Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer
File:                     f13c298e-3179-4f35-9e7d-886ee3f9be0b.cer (raw, json)
Hash identifier:          YXWwXvKhhgqCsBQ+l19q/33afIWaUEHtgqyGM5lBwbE=
Subject key identifier:   56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858448E77D1025814B0AC30D7E840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 Jan 2024 01:45:20 +0000
Certificate not after:    Sun 19 Apr 2026 00:45:20 +0000
Subordinate resources:    AS: 54944
                          IP: 64.234.115.0/24
                          IP: 216.169.145.0/24
                          IP: 2606:7740::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:8e:77:d1:02:58:14:b0:ac:30:d7:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jan 15 01:45:20 2024 GMT
            Not After : Apr 19 00:45:20 2026 GMT
        Subject: CN=f13c298e-3179-4f35-9e7d-886ee3f9be0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:d9:0f:77:f0:ac:0a:e2:2e:c0:42:b8:e2:
                    29:1f:b3:ab:97:7c:47:32:15:b7:93:78:d4:f1:5b:
                    31:d4:c4:6a:4a:78:36:7c:53:a8:db:10:87:f8:71:
                    1e:9b:90:75:63:6b:fa:07:47:5f:0a:59:9a:e6:90:
                    77:09:c3:7b:5c:09:3d:a5:d1:e1:3f:88:ce:44:78:
                    22:4b:83:bb:0e:fd:9c:3e:4a:7c:50:09:2b:a5:8d:
                    64:60:cd:69:24:07:c5:8e:6d:4b:3b:54:ba:3b:47:
                    15:52:5e:24:5c:07:b2:6b:13:63:9c:f1:b9:dc:f9:
                    69:2a:93:da:57:c2:4f:e0:be:e1:5e:dc:b9:a1:9f:
                    7f:2f:53:6b:07:fb:e4:d3:92:16:24:1c:92:82:c1:
                    75:b4:71:bb:e2:2b:d7:9d:55:8a:9b:75:4a:6d:35:
                    01:23:32:87:4f:a6:8a:b5:00:55:b0:b1:33:81:0c:
                    35:5b:a3:fd:0b:f8:e8:8a:69:13:74:2d:16:fd:3f:
                    88:ec:55:16:77:f8:96:98:92:eb:e0:d5:69:79:55:
                    11:76:00:b1:3d:f4:53:8c:f6:61:4b:f7:c0:9c:81:
                    f9:87:ce:c4:55:70:7b:ad:40:a9:88:2b:f8:14:3c:
                    d2:04:eb:a2:e8:8b:90:41:15:74:72:67:61:86:60:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:56:CF:C5:B4:E3:45:16:37:F9:19:FA:67:97:3D:2E:48:27:E7:42
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f13c298e-3179-4f35-9e7d-886ee3f9be0b/f13c298e-3179-4f35-9e7d-886ee3f9be0b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.234.115.0/24
                  216.169.145.0/24
                IPv6:
                  2606:7740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54944

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:83:52:5d:5c:87:1c:80:7a:5b:42:4a:2e:a9:95:0f:91:78:
         ea:2f:47:d5:30:83:f0:fc:cc:17:fa:e3:cd:e6:ae:0d:9a:c9:
         3c:5a:55:96:c0:30:1b:c0:8e:dd:44:fb:7a:68:c7:46:2e:68:
         8a:b5:3d:dd:2f:57:04:4e:35:e2:46:6c:11:5b:d1:fc:4e:08:
         dd:48:70:8c:c9:fb:ac:08:17:a7:4c:8b:51:1a:c4:4d:86:a2:
         c3:15:5f:c2:79:5b:bb:f5:bf:22:46:c5:2a:eb:94:68:79:c8:
         fd:ee:ad:62:2e:8b:5f:59:ea:bc:c3:20:d4:02:e6:2b:dc:63:
         81:91:1d:a7:a9:19:f1:28:2c:32:5e:7b:d1:08:60:f3:ed:3c:
         30:e5:07:67:1c:47:1f:e5:d0:c0:3b:9e:9a:c5:09:13:a4:d4:
         9e:57:17:7d:2e:d6:ca:6e:e5:05:1b:35:fe:2c:22:5e:51:d5:
         8b:79:21:a7:6f:10:3a:76:86:01:47:9e:89:d5:c7:b0:f3:e0:
         8f:f8:20:08:f4:23:45:07:a4:94:31:37:e9:6c:b2:3b:ce:ed:
         38:97:46:ff:3c:bf:37:f3:ac:55:94:79:64:24:7f:8c:a7:8c:
         1d:ab:74:d1:08:f0:f9:72:d9:a4:27:f0:f5:b9:17:50:40:20:
         a6:62:96:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----