Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer
File:                     45657d9f-043b-4838-9072-ef0906bb567e.cer (raw, json)
Hash identifier:          /sDj4OvUV75PLPii0uNsudMJEPFfIsrjAd3uGUoM8gs=
Subject key identifier:   D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285846F1BDE4FA72C8D5FB526F2420
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 21 Aug 2024 00:45:26 +0000
Certificate not after:    Tue 24 Nov 2026 01:45:26 +0000
Subordinate resources:    AS: 16652
                          IP: 199.254.238.0/24
                          IP: 2620:13:4000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f1:bd:e4:fa:72:c8:d5:fb:52:6f:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Aug 21 00:45:26 2024 GMT
            Not After : Nov 24 01:45:26 2026 GMT
        Subject: CN=45657d9f-043b-4838-9072-ef0906bb567e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:3e:41:25:9d:af:bf:d3:8f:4f:38:d8:41:
                    32:52:67:66:b0:2a:0c:f7:71:67:18:e5:c9:31:e1:
                    2f:32:5b:3d:14:0f:49:3c:5c:f1:47:ae:e9:b0:ff:
                    e2:ba:67:5b:3a:74:13:eb:46:e1:1a:c3:8a:80:cc:
                    b4:e0:ed:c4:21:00:ea:61:15:a3:83:52:dc:4f:77:
                    79:9d:d3:4f:1e:2e:1b:99:cd:9f:e9:c8:c6:90:dc:
                    30:c2:3f:5b:60:7a:d1:36:00:bc:44:80:44:a3:85:
                    91:01:09:e7:0f:69:a9:64:a0:9e:9e:53:24:aa:97:
                    50:3a:8c:2f:06:c7:d0:22:cd:b6:12:fc:ed:97:02:
                    0b:1b:2e:c1:0a:ab:f1:8a:b9:ca:47:00:28:e6:66:
                    20:41:91:7e:d6:24:39:4a:b9:9b:5b:bf:77:b1:d1:
                    7b:0b:a0:bf:86:c0:19:57:09:ac:9d:c6:23:47:35:
                    70:ce:26:f6:f5:49:a5:a0:74:71:d9:a3:a9:31:e0:
                    e3:9d:88:cf:28:12:7b:0c:50:71:f4:ad:fa:db:73:
                    89:2b:49:a0:df:58:d5:42:64:ed:43:0b:36:46:b2:
                    c9:e7:1b:69:73:b6:b3:cb:0b:c9:8f:4e:63:95:3d:
                    71:9a:cf:80:3b:61:5e:62:11:37:2a:0b:33:a0:7e:
                    54:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.254.238.0/24
                IPv6:
                  2620:13:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16652

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c3:75:06:92:59:c7:84:26:3b:21:fc:11:db:b8:e1:2d:d5:
         51:17:bb:7b:a8:76:1d:2f:d3:82:59:9c:f5:e6:55:9e:66:ad:
         66:2a:f2:d3:b5:fa:04:ce:21:45:1a:da:a5:c1:7e:0b:82:92:
         af:61:b3:56:5e:d4:70:ef:ec:c9:f1:89:e6:1f:32:74:f3:4f:
         e2:bc:dc:b0:aa:ee:2f:b1:c2:41:ee:21:a6:9c:a4:47:5b:9c:
         8a:80:6c:bb:31:12:fa:5d:bf:30:fb:70:a5:a7:64:09:4d:00:
         f8:13:7e:7b:3c:3b:5f:00:2d:73:18:95:7d:46:64:93:1a:86:
         c6:21:df:df:ce:22:08:73:49:88:4d:fe:14:d1:8c:f0:4f:84:
         29:c7:8e:1d:a1:20:61:a7:ba:d9:fe:29:14:2b:27:67:a8:98:
         92:6c:d6:77:09:8f:79:fe:31:a1:73:b8:35:78:ed:6e:0e:6f:
         6d:1e:40:3b:71:44:46:d2:6a:fb:7b:a3:5d:f4:d2:78:00:d8:
         3d:a7:b6:28:bf:1d:ec:f4:5b:c5:86:87:f5:55:80:bc:fe:2f:
         16:6e:44:16:9f:19:fd:85:22:85:e3:e6:f5:34:4f:ce:95:5c:
         ce:a1:b2:8a:c0:d9:33:ea:34:0b:44:76:c1:de:a5:ea:be:14:
         8d:8b:0a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----