Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
File:                     46369a04-d9fc-4dd8-bc96-cf22af084843.cer (raw, json)
Hash identifier:          3ey3ADPx0utA18IpTgAPnfsT8QNHFKym7HA27H1ZHzU=
Subject key identifier:   B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285847DF27E0D80DFB8C726BD0BE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 14 Nov 2024 01:45:33 +0000
Certificate not after:    Wed 17 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 400550
                          IP: 23.133.232.0/24
                          IP: 2602:fb9e::/40

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:27:e0:d8:0d:fb:8c:72:6b:d0:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 14 01:45:33 2024 GMT
            Not After : Feb 17 01:45:33 2027 GMT
        Subject: CN=46369a04-d9fc-4dd8-bc96-cf22af084843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:e7:f7:34:8a:cb:6f:17:84:f6:59:5b:e2:
                    2b:07:66:2b:91:70:a6:40:b5:be:f1:74:3b:f4:d0:
                    46:46:82:1f:f1:98:c3:29:a9:e9:dd:bf:15:a3:1a:
                    e4:ca:14:ec:06:f3:29:6b:bd:bb:e2:76:13:b2:fb:
                    8e:5e:9c:1e:f0:76:87:11:e4:31:10:e3:71:6d:cd:
                    c9:7a:fe:fa:f9:5f:3e:5c:d4:10:14:32:d8:3c:3f:
                    03:5e:e7:a4:60:0e:37:74:76:ed:6d:92:3c:cb:7a:
                    44:1d:cd:09:58:a0:42:a8:e2:58:1f:39:fc:49:c1:
                    8b:5d:1b:67:07:fb:5a:6e:a1:03:3a:f7:a8:4b:40:
                    de:b3:e5:45:0e:16:e4:ad:fc:99:80:78:e6:f4:25:
                    85:42:2e:95:02:e7:5c:6c:14:41:42:96:e7:a2:16:
                    46:8c:bd:4e:b1:d5:c0:3c:d4:01:d5:4e:ac:46:6e:
                    70:5a:8e:62:0e:c7:b0:9b:29:18:a7:23:85:79:a9:
                    35:4a:eb:1c:89:36:ec:c3:90:32:24:f1:7c:c7:73:
                    fb:5c:65:51:29:90:80:33:53:e3:e4:8f:15:66:2a:
                    bc:9c:36:92:f2:cd:f9:c5:2c:46:4f:73:d2:16:da:
                    f3:d0:2f:e3:4b:0f:16:a4:9b:48:78:e1:bf:3d:ec:
                    b2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.232.0/24
                IPv6:
                  2602:fb9e::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400550

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:ff:15:71:83:c2:bf:8b:80:dd:f0:99:32:a6:dd:7e:3d:c5:
         f9:d7:31:37:61:f8:e7:05:02:3e:e3:ae:36:f5:33:65:32:ca:
         de:05:41:e2:76:c0:4a:c3:3f:a3:ed:05:32:ca:be:a5:0c:a8:
         a7:b1:0f:bd:82:5f:44:25:f9:01:f3:b8:77:0b:57:b7:bc:23:
         b0:ad:f7:11:05:9e:60:ad:7e:24:9c:58:d5:4a:f7:a2:26:ac:
         6c:f7:ba:c9:07:d4:67:cc:93:99:e4:e4:a5:35:9f:44:0a:b5:
         3b:0d:8d:e0:d0:4f:90:ec:68:2a:4e:48:8d:82:03:3a:89:e3:
         20:05:9a:e0:cd:29:3d:78:45:40:6d:a9:5c:7b:e8:82:ac:a3:
         55:87:c4:03:fe:86:cb:4a:4b:94:a2:88:26:0b:a4:7c:41:7f:
         b0:7f:82:13:66:5a:2f:e9:08:0c:88:01:7e:c6:73:1d:62:33:
         e5:e0:69:e0:a0:37:eb:62:bc:6c:c0:40:04:11:b4:0f:63:bf:
         93:14:30:4a:be:6f:4d:1c:0e:d6:fa:3f:ee:a5:0b:40:47:1f:
         65:dd:d2:28:99:a9:c9:be:8f:fd:81:13:c0:1f:c3:39:11:d8:
         07:1b:6e:5c:89:33:64:63:e1:8f:95:d3:51:9d:a4:92:54:30:
         c7:e3:4b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----