Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
File:                     147f088f-ace0-45c8-9c73-f06e60d7debb.cer (raw, json)
Hash identifier:          C4DaUNsPFt/1+8xSpzAo9HVEytxfBEeyp3sDIe37g2U=
Subject key identifier:   A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285843EC8C1AB29FDA52D49CB0D200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 18 Nov 2023 01:45:15 +0000
Certificate not after:    Fri 20 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 26794
                          IP: 66.97.224.0/19
                          IP: 108.163.96.0/19
                          IP: 216.147.160.0/19
                          IP: 2607:fe40::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ec:8c:1a:b2:9f:da:52:d4:9c:b0:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 18 01:45:15 2023 GMT
            Not After : Feb 20 01:45:15 2026 GMT
        Subject: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:94:0b:0f:1e:e5:d8:61:77:9f:65:41:ea:2e:
                    31:89:e8:01:08:08:85:62:ea:7e:05:26:17:a7:3b:
                    f2:83:65:70:f4:b1:3c:e4:e5:0b:13:e0:cb:e5:ea:
                    68:04:7e:54:d7:23:3d:e7:8f:f5:b7:bd:48:b5:84:
                    0b:ac:74:f1:9b:8c:47:ae:4d:e3:10:2e:12:73:63:
                    f3:bf:d7:0e:54:f3:ab:ad:75:83:48:46:9c:1d:27:
                    69:cb:42:d8:fb:0f:2f:1f:1d:1f:f1:d8:4f:78:7c:
                    57:eb:6f:f6:76:e5:cb:5a:52:42:39:49:97:8a:ea:
                    b0:97:96:fa:b6:d8:12:b4:9b:2d:68:e7:33:09:76:
                    57:5e:2b:59:f2:56:02:52:61:e1:b6:ef:de:73:ce:
                    bc:7c:36:36:37:7e:e5:d1:43:84:94:64:93:26:bc:
                    06:82:95:ed:49:f0:8e:ef:5b:3b:8d:4d:56:35:cb:
                    cd:c9:dd:ae:c3:65:cd:03:32:94:98:44:53:3e:df:
                    71:37:9a:ce:30:d1:c8:8c:4a:bf:0f:e0:c4:4b:b4:
                    07:4f:d2:ec:a5:4f:79:a7:20:96:c2:96:fa:f8:d9:
                    79:1b:e3:37:ee:6f:03:a6:6d:b4:c9:51:0a:95:05:
                    36:55:62:b3:2c:01:98:1c:20:fa:fd:cb:58:06:cb:
                    02:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.224.0/19
                  108.163.96.0/19
                  216.147.160.0/19
                IPv6:
                  2607:fe40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26794

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:e5:a4:06:f1:17:2e:88:09:2c:80:9d:e3:83:35:a9:fc:ee:
         a7:e3:6b:b6:4f:f5:28:ce:76:9d:77:eb:88:fa:29:a2:8e:6b:
         11:74:b9:cb:3d:0d:22:8c:49:ba:db:49:69:d5:13:d2:bd:f3:
         c9:93:d7:86:79:7e:5a:3d:b3:1b:62:52:f4:17:ef:4e:dc:21:
         3a:dd:8b:31:e7:bd:bc:76:9b:6f:4a:b3:c0:18:3d:70:81:28:
         d9:99:c0:3a:be:e2:28:b8:7f:58:95:8b:82:9c:2e:5a:02:4f:
         74:f8:67:88:e6:b5:c3:85:6b:cd:73:e4:70:1a:c7:e8:34:c2:
         0c:3e:a6:d5:5a:a9:82:39:fd:ee:0f:27:a5:b2:91:5a:60:a4:
         66:b3:7e:e1:65:94:8d:37:35:c1:53:d4:21:4b:6b:e1:f2:49:
         03:e4:bb:ac:da:58:2f:72:1d:74:81:b2:9f:66:51:67:b7:75:
         ea:ca:72:fd:00:37:59:7e:b1:f1:56:6a:3f:df:1d:30:37:47:
         49:26:3b:7f:64:3b:a0:88:00:bd:42:02:8e:33:d2:c0:01:69:
         55:a8:33:8f:a2:17:00:dd:5f:bf:e1:b8:da:69:07:5f:32:4e:
         da:7a:2c:7e:22:ba:9f:a8:37:eb:57:a4:4e:e7:e0:ce:e7:52:
         3c:8c:8e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----