Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a84ba57-a9e1-4782-b32d-347a82b1a554.cer
File:                     2a84ba57-a9e1-4782-b32d-347a82b1a554.cer (raw, json)
Hash identifier:          d6t/vEF+vq4aV2amLMUTchAXMO3oP+7mVLZjXJooZTg=
Subject key identifier:   15:C0:1E:33:B9:AF:E8:58:0A:47:89:E1:C7:87:0D:B9:D0:75:E2:74
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584307824B03970CC2DD7CC00B60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a84ba57-a9e1-4782-b32d-347a82b1a554/2a84ba57-a9e1-4782-b32d-347a82b1a554.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a84ba57-a9e1-4782-b32d-347a82b1a554/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 28 Aug 2023 00:45:23 +0000
Certificate not after:    Sun 30 Nov 2025 01:45:23 +0000
Subordinate resources:    AS: 13559

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:07:82:4b:03:97:0c:c2:dd:7c:c0:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Aug 28 00:45:23 2023 GMT
            Not After : Nov 30 01:45:23 2025 GMT
        Subject: CN=2a84ba57-a9e1-4782-b32d-347a82b1a554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:29:8f:dc:6e:14:40:e3:16:cf:f7:f7:2e:
                    83:6a:72:9e:5f:76:09:77:7c:66:e9:83:94:07:40:
                    74:55:42:55:e3:c2:e5:60:b8:b5:4d:f8:8e:4a:f0:
                    fe:61:64:0d:74:a5:36:70:ad:65:da:67:b9:be:ad:
                    c2:24:ce:a3:6b:10:2d:02:84:65:47:84:d9:44:3a:
                    40:05:4c:50:ea:4e:1f:07:27:6a:d7:36:85:f0:a1:
                    50:93:5d:ce:4d:e3:c6:cc:43:62:ed:e6:ef:a1:a8:
                    ef:85:7b:20:9e:eb:6c:07:1f:b5:84:de:f8:1a:69:
                    e1:70:8c:98:9f:07:5e:e6:f3:cf:4f:37:1e:57:7a:
                    e7:d2:1a:f3:10:50:d7:46:0b:08:86:1e:07:eb:83:
                    c3:d7:04:1a:c1:03:40:c2:0a:27:2b:7a:db:6e:5a:
                    51:1f:7f:ec:47:83:d9:e4:75:95:11:4c:00:3b:ca:
                    7b:62:8a:fb:a6:bb:ba:b8:65:12:83:32:77:d6:b7:
                    10:ca:e4:34:42:b2:90:3d:7e:ca:a6:b8:05:73:57:
                    ba:2a:b3:b2:3d:2b:bc:6a:1e:c1:3d:cd:83:f5:fa:
                    b0:f6:80:f6:63:cb:4a:10:40:90:f7:62:ba:b9:d7:
                    53:f7:91:e6:0e:6e:d8:5e:3c:4e:de:c2:e8:d2:e4:
                    d2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C0:1E:33:B9:AF:E8:58:0A:47:89:E1:C7:87:0D:B9:D0:75:E2:74
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a84ba57-a9e1-4782-b32d-347a82b1a554/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a84ba57-a9e1-4782-b32d-347a82b1a554/2a84ba57-a9e1-4782-b32d-347a82b1a554.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13559

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:12:5b:1a:57:d9:29:e2:95:15:dd:73:f0:df:30:92:fa:c5:
         2d:cb:45:a5:98:f9:d7:70:78:3c:8a:1c:4d:d8:eb:d3:5b:31:
         bb:9b:ac:cf:02:cf:2f:09:14:22:2f:57:c2:63:04:9c:43:5f:
         37:32:92:99:2e:9c:f0:b2:90:bf:e4:b9:86:f7:82:53:05:fe:
         e0:07:97:6f:a0:ae:05:05:4b:84:78:dd:96:f9:ba:87:36:43:
         7e:90:34:ac:15:ee:e3:53:fe:1b:20:82:1f:02:a2:21:17:b9:
         96:cb:47:f7:33:f4:00:6a:49:78:95:da:f9:2d:ff:80:5d:96:
         cf:be:3d:a0:8e:c3:ad:ef:67:87:c7:53:29:8d:34:7f:2c:8a:
         19:3f:5f:1d:26:3a:36:88:e0:1d:50:6e:f3:ab:24:8a:d5:76:
         9f:ac:7d:f3:b8:42:d3:f6:d2:ce:44:37:68:67:c5:2d:69:df:
         b0:51:82:58:12:84:3a:c6:4f:61:d3:09:21:8f:17:82:bd:59:
         4f:cf:fe:af:70:5e:93:8f:87:f2:aa:e5:5c:42:14:47:8e:0f:
         72:b7:f5:54:02:4c:34:75:d9:78:cc:69:8c:3f:29:33:e4:55:
         ab:d7:66:f0:0e:0b:ee:ac:4f:b6:5f:87:8a:1d:fb:cd:97:32:
         b3:81:5f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----