +0000
Subordinate resources:    AS: 399892
                          IP: 216.73.152.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:e6:80:5d:cf:bc:38:cd:0a:f8:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr 27 00:45:21 2024 GMT
            Not After : Jul 31 00:45:21 2026 GMT
        Subject: CN=7d31536a-f667-4473-abbf-040b249fa39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:d5:3c:07:23:c7:39:7e:b0:56:ac:e1:ce:
                    3a:aa:35:c2:2c:ba:0f:c7:9e:bd:70:a5:4c:b8:0f:
                    59:4f:44:35:53:18:d1:42:93:5f:91:ba:53:18:3d:
                    ac:9b:e7:4f:db:3c:0b:6b:8a:9b:1e:13:bd:64:0e:
                    58:29:08:cd:14:86:da:16:e7:9b:2a:c6:36:aa:5a:
                    70:04:9f:96:14:78:21:79:e3:8d:51:6d:f3:54:bc:
                    3d:fc:c4:1c:06:90:f7:84:9b:47:4a:76:63:42:ad:
                    2e:c4:fc:aa:a4:9b:eb:fc:29:5e:5d:e0:85:ab:9e:
                    fd:dd:b9:1a:74:dd:f7:13:06:ba:db:6c:65:38:5b:
                    04:e9:f5:79:25:40:33:76:63:9d:27:22:8c:8d:a8:
                    50:8a:39:39:25:94:94:fa:75:28:85:c3:a9:9c:be:
                    d4:05:10:85:1a:76:b1:a4:90:8e:79:35:fd:24:31:
                    e6:4c:06:84:a7:06:bf:f9:16:75:66:30:40:7d:1c:
                    c6:61:ad:ce:4b:80:77:d7:09:cb:a1:fd:2c:34:c3:
                    90:7f:ea:35:49:6f:a1:c8:8a:9f:00:ba:8a:35:31:
                    6c:84:16:2b:cd:df:af:7c:2f:f6:b0:42:d2:eb:14:
                    c4:65:67:b6:f5:ef:8a:57:b7:0c:dc:d3:87:1d:46:
                    5b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.152.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399892

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:1c:29:0a:6b:d8:d7:d2:5c:ab:58:0f:65:ec:55:4c:73:58:
         02:3a:e2:51:b9:8d:ed:7a:14:a3:40:22:f5:a3:37:d6:15:12:
         b0:c7:ff:67:d1:41:44:7f:88:70:05:e2:eb:ec:35:79:15:1d:
         d1:a5:43:9b:8f:02:54:38:97:9b:d3:d8:f1:2c:a6:33:6b:da:
         d1:7a:6c:6b:21:d3:e9:13:44:de:a4:17:aa:48:66:63:11:85:
         cb:01:8d:9b:32:1f:64:95:27:51:8c:43:e8:c3:a6:21:72:1b:
         c9:92:f7:60:98:cc:d2:e5:98:de:10:08:34:f6:ab:6f:36:01:
         c2:79:3d:58:d5:ca:5e:22:36:bc:3c:be:b8:3d:31:5f:9b:39:
         c8:7c:25:eb:0b:42:9d:0d:6a:f7:ee:72:0b:4b:12:72:dd:76:
         4d:c4:74:37:69:96:8e:83:4d:fe:b6:ba:03:20:d6:2b:60:16:
         c7:dc:67:a3:2e:ce:95:dc:42:0a:91:1e:95:0d:2d:bf:cc:93:
         a0:a0:a9:dd:e9:4f:77:0b:fc:f5:d1:6e:14:77:1c:d1:36:58:
         b2:bd:c5:4f:03:de:f2:7c:12:85:51:8b:b0:58:52:9d:dc:60:
         4a:ce:d5:16:12:7b:0b:3c:e8:a4:b8:1a:90:8d:96:02:15:dd:
         ab:4c:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----