Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
File:                     311f19cc-344e-48c5-a1f1-47593aa56b0d.cer (raw, json)
Hash identifier:          j+cNZv7sRMFY2/Pr52U8LPw821qKZoO9Qyy1Ir+VtQs=
Subject key identifier:   4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858472F28F28E525D27361D287580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 12 Sep 2024 00:45:26 +0000
Certificate not after:    Wed 16 Dec 2026 01:45:26 +0000
Subordinate resources:    AS: 54225
                          AS: 397853
                          IP: 216.21.216.0/21
                          IP: 2604:ebc0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:28:f2:8e:52:5d:27:36:1d:28:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep 12 00:45:26 2024 GMT
            Not After : Dec 16 01:45:26 2026 GMT
        Subject: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a6:df:03:d2:b7:ac:cd:fb:e9:b4:47:3a:34:
                    50:8c:2a:6a:8e:a9:87:4f:63:a3:e9:6b:fd:26:64:
                    0f:f2:df:18:3a:51:a7:1d:70:ca:d5:97:29:3c:87:
                    db:31:2d:3f:cd:65:7c:b0:b0:23:dd:3e:97:9e:96:
                    e1:2f:fa:41:da:4b:3f:76:be:d9:26:91:e2:b2:47:
                    aa:63:cb:1b:ce:ef:4b:a7:02:14:b8:13:70:e4:ec:
                    09:08:6b:fc:ea:a0:71:7e:e0:e3:bd:6f:23:27:6b:
                    12:10:39:06:f1:06:64:32:20:47:23:80:27:95:40:
                    2b:00:28:32:c6:4c:bb:2c:a5:4e:40:69:cf:57:7c:
                    74:54:31:b1:af:a4:6f:8c:0e:be:61:4c:46:14:eb:
                    d9:34:d1:18:83:2c:da:05:56:4b:71:d5:5a:e9:de:
                    87:3e:f2:36:ab:45:5f:13:de:e4:bc:a5:41:63:c1:
                    48:c0:25:47:30:d2:6e:02:1b:d1:ab:85:e1:ec:dc:
                    bf:c9:cc:06:a2:73:10:ef:d4:5a:77:84:a6:ae:a6:
                    21:14:66:2c:76:0a:19:c4:7a:35:41:c0:a2:d5:91:
                    cc:3a:08:07:0d:a3:4c:41:8f:1b:17:a3:63:5b:29:
                    6b:80:cd:19:fe:e8:c5:68:f0:de:ca:c6:18:92:24:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.216.0/21
                IPv6:
                  2604:ebc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54225
                  397853

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:72:9f:55:9b:65:be:86:50:ca:ba:b1:7d:08:ef:2c:49:ec:
         7a:1a:15:9f:9a:89:2b:50:7d:8f:15:46:75:f6:db:b6:e7:cd:
         65:63:2d:b4:8c:4b:b2:78:33:cf:e8:99:e5:2b:ad:07:f5:c3:
         39:0d:3b:8e:fb:b7:e9:2e:c2:1b:f4:f2:16:a1:6e:0e:de:cc:
         7f:d4:e2:50:62:a5:f7:1b:fd:7e:04:0b:00:1b:2f:47:06:a5:
         bf:c0:95:4b:57:62:67:9b:81:e6:00:d3:93:39:2e:b0:a3:36:
         c3:f0:72:4a:ec:21:b6:f6:52:6f:40:77:e5:e8:2c:e4:11:fc:
         f0:9f:1a:ba:e7:da:71:be:2d:f1:a8:32:4c:70:fe:53:ce:79:
         5c:f3:b8:4e:03:c9:6b:7e:34:df:a2:8d:78:af:ea:a3:35:99:
         9c:f6:26:09:12:06:2c:89:8b:60:8e:de:9a:5d:a4:cc:31:c8:
         f2:23:a6:24:5e:a0:14:ac:05:bc:2f:52:82:39:6b:06:2e:ba:
         31:b9:e6:6b:18:bf:32:90:5e:ac:fc:c8:45:b6:70:f8:58:6a:
         73:5f:59:55:af:0d:52:29:b6:4f:4c:71:62:be:56:f7:08:6e:
         a5:66:76:db:9a:c6:53:e8:8d:15:38:20:c4:a3:8c:fa:5d:36:
         92:b5:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----