Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer
File:                     45657d9f-043b-4838-9072-ef0906bb567e.cer (raw, json)
Hash identifier:          IM7gdP8QUtsrjM38bxuNHOHLlQYhvzsO41fhhQVNo6Q=
Subject key identifier:   D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841ED8B249A48A9BB843B149A40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 19 May 2023 00:45:15 +0000
Certificate not after:    Thu 21 Aug 2025 00:45:15 +0000
Subordinate resources:    AS: 16652
                          IP: 199.254.238.0/24
                          IP: 2620:13:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ed:8b:24:9a:48:a9:bb:84:3b:14:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 19 00:45:15 2023 GMT
            Not After : Aug 21 00:45:15 2025 GMT
        Subject: CN=45657d9f-043b-4838-9072-ef0906bb567e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:3e:41:25:9d:af:bf:d3:8f:4f:38:d8:41:
                    32:52:67:66:b0:2a:0c:f7:71:67:18:e5:c9:31:e1:
                    2f:32:5b:3d:14:0f:49:3c:5c:f1:47:ae:e9:b0:ff:
                    e2:ba:67:5b:3a:74:13:eb:46:e1:1a:c3:8a:80:cc:
                    b4:e0:ed:c4:21:00:ea:61:15:a3:83:52:dc:4f:77:
                    79:9d:d3:4f:1e:2e:1b:99:cd:9f:e9:c8:c6:90:dc:
                    30:c2:3f:5b:60:7a:d1:36:00:bc:44:80:44:a3:85:
                    91:01:09:e7:0f:69:a9:64:a0:9e:9e:53:24:aa:97:
                    50:3a:8c:2f:06:c7:d0:22:cd:b6:12:fc:ed:97:02:
                    0b:1b:2e:c1:0a:ab:f1:8a:b9:ca:47:00:28:e6:66:
                    20:41:91:7e:d6:24:39:4a:b9:9b:5b:bf:77:b1:d1:
                    7b:0b:a0:bf:86:c0:19:57:09:ac:9d:c6:23:47:35:
                    70:ce:26:f6:f5:49:a5:a0:74:71:d9:a3:a9:31:e0:
                    e3:9d:88:cf:28:12:7b:0c:50:71:f4:ad:fa:db:73:
                    89:2b:49:a0:df:58:d5:42:64:ed:43:0b:36:46:b2:
                    c9:e7:1b:69:73:b6:b3:cb:0b:c9:8f:4e:63:95:3d:
                    71:9a:cf:80:3b:61:5e:62:11:37:2a:0b:33:a0:7e:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.238.0/24
                IPv6:
                  2620:13:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16652

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:82:38:41:89:86:a7:2a:3c:b6:37:e0:bb:9f:ca:b2:2f:48:
         ae:66:cd:df:2c:8e:a0:87:18:41:15:11:61:44:dc:11:f8:e8:
         d2:a8:1f:f2:fc:e6:7f:ce:64:5e:67:6f:d3:0b:bf:8d:6a:3f:
         30:f8:bb:ed:d6:5e:82:cd:0c:a0:70:36:bf:15:06:50:29:33:
         38:b1:85:ef:e1:87:3b:79:7b:c4:5d:aa:eb:7e:71:1b:1c:27:
         e5:6c:60:a4:ba:22:2c:49:91:e1:63:43:73:af:d4:6e:f5:cc:
         7e:38:ed:cd:6c:32:f3:0d:53:96:dc:0e:0f:4c:0a:bb:55:69:
         ef:a7:a3:b3:a0:4f:9b:2b:30:cb:1b:58:84:f2:7c:d2:0d:a8:
         21:91:db:f4:ae:05:b1:e2:e1:f4:45:72:b8:9e:46:6c:35:54:
         30:d8:34:9e:fa:37:52:58:b6:d1:ee:ac:04:ff:39:7c:a2:a1:
         b1:ea:7c:dd:23:23:fe:f9:eb:a2:a0:d8:1f:35:37:09:35:ca:
         b3:f7:cb:d5:91:47:6e:88:09:5c:a2:4d:5f:54:59:6a:07:9c:
         ba:44:3e:30:80:c9:d8:51:63:52:ae:8b:3b:67:5b:67:c7:66:
         b6:4e:d5:b2:07:2b:c5:2d:64:31:39:7e:58:db:ae:c4:c9:4d:
         9a:6a:3f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----