Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
File:                     d00749ed-70ef-447c-b17c-da6be8d7f312.cer (raw, json)
Hash identifier:          m6P5QB0REXKI4HS1zqZumTryX+AbpoMiVuGhzHGeAXw=
Subject key identifier:   F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584528037091088A2685F0C8FB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Mar 2024 01:45:20 +0000
Certificate not after:    Sat 13 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 16686
                          IP: 64.68.192.0/20
                          IP: 2620:49::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:28:03:70:91:08:8a:26:85:f0:c8:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 10 01:45:20 2024 GMT
            Not After : Jun 13 00:45:20 2026 GMT
        Subject: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:80:f5:83:3b:ef:eb:61:96:71:29:64:15:
                    e2:1f:02:32:c8:4e:7c:32:ef:30:88:e6:5b:0e:5d:
                    fc:0f:5f:ac:be:dd:70:ed:7e:7d:32:35:56:a8:68:
                    0b:99:e0:9f:d6:c9:96:3e:81:98:9d:b9:ae:8f:78:
                    56:ed:1f:84:68:92:62:76:88:87:9a:30:fb:51:bb:
                    5e:f2:37:62:c2:8b:16:69:85:5f:a7:30:5a:ce:3d:
                    f5:e4:36:0d:8d:8e:99:f6:43:8a:d4:1f:91:27:dd:
                    2f:04:0f:1e:99:d4:3c:7a:0b:95:ab:c3:99:bc:b0:
                    bd:ee:bf:fd:8b:d9:ba:c2:4a:b6:9e:76:d1:82:9a:
                    25:d1:3f:14:a1:8e:05:24:2f:88:9d:11:c8:e5:8c:
                    7f:be:92:e1:a5:5b:3f:3f:80:4f:5a:35:34:d4:63:
                    64:da:2d:15:fe:d1:1d:9f:1d:75:d0:4e:ea:18:87:
                    05:20:d0:54:20:62:27:3a:62:85:b9:bd:97:7e:88:
                    d6:85:1d:c9:98:ab:1b:60:f6:68:33:0a:df:4e:f1:
                    01:1a:39:bf:cf:78:87:d2:15:1d:b0:65:f4:49:8b:
                    ec:c0:7c:b0:83:de:53:d2:7b:c7:a1:a4:f2:0a:a8:
                    36:60:b9:2a:4b:c5:0e:0a:2d:05:37:4a:1e:15:59:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.192.0/20
                IPv6:
                  2620:49::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16686

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c9:a4:80:fb:07:70:85:92:10:40:61:f3:04:70:fb:15:68:
         e5:e9:a1:2e:f2:ed:bf:37:2c:26:2c:55:00:6c:d9:51:d9:fd:
         33:46:89:3c:84:01:e6:d3:f0:07:58:95:55:ae:e5:01:99:03:
         97:c3:2a:8d:49:c0:7d:a5:f9:2e:5f:45:ff:50:18:87:33:37:
         bb:cc:c1:c3:9b:b7:63:a5:a5:67:6b:e8:64:93:35:46:95:17:
         3c:67:bf:a5:d6:20:52:dd:84:f6:db:04:e2:eb:d7:82:93:58:
         bd:08:3e:62:4f:0e:73:17:08:c7:75:af:db:a0:14:af:69:1d:
         14:10:0d:c4:4c:49:7f:06:cb:85:fd:50:a6:86:1d:a8:a4:7c:
         37:e7:8f:8f:7d:b8:ff:e8:45:ed:3d:8b:ec:2c:24:fe:e2:28:
         c4:cc:10:89:8c:46:cc:2f:0a:17:a3:01:8b:7d:b1:95:dc:07:
         21:8c:4c:98:b3:b0:c9:04:c9:b4:01:a0:9a:36:04:fd:f1:78:
         49:33:f2:1a:f6:15:d4:91:5e:89:68:b3:6d:fd:cf:56:c0:2d:
         53:ca:7d:96:bd:87:0e:f7:4b:0b:cb:09:f8:2f:02:af:ce:68:
         03:db:b7:ed:29:f3:6c:df:a2:f6:f0:2a:8a:3e:f7:54:6a:41:
         ee:8f:de:c9
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEUoA3CRCIomhfDI+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDMxMDAxNDUyMFoXDTI2MDYxMzAwNDUyMFowLzEtMCsGA1UEAxMk
ZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdmMzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjWA9YM77+thlnEpZBXiHwIyyE58Mu8wiOZb
Dl38D1+svt1w7X59MjVWqGgLmeCf1smWPoGYnbmuj3hW7R+EaJJidoiHmjD7Ubte
8jdiwosWaYVfpzBazj315DYNjY6Z9kOK1B+RJ90vBA8emdQ8eguVq8OZvLC97r/9
i9m6wkq2nnbRgpol0T8UoY4FJC+InRHI5Yx/vpLhpVs/P4BPWjU01GNk2i0V/tEd
nx110E7qGIcFINBUIGInOmKFub2XfojWhR3JmKsbYPZoMwrfTvEBGjm/z3iH0hUd
sGX0SYvswHywg95T0nvHoaTyCqg2YLkqS8UOCi0FN0oeFVnsTQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFPUgFYczWMUSeGRm87DjXYr0eHl0MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k
MDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2QwMDc0OWVkLTcwZWYtNDQ3Yy1i
MTdjLWRhNmJlOGQ3ZjMxMi9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThk
N2YzMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBARARMAwDwQCAAIwCQMHBCYgAEkAADAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgJBLjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQyaSA+wdwhZIQQGHzBHD7FWjl
6aEu8u2/NywmLFUAbNlR2f0zRok8hAHm0/AHWJVVruUBmQOXwyqNScB9pfkuX0X/
UBiHMze7zMHDm7djpaVna+hkkzVGlRc8Z7+l1iBS3YT22wTi69eCk1i9CD5iTw5z
FwjHda/boBSvaR0UEA3ETEl/BsuF/VCmhh2opHw354+Pfbj/6EXtPYvsLCT+4ijE
zBCJjEbMLwoXowGLfbGV3AchjEyYs7DJBMm0AaCaNgT98XhJM/Ia9hXUkV6JaLNt
/c9WwC1Tyn2WvYcO90sLywn4LwKvzmgD27ftKfNs36L28CqKPvdUakHuj97J
-----END CERTIFICATE-----