Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0143db5d-de31-4486-87a2-89286d4fcdd7.cer
File:                     0143db5d-de31-4486-87a2-89286d4fcdd7.cer (raw, json)
Hash identifier:          Hj4Kb0+sg76RUDbCsoUd6bHUEltlHekPciikTA6yXSY=
Subject key identifier:   59:49:BD:42:4D:FE:33:83:16:B5:9E:3E:68:02:F2:C8:6E:B7:1D:9F
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584461CCD3A0389A3E29DE5A9BB0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0143db5d-de31-4486-87a2-89286d4fcdd7/0143db5d-de31-4486-87a2-89286d4fcdd7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0143db5d-de31-4486-87a2-89286d4fcdd7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 30 Dec 2023 01:45:15 +0000
Certificate not after:    Fri 03 Apr 2026 00:45:15 +0000
Subordinate resources:    AS: 395075
                          IP: 172.102.16.0/20
                          IP: 2606:2f80::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:61:cc:d3:a0:38:9a:3e:29:de:5a:9b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec 30 01:45:15 2023 GMT
            Not After : Apr  3 00:45:15 2026 GMT
        Subject: CN=0143db5d-de31-4486-87a2-89286d4fcdd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d9:2d:08:aa:da:ca:4f:16:c1:13:dd:05:e1:
                    df:4f:65:c6:32:30:5c:7f:cb:3a:56:ed:55:6d:18:
                    a0:4c:d9:b4:26:6c:ac:e6:5b:b1:9e:f4:54:2b:91:
                    55:e1:26:77:1a:f3:a8:d7:08:0a:dc:de:c2:e6:4b:
                    08:72:af:a9:bb:22:40:e0:fa:b5:95:38:aa:b3:c0:
                    71:0f:47:ed:1e:82:8d:86:2d:f9:6a:97:3b:4b:c7:
                    95:b3:79:af:da:e1:cf:29:16:13:b9:59:84:5e:90:
                    9d:63:84:02:25:01:de:c3:c0:14:7f:b0:f5:19:84:
                    e1:5b:c4:ed:e2:85:18:70:a3:58:87:c0:80:15:79:
                    2a:9a:85:73:b7:fe:49:c8:51:fe:3c:d5:64:fc:14:
                    f0:fa:df:1a:0b:45:4d:b3:6b:cb:b2:9f:de:a5:de:
                    39:6a:ba:d7:ca:33:f3:0a:61:37:50:3a:d5:d3:8f:
                    8c:cb:c7:b1:c9:9e:ef:37:18:4a:07:36:24:1a:23:
                    1b:13:9c:73:a6:1a:2c:93:83:0f:23:5b:3c:6b:c3:
                    cb:5e:bc:e7:a9:5e:28:28:c5:a7:40:00:45:b3:36:
                    5f:72:c7:6d:86:25:8a:95:dd:d8:24:1f:44:96:82:
                    10:98:57:84:c8:27:2b:a3:69:2c:a7:00:73:4a:b2:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:49:BD:42:4D:FE:33:83:16:B5:9E:3E:68:02:F2:C8:6E:B7:1D:9F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0143db5d-de31-4486-87a2-89286d4fcdd7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0143db5d-de31-4486-87a2-89286d4fcdd7/0143db5d-de31-4486-87a2-89286d4fcdd7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.16.0/20
                IPv6:
                  2606:2f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395075

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:54:9c:7f:5b:61:6d:25:0c:d5:81:bc:85:93:18:c7:3b:83:
         72:47:e9:fd:bf:b7:4a:b4:3f:a8:c9:6d:7e:1a:e6:b4:65:92:
         ae:c6:ef:ca:86:dd:eb:00:3d:ba:5b:d9:ad:e4:d1:30:2e:2b:
         36:11:95:24:2e:0b:28:d4:10:2a:33:c1:ec:e0:8e:3f:a6:dd:
         a2:bd:7c:c2:5f:1e:0c:47:be:ff:4a:f8:52:12:ff:97:ed:63:
         7e:09:f1:6c:56:f4:d3:05:af:40:2f:c1:5c:b7:ca:6a:26:c8:
         7c:48:e9:3c:46:bb:32:fc:58:f4:f5:c4:a2:ff:1f:4f:47:e6:
         b0:8b:f5:8e:0f:bd:8e:37:2b:7c:ad:53:cd:57:bf:6a:04:79:
         73:bd:20:8a:8e:56:db:0f:ae:44:a3:2c:58:2b:f9:8a:93:aa:
         d9:e4:16:3e:f1:72:3a:5e:9d:f3:cb:7c:df:0f:4f:dd:0d:53:
         e1:f7:1d:f0:a6:2b:03:75:3c:ec:7f:ff:7b:f8:4c:b7:89:04:
         df:0a:d0:ca:d1:b2:7f:da:02:17:bc:88:fd:e2:c1:b2:f6:eb:
         a9:53:78:48:da:0c:ff:99:b4:13:d1:69:0c:56:5e:f4:10:3f:
         49:d5:a1:9a:9b:3e:b2:36:64:af:ac:88:7f:20:cd:02:2a:c5:
         92:2a:db:d9
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWERhzNOgOJo+Kd5am7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMTIzMDAxNDUxNVoXDTI2MDQwMzAwNDUxNVowLzEtMCsGA1UEAxMk
MDE0M2RiNWQtZGUzMS00NDg2LTg3YTItODkyODZkNGZjZGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9ktCKrayk8WwRPdBeHfT2XGMjBcf8s6Vu1V
bRigTNm0Jmys5luxnvRUK5FV4SZ3GvOo1wgK3N7C5ksIcq+puyJA4Pq1lTiqs8Bx
D0ftHoKNhi35apc7S8eVs3mv2uHPKRYTuVmEXpCdY4QCJQHew8AUf7D1GYThW8Tt
4oUYcKNYh8CAFXkqmoVzt/5JyFH+PNVk/BTw+t8aC0VNs2vLsp/epd45arrXyjPz
CmE3UDrV04+My8exyZ7vNxhKBzYkGiMbE5xzphosk4MPI1s8a8PLXrznqV4oKMWn
QABFszZfcsdthiWKld3YJB9EloIQmFeEyCcro2kspwBzSrJQswIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFFlJvUJN/jODFrWePmgC8shutx2fMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w
MTQzZGI1ZC1kZTMxLTQ0ODYtODdhMi04OTI4NmQ0ZmNkZDcvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzAxNDNkYjVkLWRlMzEtNDQ4Ni04
N2EyLTg5Mjg2ZDRmY2RkNy8wMTQzZGI1ZC1kZTMxLTQ0ODYtODdhMi04OTI4NmQ0
ZmNkZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBASsZhAwDQQCAAIwBwMFACYGL4AwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBgdDMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA9UnH9bYW0lDNWBvIWTGMc7g3JH
6f2/t0q0P6jJbX4a5rRlkq7G78qG3esAPbpb2a3k0TAuKzYRlSQuCyjUECozwezg
jj+m3aK9fMJfHgxHvv9K+FIS/5ftY34J8WxW9NMFr0AvwVy3ymomyHxI6TxGuzL8
WPT1xKL/H09H5rCL9Y4PvY43K3ytU81Xv2oEeXO9IIqOVtsPrkSjLFgr+YqTqtnk
Fj7xcjpenfPLfN8PT90NU+H3HfCmKwN1POx//3v4TLeJBN8K0MrRsn/aAhe8iP3i
wbL266lTeEjaDP+ZtBPRaQxWXvQQP0nVoZqbPrI2ZK+siH8gzQIqxZIq29k=
-----END CERTIFICATE-----