Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c.cer
File:                     03076186-05a5-4f02-8553-d5325a66f27c.cer (raw, json)
Hash identifier:          z6wUgdkriPhJQ6K8I+b2TRKUDd8OE1BLApZT9GKiYWg=
Subject key identifier:   69:D4:35:E5:90:23:80:6B:D2:31:31:23:77:EB:74:1B:16:54:4E:B9
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285844E50305D118FB7CD65B07E400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/03076186-05a5-4f02-8553-d5325a66f27c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 15 Feb 2024 01:45:20 +0000
Certificate not after:    Wed 20 May 2026 00:45:20 +0000
Subordinate resources:    AS: 395454
                          IP: 52.144.126.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e5:03:05:d1:18:fb:7c:d6:5b:07:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb 15 01:45:20 2024 GMT
            Not After : May 20 00:45:20 2026 GMT
        Subject: CN=03076186-05a5-4f02-8553-d5325a66f27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:42:c2:9c:cf:27:50:a3:5e:a1:e0:ec:5f:0f:
                    82:6e:7a:9c:45:4e:95:04:d1:26:2f:8c:60:80:8a:
                    03:88:6c:34:7e:93:5a:8c:b1:23:bb:76:84:ed:f6:
                    3e:e1:61:9f:05:24:42:a1:f1:6d:41:e9:35:cc:c3:
                    68:0d:33:c5:9d:6f:95:24:3b:6a:1f:41:ad:e3:94:
                    9b:c6:d0:0e:45:f8:44:c5:ea:14:80:c6:62:b2:a7:
                    02:fb:dc:8c:91:13:91:4d:7e:5d:4c:82:f4:35:68:
                    17:97:a5:33:d0:02:8c:de:b1:f3:75:01:50:37:d3:
                    e5:a0:d9:90:1e:55:a0:81:9e:69:f1:11:fc:52:4b:
                    33:78:17:19:39:a8:cc:b8:f2:96:41:fd:34:68:c1:
                    28:80:dc:5e:fc:ad:63:08:aa:04:5a:e0:31:78:15:
                    3e:b8:00:5f:e8:71:c1:a8:e5:92:78:de:fe:88:4d:
                    04:f7:b4:6f:73:e6:94:5f:3e:34:76:da:b8:5f:40:
                    45:ef:35:2e:7f:b2:63:c6:7b:6a:5d:3e:2e:9c:1e:
                    00:c9:e3:eb:94:e9:7b:aa:4e:f4:90:b4:db:20:a4:
                    8f:d2:7d:fd:f5:f3:26:33:fc:01:ba:f2:69:6a:18:
                    54:2c:df:b8:f0:4c:f5:b0:a5:3f:4a:6d:34:cd:8e:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D4:35:E5:90:23:80:6B:D2:31:31:23:77:EB:74:1B:16:54:4E:B9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03076186-05a5-4f02-8553-d5325a66f27c/03076186-05a5-4f02-8553-d5325a66f27c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.126.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  395454

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:51:21:9c:50:85:c4:46:85:d0:9f:31:ee:d6:86:bf:3b:7e:
         7f:22:74:97:5b:6b:c8:54:98:ee:9b:81:e4:31:ff:ac:df:eb:
         6c:7c:88:8f:c6:d3:29:ad:cb:6f:8e:49:7b:21:5f:6f:47:97:
         54:23:92:e0:42:71:86:eb:11:88:74:d3:ee:d8:ad:f7:9f:99:
         a6:5a:60:41:cb:e8:03:aa:b0:96:de:27:80:aa:3e:79:c7:a3:
         bf:d9:17:c3:69:0b:6f:00:03:c3:ff:f8:bf:68:4b:ee:01:9e:
         59:af:65:cf:5d:59:b0:e8:db:87:b9:d1:97:32:3a:e5:3e:a2:
         6e:4f:a2:4c:e2:00:2d:27:1a:c1:fa:03:16:89:b0:19:13:0c:
         3f:61:ee:ab:47:48:8c:05:b2:7e:20:d1:3a:cd:e5:07:29:28:
         8f:d8:b7:9c:e5:a9:c8:e0:18:f8:0c:e8:03:be:3b:98:17:2e:
         b2:dd:53:f4:cc:73:df:bd:51:3b:f5:77:31:a3:f1:bf:8f:ff:
         26:7c:f1:dd:cd:b0:5f:f5:e6:1a:f5:03:83:d0:47:a0:20:a1:
         48:47:ef:a0:75:91:37:00:7d:0e:c5:aa:4c:6d:72:c6:8f:3b:
         e2:91:9b:a2:6f:78:27:ef:0e:41:07:c4:39:ff:51:85:fa:39:
         51:f3:e2:d9
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWETlAwXRGPt81lsH5AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDIxNTAxNDUyMFoXDTI2MDUyMDAwNDUyMFowLzEtMCsGA1UEAxMk
MDMwNzYxODYtMDVhNS00ZjAyLTg1NTMtZDUzMjVhNjZmMjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0LCnM8nUKNeoeDsXw+CbnqcRU6VBNEmL4xg
gIoDiGw0fpNajLEju3aE7fY+4WGfBSRCofFtQek1zMNoDTPFnW+VJDtqH0Gt45Sb
xtAORfhExeoUgMZisqcC+9yMkRORTX5dTIL0NWgXl6Uz0AKM3rHzdQFQN9PloNmQ
HlWggZ5p8RH8UkszeBcZOajMuPKWQf00aMEogNxe/K1jCKoEWuAxeBU+uABf6HHB
qOWSeN7+iE0E97Rvc+aUXz40dtq4X0BF7zUuf7JjxntqXT4unB4AyePrlOl7qk70
kLTbIKSP0n399fMmM/wBuvJpahhULN+48Ez1sKU/Sm00zY7aiwIDAQABo4IEGzCC
BBcwHQYDVR0OBBYEFGnUNeWQI4Br0jExI3frdBsWVE65MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w
MzA3NjE4Ni0wNWE1LTRmMDItODU1My1kNTMyNWE2NmYyN2MvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzAzMDc2MTg2LTA1YTUtNGYwMi04
NTUzLWQ1MzI1YTY2ZjI3Yy8wMzA3NjE4Ni0wNWE1LTRmMDItODU1My1kNTMyNWE2
NmYyN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAE0kH4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID
Bgi+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABtRIZxQhcRGhdCfMe7Whr87fn8idJdba8hUmO6bgeQx/6zf
62x8iI/G0ymty2+OSXshX29Hl1QjkuBCcYbrEYh00+7YrfefmaZaYEHL6AOqsJbe
J4CqPnnHo7/ZF8NpC28AA8P/+L9oS+4BnlmvZc9dWbDo24e50ZcyOuU+om5Pokzi
AC0nGsH6AxaJsBkTDD9h7qtHSIwFsn4g0TrN5QcpKI/Yt5zlqcjgGPgM6AO+O5gX
LrLdU/TMc9+9UTv1dzGj8b+P/yZ88d3NsF/15hr1A4PQR6AgoUhH76B1kTcAfQ7F
qkxtcsaPO+KRm6JveCfvDkEHxDn/UYX6OVHz4tk=
-----END CERTIFICATE-----