Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
File:                     eff73345-b771-45fd-be81-1f41a7f777ec.cer (raw, json)
Hash identifier:          tbsBh2VQ6j9SDM7IkJm+WVDstncQ1bPpeIfK9PYfz68=
Subject key identifier:   9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285845BB799757F561216202A26620
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 01 May 2024 21:27:14 +0000
Certificate not after:    Mon 13 Jul 2026 22:03:43 +0000
Subordinate resources:    AS: 36168
                          AS: 400967
                          IP: 23.175.120.0/24
                          IP: 2602:f922::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bb:79:97:57:f5:61:21:62:02:a2:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May  1 21:27:14 2024 GMT
            Not After : Jul 13 22:03:43 2026 GMT
        Subject: CN=eff73345-b771-45fd-be81-1f41a7f777ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4c:f2:6b:81:e8:e3:aa:a3:09:a3:47:90:ed:
                    1d:38:71:a6:9e:fd:13:b6:1a:25:40:82:e0:d4:91:
                    25:a6:24:6c:78:71:04:c1:4c:7c:3d:63:6e:98:96:
                    ff:97:fe:68:2c:71:06:b5:f1:65:bf:77:5c:48:8e:
                    e0:f9:57:f6:82:b0:5c:48:7f:71:26:88:6e:f1:89:
                    de:87:c0:94:0a:07:d2:56:b8:ee:d5:4a:ee:48:ef:
                    d7:e4:9f:b4:64:e8:b6:09:f2:26:df:6f:df:51:09:
                    25:41:9d:66:25:f0:00:98:34:30:76:d1:7b:f1:84:
                    89:70:38:f4:ae:04:85:f9:b9:4f:ec:ab:3e:47:b3:
                    c5:c8:93:a3:48:5a:77:f5:81:25:89:52:f4:a2:a0:
                    23:90:3c:ff:93:d5:9a:bb:c4:9f:3a:9b:e4:07:c4:
                    7d:d0:68:dd:f9:42:e1:9c:3d:c4:3e:d5:7d:f5:00:
                    9c:dc:06:46:38:47:b9:65:d8:8c:c1:bb:0f:7c:f4:
                    cb:0d:fb:44:fd:be:74:5a:1c:31:4d:d2:83:6d:07:
                    e1:82:63:fe:fb:30:1a:cc:0b:3f:76:ef:3e:c8:48:
                    cd:0b:f0:8b:77:62:7a:21:c6:d7:6e:c4:8b:8b:1a:
                    57:de:a5:9d:ca:26:fc:c4:aa:e0:48:ce:27:5a:f7:
                    f2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.120.0/24
                IPv6:
                  2602:f922::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36168
                  400967

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:18:43:fe:b5:51:f2:d5:c5:53:9a:40:ca:19:e9:70:93:bc:
         fc:cc:1a:1b:8c:db:94:9a:71:93:98:e2:7c:01:88:42:4e:53:
         31:a5:fa:38:6f:4b:87:e8:71:c9:49:4d:b4:14:0c:c5:96:06:
         42:c3:2b:4b:8c:5e:95:2e:9f:0c:29:44:9d:c8:76:46:6b:be:
         8e:25:20:e8:bf:fd:22:74:8f:4d:1b:88:23:ac:f7:58:2e:f1:
         fb:f3:97:8b:d7:4c:d7:4b:40:0f:6f:2c:c2:a9:0c:fa:00:cc:
         03:2f:ce:9d:e4:db:75:67:6f:7b:e4:90:59:a5:8b:b1:30:be:
         31:7b:e8:36:81:ed:ca:d6:c1:85:af:be:c7:f9:8e:6a:9a:d7:
         39:51:23:40:31:f2:ef:8f:a2:fb:73:ad:28:49:dc:f1:94:a0:
         2c:b1:da:44:b5:38:6d:2a:d4:a8:71:b9:57:92:db:e1:ba:6f:
         16:cd:7b:a3:40:bd:85:28:56:ba:77:6c:86:90:a3:27:04:c2:
         fc:02:59:99:da:1f:56:c8:29:10:b9:2f:b6:21:c0:03:c1:79:
         2f:c2:49:71:36:3f:97:cc:dd:77:cb:da:e8:af:00:e1:db:68:
         a3:5d:f9:5c:5b:23:6d:ba:68:f7:03:c5:25:6a:b1:b9:e3:20:
         77:ea:c2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----