Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
File:                     311f19cc-344e-48c5-a1f1-47593aa56b0d.cer (raw, json)
Hash identifier:          JH1m+0pvBKQtLQXGeTNx23kj2oTFnMDBwoYLB6k6jpw=
Subject key identifier:   4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858422AF633817DC838C224071A80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 10 Jun 2023 00:45:16 +0000
Certificate not after:    Fri 12 Sep 2025 00:45:16 +0000
Subordinate resources:    AS: 54225
                          AS: 397853
                          IP: 216.21.216.0/21
                          IP: 2604:ebc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:2a:f6:33:81:7d:c8:38:c2:24:07:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jun 10 00:45:16 2023 GMT
            Not After : Sep 12 00:45:16 2025 GMT
        Subject: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:df:03:d2:b7:ac:cd:fb:e9:b4:47:3a:34:
                    50:8c:2a:6a:8e:a9:87:4f:63:a3:e9:6b:fd:26:64:
                    0f:f2:df:18:3a:51:a7:1d:70:ca:d5:97:29:3c:87:
                    db:31:2d:3f:cd:65:7c:b0:b0:23:dd:3e:97:9e:96:
                    e1:2f:fa:41:da:4b:3f:76:be:d9:26:91:e2:b2:47:
                    aa:63:cb:1b:ce:ef:4b:a7:02:14:b8:13:70:e4:ec:
                    09:08:6b:fc:ea:a0:71:7e:e0:e3:bd:6f:23:27:6b:
                    12:10:39:06:f1:06:64:32:20:47:23:80:27:95:40:
                    2b:00:28:32:c6:4c:bb:2c:a5:4e:40:69:cf:57:7c:
                    74:54:31:b1:af:a4:6f:8c:0e:be:61:4c:46:14:eb:
                    d9:34:d1:18:83:2c:da:05:56:4b:71:d5:5a:e9:de:
                    87:3e:f2:36:ab:45:5f:13:de:e4:bc:a5:41:63:c1:
                    48:c0:25:47:30:d2:6e:02:1b:d1:ab:85:e1:ec:dc:
                    bf:c9:cc:06:a2:73:10:ef:d4:5a:77:84:a6:ae:a6:
                    21:14:66:2c:76:0a:19:c4:7a:35:41:c0:a2:d5:91:
                    cc:3a:08:07:0d:a3:4c:41:8f:1b:17:a3:63:5b:29:
                    6b:80:cd:19:fe:e8:c5:68:f0:de:ca:c6:18:92:24:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.216.0/21
                IPv6:
                  2604:ebc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54225
                  397853

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e4:28:29:63:5b:8a:2e:20:f6:b8:20:ee:39:fd:b0:e5:9e:
         f6:ac:00:a2:7f:36:c1:5b:b1:6c:42:73:f0:a4:de:fb:c5:fd:
         5e:0c:6e:f9:a7:32:71:b0:9b:63:ff:ee:f6:3a:98:a5:ba:25:
         6f:f7:80:b5:ba:04:bd:c7:d3:7f:90:42:ee:3e:75:87:c1:d2:
         27:e7:cc:89:cf:1c:55:c1:ff:9c:7c:d3:76:27:7c:dc:7e:04:
         2d:b3:e9:5c:7a:a3:98:68:32:c0:9a:f0:dd:46:62:fd:13:e0:
         53:f1:06:8d:8c:62:de:a0:bc:07:f0:b8:95:3b:63:a7:f9:c6:
         82:78:2b:da:2b:b4:51:66:f5:08:2d:33:10:d3:d6:5d:30:3d:
         78:68:0c:6a:ba:ec:52:ec:ab:42:f7:e5:d0:8b:78:e2:7d:eb:
         dc:15:71:27:63:45:42:d6:5b:d0:77:45:f8:ea:6c:90:e0:75:
         4e:ed:a9:50:c6:6d:e1:db:f1:6e:c2:c7:cd:72:a8:72:f8:88:
         72:d3:e3:21:57:d1:5b:ee:c7:9b:67:02:bf:20:09:da:4f:04:
         fd:ec:43:c0:47:45:5e:af:60:30:8d:43:d4:0d:9b:34:dc:ba:
         79:37:ae:74:56:f1:4d:89:76:5f:a8:84:a3:7d:66:96:2b:56:
         58:a8:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----