Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
File:                     ec23d019-d079-49df-94b6-ad79d138e90f.cer (raw, json)
Hash identifier:          3PvjKuKH674E5umj8roBHcOHRh4JvazIJ5s8vxBvY1c=
Subject key identifier:   7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E48351E72CD3A6C5EAC79800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sat 19 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 46978
                          IP: 23.187.144.0/22
                          IP: 66.118.40.0/22
                          IP: 2606:7540::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:51:e7:2c:d3:a6:c5:ea:c7:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 19 19:06:39 2025 GMT
        Subject: CN=ec23d019-d079-49df-94b6-ad79d138e90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:01:88:11:70:88:68:c4:04:04:f4:2c:66:
                    de:d2:19:d6:15:a5:a8:3d:0d:a7:ba:ef:d7:bd:6e:
                    89:9d:91:15:05:e7:a5:84:00:2b:f0:29:92:8a:05:
                    76:e8:0b:fe:c2:1d:33:f7:f6:40:5d:63:ff:d7:d8:
                    e6:f6:2b:ee:bd:1a:d9:82:40:6f:2f:36:02:64:7f:
                    0e:c4:72:36:e5:c6:21:13:1a:34:bf:10:5d:94:47:
                    f2:2b:ef:2e:3a:b8:84:c8:b0:ba:e0:c6:bc:ac:62:
                    f3:f9:3a:f4:c3:8b:8c:9a:e9:67:6e:c9:26:31:48:
                    40:96:90:a5:d1:38:dd:01:1c:ee:34:e2:da:a8:c0:
                    02:2a:e2:84:90:bd:98:fd:08:6d:78:dc:22:12:65:
                    eb:df:21:5e:83:69:34:ef:21:e3:e2:d4:e9:85:6c:
                    c5:47:d4:ad:55:81:78:fc:92:38:60:d5:09:73:63:
                    07:a1:5b:e0:68:4c:3b:26:2d:1a:ea:63:bc:dc:7e:
                    8f:78:16:10:62:c7:87:8a:03:97:c1:b2:fc:9c:eb:
                    b5:28:35:43:06:b0:5f:c6:e9:b5:a7:85:b0:2c:82:
                    b2:6b:ac:cc:b8:40:a7:eb:9b:a7:94:20:02:cd:12:
                    6b:d8:c2:1b:ad:85:e4:74:1d:20:e7:32:44:6f:55:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.144.0/22
                  66.118.40.0/22
                IPv6:
                  2606:7540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46978

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:31:00:08:46:27:f8:01:f4:19:05:d5:d8:8f:cb:23:ac:27:
         6e:b3:99:b6:82:13:27:9c:4c:52:a0:a7:12:fe:cf:43:55:0a:
         f8:07:2c:86:fa:9b:a7:80:39:c1:46:5d:09:61:29:10:9a:6b:
         d2:bb:88:48:f8:d0:9d:c5:b3:51:e9:b0:6b:02:e5:06:b1:a1:
         36:83:a5:6d:e6:7c:99:86:bf:d8:f4:c3:79:a2:f7:87:72:dd:
         10:9d:18:7d:13:45:18:30:ff:c8:d6:de:97:e6:b1:0a:2c:91:
         5d:8d:06:36:10:00:fc:66:d6:8c:20:6a:9f:4e:d7:4b:f7:55:
         01:a0:ca:2f:15:72:f1:11:7b:ea:26:5b:e4:72:09:54:fb:63:
         51:0e:c6:61:20:57:ff:d2:92:b3:f5:e6:cb:07:c0:1e:48:72:
         fc:a4:0a:0d:20:0c:02:0f:e3:9f:f3:5b:86:cc:57:db:7c:3b:
         09:77:8c:33:c2:38:11:b0:8b:4f:eb:2b:d1:f0:30:a0:ba:9d:
         b2:b3:f0:f2:ce:92:3b:dc:c1:69:cd:9c:58:81:66:90:47:4b:
         3d:db:a1:b4:19:e0:e7:07:08:91:c6:2a:37:39:a6:4a:8f:a6:
         d3:6d:af:7b:a8:f6:a8:bd:85:84:8b:40:3e:99:0d:e9:22:f5:
         a9:a5:c7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----