Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer
File:                     324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer (raw, json)
Hash identifier:          9/Lsj92jn2ZBeJa+EjNQ/a3f8qj66TJ2597ysyn1Zq4=
Subject key identifier:   C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285847EC98AE32E1C8FBE46DD0E980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 18 Nov 2024 21:18:21 +0000
Certificate not after:    Sun 21 Feb 2027 21:18:21 +0000
Subordinate resources:    AS: 62592
                          IP: 162.219.128.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ec:98:ae:32:e1:c8:fb:e4:6d:d0:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 18 21:18:21 2024 GMT
            Not After : Feb 21 21:18:21 2027 GMT
        Subject: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:95:95:13:ac:df:99:a3:46:ff:2a:e7:62:38:
                    2a:88:f3:2f:ff:b8:d0:44:d1:4f:89:8d:99:07:a0:
                    30:54:df:c5:98:1b:49:a4:e9:47:88:84:53:eb:8f:
                    09:c4:dc:cf:56:d0:3b:90:97:1a:c9:9b:5e:12:a9:
                    65:33:9b:0f:18:35:17:bf:f6:20:b2:0a:0d:4b:c4:
                    78:e3:a1:56:85:e4:fc:cb:25:69:d5:d4:ca:7b:c7:
                    f7:04:ed:8a:62:2f:2a:1d:bb:00:1c:c9:9b:fe:d5:
                    03:83:fa:39:fd:85:0f:a0:62:78:e3:6a:35:6d:4f:
                    00:76:05:72:d9:b0:76:4d:70:8f:26:d2:9d:b8:7e:
                    4a:4a:0f:02:a8:3a:51:2a:f2:ce:34:cc:f6:a9:1c:
                    ce:2d:25:c7:72:84:e7:cf:5e:4a:c8:12:15:38:09:
                    16:9b:fe:69:9e:01:b7:29:3c:3a:61:83:93:cb:ca:
                    bf:fa:69:b9:7b:9e:ed:03:5f:aa:7b:6b:65:74:94:
                    0f:f1:80:3d:41:5f:9d:37:d1:06:44:1f:89:2a:81:
                    b1:28:7c:d2:1d:73:12:8e:a8:20:04:36:51:e8:31:
                    74:40:5b:74:06:ed:d2:c0:19:0f:3e:4c:e8:0a:9b:
                    4f:f8:49:cb:25:6c:dd:bb:4a:ef:6f:cb:8f:6c:f8:
                    78:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.219.128.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62592

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:10:08:8d:78:94:37:a8:f9:ec:27:6d:02:86:19:09:31:1f:
         0d:6b:19:c9:dc:f6:02:01:ec:de:3e:5a:43:77:33:5e:6e:e5:
         5a:fa:72:ac:01:60:d5:be:5a:cd:e1:95:33:2e:8a:02:bf:a2:
         26:f1:af:7c:85:a4:ad:5d:6e:22:b7:73:84:e0:8e:71:64:1d:
         31:0b:e5:cb:c8:9f:a3:cd:56:ac:d8:cb:92:43:6c:33:84:3f:
         2b:58:5c:4b:6a:e4:60:33:29:8d:06:af:cb:62:60:ac:6e:3b:
         4e:c9:7c:25:b8:fd:f7:4c:1a:8a:8c:2a:b4:a2:3a:b1:d2:9f:
         3a:3e:31:40:f8:c4:22:ae:3c:ca:2b:a4:9a:7a:c6:0c:af:95:
         fc:1e:c2:c8:76:98:fd:1e:f6:70:89:26:87:a4:d8:a6:68:21:
         4c:9a:1f:7b:26:47:a0:a5:bc:62:88:71:f7:fc:ed:59:0f:c3:
         4b:68:d4:4a:0c:8a:64:a6:7e:e0:47:32:c7:27:c4:d1:78:ed:
         af:17:31:3b:0c:b5:40:d8:a9:f9:c6:e6:50:6c:ae:d7:54:26:
         6e:45:a4:67:24:f5:dc:f9:40:7c:85:5d:33:70:a5:a4:cd:55:
         f6:91:22:01:e4:4a:5a:4c:9c:3c:94:34:19:2d:5e:aa:88:1b:
         39:18:d6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----