Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer
File:                     3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer (raw, json)
Hash identifier:          w68I9qiy11h5R0GanTTfScTZzHZQMbdlNCFRPaxibwM=
Subject key identifier:   F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858477D5419E4913EF07ED880ECE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 10 Oct 2024 00:45:26 +0000
Certificate not after:    Wed 13 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 31974
                          IP: 208.93.72.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:54:19:e4:91:3e:f0:7e:d8:80:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Oct 10 00:45:26 2024 GMT
            Not After : Jan 13 01:45:26 2027 GMT
        Subject: CN=3a6d409f-f6c6-4ba5-a674-6b6368d2478a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bf:7b:c0:aa:64:9c:25:84:7c:01:73:cc:18:
                    0c:43:89:cf:7a:b3:a6:cb:5f:37:3e:4c:75:c7:b4:
                    47:b9:94:fa:db:7f:bf:9b:f5:c0:5c:0a:9b:43:5f:
                    75:f5:37:bf:58:41:3c:a8:69:4d:a0:4a:60:03:07:
                    54:45:3e:d2:74:8c:92:12:55:44:9a:b6:f3:55:de:
                    02:9f:2e:cd:e6:98:fd:c3:f6:a3:34:f5:a7:da:3a:
                    aa:c3:0c:75:77:6a:41:e5:a9:13:c0:bc:3b:d4:6c:
                    33:4b:ab:f1:61:29:ae:37:07:4e:4d:4d:b5:48:07:
                    21:2c:88:a9:40:5d:34:7b:2e:40:2f:45:e9:da:2c:
                    70:aa:c8:c1:bd:47:28:52:61:55:b9:86:15:db:25:
                    dd:e4:5c:b2:83:62:23:c8:79:36:cd:80:29:77:3a:
                    b5:58:ea:da:0c:2b:a6:e3:85:ad:f8:a2:d6:c1:dc:
                    88:46:c4:17:60:a9:1a:4e:ba:ff:a0:6e:58:53:bd:
                    ee:11:67:4b:ec:26:18:2c:8d:c7:30:9d:93:2d:de:
                    df:e6:07:cc:0e:db:c5:a0:6d:09:71:5b:a4:a2:65:
                    b2:c0:cf:1f:9c:2b:82:d2:50:ec:ba:f8:61:6e:fd:
                    3e:c8:c4:28:e4:28:81:d6:0f:49:c9:5b:f1:ec:4a:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.72.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31974

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:19:be:d0:62:33:c5:c2:38:db:e0:b2:95:8d:5e:0b:23:
         dd:09:3e:bb:e9:b2:3f:26:53:73:09:67:24:33:65:c6:0f:4c:
         3e:52:06:0d:41:f9:ef:48:91:b1:3c:79:f1:57:81:67:76:96:
         47:8e:d4:3e:16:ff:ad:dd:f8:d6:95:6a:9f:bb:58:8d:41:eb:
         3c:9a:f2:25:bb:14:43:97:40:a0:ed:61:bd:1d:c4:f8:bf:fa:
         a8:7e:cf:6e:a8:2f:58:07:99:eb:e9:8f:d3:9d:0e:6f:fe:f8:
         21:4b:01:06:51:d2:8d:93:98:4f:88:36:01:5b:13:9e:ef:ba:
         65:23:cf:b8:df:20:94:38:f3:31:8e:cd:67:12:87:63:7b:ae:
         99:6d:4c:29:90:36:12:d8:b5:9b:82:9b:bc:1d:36:64:b6:d6:
         e4:c9:2a:48:71:b1:05:d5:2b:82:90:87:ee:2b:43:86:93:6b:
         82:dc:c3:e3:c1:47:3e:a8:a7:82:64:37:45:d2:5b:00:cf:52:
         7b:59:c3:82:4c:ac:e7:8f:9a:e6:15:56:b0:d5:6a:47:41:4b:
         a2:95:d4:3d:0e:84:ca:fd:41:fe:95:2c:48:31:d8:2c:75:75:
         dd:e8:74:98:a4:49:c4:3b:39:aa:02:20:c8:41:c6:a8:8b:b8:
         b4:71:7d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----