Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79.cer
File:                     1004cebd-7023-4e63-b006-53f0c227de79.cer (raw, json)
Hash identifier:          O8I5GGXFSyID8uWgwbLh83nj6NuY/CjSKFv1eTnnLdA=
Subject key identifier:   C6:B2:A0:E8:24:20:8F:EA:00:6E:7F:16:CE:CB:34:8B:BF:8C:CA:94
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858464A3CCEB5396BAB7D18E5DC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 22 Jun 2024 00:45:21 +0000
Certificate not after:    Fri 25 Sep 2026 00:45:21 +0000
Subordinate resources:    IP: 193.149.173.0/24
                          IP: 2602:2bd::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4a:3c:ce:b5:39:6b:ab:7d:18:e5:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jun 22 00:45:21 2024 GMT
            Not After : Sep 25 00:45:21 2026 GMT
        Subject: CN=1004cebd-7023-4e63-b006-53f0c227de79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2d:34:76:78:40:8a:b6:7e:39:0f:98:06:b2:
                    71:7d:f9:51:a6:28:97:dc:a3:86:9c:33:0d:13:a6:
                    94:f3:d3:e5:f9:b5:46:73:24:c3:6a:22:4c:b4:c3:
                    5f:e4:f5:bb:2e:e2:bc:5c:6c:9c:1d:72:22:ba:f7:
                    d1:7b:5e:fd:78:68:ff:a1:d2:e1:90:89:3f:ff:8b:
                    11:53:af:12:eb:bd:7c:89:97:3b:e3:df:9b:17:25:
                    d2:5e:8e:92:e8:06:2c:c6:70:d7:9d:12:62:d5:2a:
                    66:3a:e5:2f:90:d8:88:3e:76:08:86:a7:66:14:a6:
                    fc:83:1f:67:ab:39:64:42:7e:9e:a7:99:c1:99:c9:
                    74:b9:a7:e0:f2:64:8d:1c:6e:d1:04:c5:73:70:cc:
                    81:c7:d5:3f:a3:f2:3a:4f:a2:d8:a9:b4:41:62:a6:
                    fd:b5:5d:68:26:ac:9e:e1:35:bf:2e:87:fa:af:8b:
                    0c:0b:d4:d3:06:96:2c:76:e6:47:16:b9:18:6c:ce:
                    3b:75:0d:9f:66:50:db:b7:f8:7f:99:9d:c5:2f:8a:
                    20:b6:aa:32:8d:c0:e9:f1:a9:41:53:67:1e:c9:de:
                    6a:ca:ab:7b:5b:c6:44:a1:c9:d6:9d:43:27:d5:2f:
                    0b:e8:67:2f:10:c3:02:5b:c5:74:a8:bd:a7:29:18:
                    f3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B2:A0:E8:24:20:8F:EA:00:6E:7F:16:CE:CB:34:8B:BF:8C:CA:94
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.173.0/24
                IPv6:
                  2602:2bd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b8:e2:32:4a:22:62:66:f3:a9:37:1b:79:5e:c9:93:68:c1:
         5e:42:26:f2:fd:d2:f6:be:0c:33:ca:2b:29:90:91:41:c6:d7:
         68:78:a8:19:0d:96:dd:ea:27:be:b6:df:db:3c:07:0f:7b:0a:
         03:cb:ff:1f:3d:8d:ce:ef:d0:5e:66:52:f0:f4:30:a5:c0:14:
         58:c0:7e:56:c5:2a:4e:0c:81:f9:b5:bc:77:ed:0d:a7:00:21:
         d9:f5:72:90:8e:36:35:0e:5a:9c:fe:43:d1:16:49:81:78:20:
         29:56:45:39:1b:a7:ce:c5:2c:18:10:83:8c:3b:83:09:7d:b2:
         fb:5a:24:67:ba:d1:02:30:72:85:41:72:02:c1:43:e4:c9:26:
         bd:a3:ad:37:bd:fc:8d:aa:68:cc:a6:44:db:67:64:58:80:af:
         3e:1c:f6:98:2f:e9:a4:86:fe:67:b4:2e:4f:38:1c:ca:3f:fb:
         76:5b:3f:ce:3d:58:5f:36:8c:43:a7:40:8c:e7:53:d7:67:64:
         33:8f:2e:2d:4b:1d:54:06:08:6a:e5:74:f2:86:65:0b:1b:00:
         ef:55:12:29:3f:76:4e:75:10:59:8c:21:82:8d:aa:75:b0:e5:
         70:8a:0f:7b:bb:f5:71:de:ce:c7:c4:39:db:71:06:cf:41:97:
         ad:6f:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----