Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer
File:                     38ec4694-a70f-4329-b713-f4da59e49973.cer (raw, json)
Hash identifier:          FOiy+Qn2llS8dFxIHjOlduwdRbOrguOBN0b44ak9svg=
Subject key identifier:   B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858473A53AFFDFED8744DA6FB96C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 16 Sep 2024 00:45:27 +0000
Certificate not after:    Sun 20 Dec 2026 01:45:27 +0000
Subordinate resources:    IP: 23.247.184.0/23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:53:af:fd:fe:d8:74:4d:a6:fb:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep 16 00:45:27 2024 GMT
            Not After : Dec 20 01:45:27 2026 GMT
        Subject: CN=38ec4694-a70f-4329-b713-f4da59e49973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:db:e9:a5:6d:26:a6:69:ae:31:bd:0e:67:1b:
                    d9:69:d0:f9:0d:bc:b3:4d:46:9b:08:b2:27:11:17:
                    1c:a3:f1:72:dd:bb:63:55:18:17:54:12:25:23:8a:
                    19:cc:b9:d3:15:55:b8:1e:6d:d9:c6:54:60:a5:16:
                    54:ae:3c:4f:64:6e:b8:be:43:02:cd:4f:34:a1:5d:
                    f0:8b:a5:2d:11:d5:cf:4a:5e:88:bb:db:ec:fc:96:
                    3a:a4:94:ed:b7:bd:9c:76:86:cc:1c:5a:ae:c3:44:
                    0d:09:50:f5:31:d3:12:a7:4a:f6:7d:6a:ee:44:5f:
                    be:16:e9:18:49:56:ea:e2:5d:4e:d2:eb:4c:d0:d6:
                    55:8d:2e:59:19:b1:2d:a6:54:cd:60:84:6a:2e:81:
                    7b:f1:9e:99:bc:cb:51:3c:b2:5e:6c:8c:83:40:53:
                    35:85:e4:70:8b:38:38:1e:f8:f3:e7:30:42:28:67:
                    90:f0:fb:85:67:ba:0c:84:b7:bf:22:ba:0d:c7:de:
                    45:c5:03:c9:5d:96:98:87:55:fb:ca:32:89:31:2c:
                    93:be:36:8a:58:30:71:42:43:fa:ca:62:bf:2a:3b:
                    d1:f6:2e:ea:5e:2d:7a:52:cc:ae:2d:00:28:f6:21:
                    ca:aa:84:84:3a:22:59:12:c2:1d:d3:92:30:9f:7a:
                    f0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:43:9a:91:3d:e7:fa:4f:d6:55:8f:71:ab:44:64:fc:d3:43:
         19:1b:19:fa:19:23:26:48:2b:c8:1e:13:fd:3f:df:f4:a6:c9:
         8d:28:2f:5f:a6:af:65:7f:5e:ba:18:57:53:a0:35:7c:6e:82:
         bd:d5:b9:99:11:51:7b:19:1c:cd:01:5d:88:a4:4b:31:85:70:
         ff:2e:bf:89:b1:bc:ff:bb:f2:da:41:02:5c:5e:0f:82:d1:b6:
         7c:e0:a7:2a:90:b5:b9:d9:5b:c1:7b:7c:25:9c:1a:47:77:f1:
         ab:48:77:80:40:1a:2f:70:c3:a0:69:c3:1f:cb:07:37:bc:35:
         48:52:d5:9b:01:1f:8f:3f:4f:4c:1e:d5:fd:98:bd:54:97:a4:
         a3:78:b6:fb:15:ad:18:a4:c3:ff:61:12:4f:17:e3:33:81:6e:
         4e:9a:91:98:7e:43:92:59:11:61:02:cd:c6:3e:50:74:10:a0:
         ce:9e:fc:b1:3e:99:57:9b:78:77:33:ff:a8:0c:3c:56:e2:0f:
         e7:e9:4f:32:e6:1c:93:dc:7b:3c:a1:33:25:d5:15:00:b5:16:
         35:c9:51:93:48:c1:00:71:1b:ac:1e:99:60:e8:d2:98:25:0f:
         6e:aa:d9:c2:4d:c8:03:e6:c7:7b:2e:14:9d:60:47:25:8c:89:
         34:3c:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----