Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/298e3857-251e-4943-9e53-f26bb0898b27.cer
File:                     298e3857-251e-4943-9e53-f26bb0898b27.cer (raw, json)
Hash identifier:          72TbZjaXwcT+NUsMskOHjXr8nISAjkCtTV1PYirY8+g=
Subject key identifier:   AE:36:CB:F4:DD:11:99:88:FD:61:33:E7:A6:EA:8F:17:1F:DD:6E:30
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E483475AFB0320FEFC875F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/298e3857-251e-4943-9e53-f26bb0898b27/298e3857-251e-4943-9e53-f26bb0898b27.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/298e3857-251e-4943-9e53-f26bb0898b27/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Wed 07 May 2025 19:06:39 +0000
Subordinate resources:    AS: 54868
                          IP: 104.255.24.0/21
                          IP: 2602:ff92::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:47:5a:fb:03:20:fe:fc:87:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May  7 19:06:39 2025 GMT
        Subject: CN=298e3857-251e-4943-9e53-f26bb0898b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:48:ff:24:f2:73:c3:56:83:90:30:80:dd:
                    96:46:7e:27:0c:ac:86:e1:be:71:9e:e1:96:f5:e1:
                    95:72:93:2f:a6:2d:02:b0:4f:44:b9:50:86:91:98:
                    a5:54:ae:72:8c:1f:81:f5:2a:d2:ed:f1:fd:b6:8c:
                    81:db:3f:d8:71:11:86:4c:58:e6:4e:b5:02:b6:35:
                    a7:fb:24:48:77:8d:72:64:b3:64:84:13:90:a1:37:
                    69:b8:fe:16:0a:13:aa:0c:eb:01:67:33:07:d3:54:
                    e9:08:15:ce:1b:14:96:f6:0b:06:e7:0a:f4:6b:c3:
                    e1:ae:82:76:f8:de:f3:3b:a1:f5:c1:4b:6e:8e:b4:
                    dd:69:f6:5d:f0:0c:02:3e:43:04:71:e7:c7:01:b3:
                    65:31:1a:e7:80:c6:da:9b:08:7b:f0:28:3b:56:d1:
                    0e:ec:74:a3:85:38:2e:6a:4d:6e:8f:30:57:1f:cb:
                    d7:cd:79:dd:55:12:29:12:55:7a:2b:fd:b4:3c:02:
                    82:bb:8d:95:9c:01:07:5a:22:8d:8d:af:c2:d1:59:
                    ee:35:cc:da:78:63:b6:8a:c0:ca:2e:b4:bd:fa:7d:
                    cd:f9:39:dc:72:f9:6a:1c:44:e5:f8:f0:d0:9a:00:
                    af:4a:9b:e1:c9:3a:67:b8:76:05:89:dd:61:d8:f1:
                    77:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:36:CB:F4:DD:11:99:88:FD:61:33:E7:A6:EA:8F:17:1F:DD:6E:30
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/298e3857-251e-4943-9e53-f26bb0898b27/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/298e3857-251e-4943-9e53-f26bb0898b27/298e3857-251e-4943-9e53-f26bb0898b27.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.24.0/21
                IPv6:
                  2602:ff92::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54868

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:7a:95:34:9c:87:f1:bb:ca:5c:36:e0:60:de:61:ed:fc:49:
         ef:de:7f:e3:40:03:82:fa:3f:87:f7:e8:9e:4e:6f:16:48:ac:
         e7:79:d7:c2:0b:ad:c3:9c:26:88:b8:5c:45:92:a0:8a:be:ca:
         91:18:bb:96:9f:bf:55:9a:e4:89:28:db:1e:50:fd:6a:85:32:
         df:45:41:05:1b:01:dd:e4:2a:cb:1a:4f:28:4a:15:00:de:34:
         70:4b:1c:d6:97:94:d7:a9:04:1d:a0:a6:b5:70:12:cc:a5:5a:
         c7:34:64:63:4f:a0:86:34:34:aa:c1:da:27:a9:0d:3b:16:92:
         29:0c:37:16:9b:9e:44:3d:8a:01:e0:eb:10:08:65:29:17:ea:
         85:53:02:f6:c7:9f:dd:08:53:fe:af:35:37:5b:ab:da:7d:ba:
         89:dd:70:f6:52:ec:0f:4d:fb:43:58:4c:7b:18:0e:96:23:e7:
         77:3d:af:24:d3:a6:0d:85:c8:f9:d8:ae:b3:49:e0:6c:dd:8f:
         4f:94:79:e5:1c:37:c7:53:60:77:86:87:e2:37:bb:7a:1f:20:
         3b:63:2a:af:58:c4:85:62:19:b7:00:01:a6:bc:2d:30:38:31:
         3a:60:99:e2:7f:07:85:de:f6:06:5b:f4:de:c3:8f:75:41:f0:
         44:79:3b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:42:14 2024 by rpki-client on console-fra.rpki-client.org