Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c.cer
File:                     2361d86f-f922-4559-a514-d5ddeb84428c.cer (raw, json)
Hash identifier:          dv3iWtnL1uXtcQcwnag6DNPGpxR8nwxxcyf7U3s8Zm8=
Subject key identifier:   07:37:78:64:26:53:54:43:8A:C3:25:C1:CB:24:3C:6B:DB:88:94:5D
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E483533152245B9DED737300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/2361d86f-f922-4559-a514-d5ddeb84428c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Mon 28 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 398464
                          IP: 172.111.54.0/24
                          IP: 2606:6ec0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:53:31:52:24:5b:9d:ed:73:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 28 19:06:39 2025 GMT
        Subject: CN=2361d86f-f922-4559-a514-d5ddeb84428c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:1b:26:a2:80:a6:8c:64:16:8a:7e:39:d4:
                    95:cf:63:74:ad:85:fc:a1:6b:fb:32:79:59:b7:3f:
                    6a:c1:1f:e4:bd:0f:7f:e5:92:7b:a8:57:ee:f5:96:
                    ae:2f:2c:5f:2c:9c:a4:7a:04:dd:e9:f9:0f:d0:62:
                    98:ca:a4:50:c0:18:8e:bb:4a:1f:e3:96:0f:bf:b3:
                    ae:ba:20:34:dd:1e:5e:df:03:3c:03:cc:7f:13:13:
                    1f:4c:81:a3:ec:75:dc:14:7d:1e:07:3b:c1:55:92:
                    86:be:8f:69:9b:4d:82:b1:b5:32:60:4d:f3:4e:39:
                    40:d1:eb:aa:64:71:bf:65:a6:01:68:8c:42:e5:b5:
                    9a:0b:de:8e:09:65:e5:6b:f4:62:b8:7d:ca:c4:cb:
                    84:f3:34:d9:a7:b4:94:28:c8:77:fd:2a:28:8e:01:
                    05:d6:d9:39:75:82:09:fd:bc:0e:08:9f:25:d6:d8:
                    9a:50:f0:95:2d:ab:e0:ce:e0:7c:9b:a7:2a:92:70:
                    32:d7:93:cf:71:d6:6d:79:71:98:c0:6d:e5:1e:d4:
                    21:93:46:11:f7:5a:91:cc:72:45:b3:14:e5:36:0d:
                    86:25:19:c5:7a:b4:50:97:d1:42:1e:90:b2:45:04:
                    13:c8:18:20:50:c9:df:9b:d7:50:81:7b:b7:fe:5f:
                    f0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:37:78:64:26:53:54:43:8A:C3:25:C1:CB:24:3C:6B:DB:88:94:5D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2361d86f-f922-4559-a514-d5ddeb84428c/2361d86f-f922-4559-a514-d5ddeb84428c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.54.0/24
                IPv6:
                  2606:6ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398464

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:6c:f0:44:ea:0e:cd:e3:c4:c5:a7:ab:93:34:7f:a6:15:65:
         26:fd:4c:2c:7f:6d:3f:ad:17:3a:12:bb:3d:b9:6f:89:c5:b9:
         5c:97:94:41:81:59:f0:db:42:3a:1a:84:49:ac:6f:b1:78:a5:
         45:f0:50:b5:a6:36:6b:9e:db:07:78:1d:03:c5:e8:da:ec:33:
         6e:d0:75:0c:8c:ae:03:64:9c:5b:82:31:9e:88:07:e9:52:e3:
         90:54:8c:4c:84:6a:a1:5d:5d:dd:f2:20:41:4b:96:d8:00:8c:
         9b:ba:d2:fc:ee:d5:e5:9b:fe:5d:83:ba:48:fe:65:12:fd:8d:
         76:37:9c:30:65:e6:ee:36:3c:05:9d:6b:e0:93:cf:00:48:45:
         5a:07:b8:84:5d:b1:ff:27:9f:31:66:ca:48:44:0c:93:e0:b3:
         c8:ce:c6:62:8b:29:c0:5d:b8:63:cf:39:f1:6f:49:32:d3:dc:
         51:06:56:a9:ab:ff:9b:de:dc:31:0c:d5:18:e9:42:07:81:1c:
         eb:6a:92:06:57:6b:18:51:0c:22:5b:48:30:4a:db:8c:57:ec:
         82:ac:c5:14:31:af:51:ba:aa:b8:8e:55:56:0c:7d:3e:a5:6a:
         80:fa:2e:8d:1a:af:b6:e7:fc:af:c9:08:97:d2:4a:17:3f:10:
         d3:13:d6:b1
-----BEGIN CERTIFICATE-----
MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEHkg1MxUiRbne1zcwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcyODE5MDYzOVowLzEtMCsGA1UEAxMk
MjM2MWQ4NmYtZjkyMi00NTU5LWE1MTQtZDVkZGViODQ0MjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4kbJqKApoxkFop+OdSVz2N0rYX8oWv7MnlZ
tz9qwR/kvQ9/5ZJ7qFfu9ZauLyxfLJykegTd6fkP0GKYyqRQwBiOu0of45YPv7Ou
uiA03R5e3wM8A8x/ExMfTIGj7HXcFH0eBzvBVZKGvo9pm02CsbUyYE3zTjlA0euq
ZHG/ZaYBaIxC5bWaC96OCWXla/RiuH3KxMuE8zTZp7SUKMh3/SoojgEF1tk5dYIJ
/bwOCJ8l1tiaUPCVLavgzuB8m6cqknAy15PPcdZteXGYwG3lHtQhk0YR91qRzHJF
sxTlNg2GJRnFerRQl9FCHpCyRQQTyBggUMnfm9dQgXu3/l/wSwIDAQABo4IEKjCC
BCYwHQYDVR0OBBYEFAc3eGQmU1RDisMlwcskPGvbiJRdMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y
MzYxZDg2Zi1mOTIyLTQ1NTktYTUxNC1kNWRkZWI4NDQyOGMvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzIzNjFkODZmLWY5MjItNDU1OS1h
NTE0LWQ1ZGRlYjg0NDI4Yy8yMzYxZDg2Zi1mOTIyLTQ1NTktYTUxNC1kNWRkZWI4
NDQyOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH
AQcBAf8EHzAdMAwEAgABMAYDBACsbzYwDQQCAAIwBwMFACYGbsAwGgYIKwYBBQUH
AQgBAf8ECzAJoAcwBQIDBhSAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABls8ETqDs3jxMWnq5M0f6YVZSb9
TCx/bT+tFzoSuz25b4nFuVyXlEGBWfDbQjoahEmsb7F4pUXwULWmNmue2wd4HQPF
6NrsM27QdQyMrgNknFuCMZ6IB+lS45BUjEyEaqFdXd3yIEFLltgAjJu60vzu1eWb
/l2Dukj+ZRL9jXY3nDBl5u42PAWda+CTzwBIRVoHuIRdsf8nnzFmykhEDJPgs8jO
xmKLKcBduGPPOfFvSTLT3FEGVqmr/5ve3DEM1RjpQgeBHOtqkgZXaxhRDCJbSDBK
24xX7IKsxRQxr1G6qriOVVYMfT6laoD6Lo0ar7bn/K/JCJfSShc/ENMT1rE=
-----END CERTIFICATE-----