Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf.cer
File:                     50deb463-b2f6-472b-b250-97bddd7db9cf.cer (raw, json)
Hash identifier:          va1nl5Hp4yOI43koLGYWtlE99D6COQ2iuQSAIxU40v4=
Subject key identifier:   BA:0E:F3:4B:A8:FD:46:6C:16:B0:10:26:7F:09:9D:56:23:5F:81:F5
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E48352C3D7FEA4108E7D2580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/50deb463-b2f6-472b-b250-97bddd7db9cf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Fri 25 Jul 2025 19:06:39 +0000
Subordinate resources:    AS: 400031
                          IP: 173.0.8.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:52:c3:d7:fe:a4:10:8e:7d:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : Jul 25 19:06:39 2025 GMT
        Subject: CN=50deb463-b2f6-472b-b250-97bddd7db9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:39:63:cb:6d:2d:e0:d7:2d:72:44:e8:18:24:
                    47:70:ef:d2:cb:73:c7:da:49:7c:1d:dc:d1:af:8c:
                    92:c4:97:67:68:cc:db:77:0b:ce:ef:a0:1e:12:64:
                    79:da:8d:bb:ce:7c:59:bc:bb:24:2a:3b:bb:f4:1f:
                    ff:6d:96:c5:6c:22:f3:2a:3c:fd:c6:db:ec:71:11:
                    81:8d:5d:db:ae:b1:01:19:7f:fd:e0:51:47:21:7e:
                    b9:53:00:22:2a:07:2d:60:df:85:92:4b:8b:f0:ff:
                    c4:38:f7:e3:9d:03:83:b8:90:7f:ce:2d:32:8a:ae:
                    ad:ef:bd:26:6d:9e:c9:9c:fd:5b:60:76:ab:1c:15:
                    4a:88:31:21:b0:9d:ff:c1:cc:d0:39:ce:b0:a8:9a:
                    2a:88:48:1c:49:94:f1:1e:6c:16:6f:a3:fa:dc:0a:
                    54:f7:70:c4:01:90:45:c0:b4:b2:3d:c5:95:bb:f1:
                    fb:d0:b2:6b:a6:8e:fe:6f:33:68:93:6b:cc:d3:4c:
                    c7:24:ef:84:4d:d8:eb:8c:ff:39:9f:e3:a4:15:26:
                    68:42:9d:02:ac:35:3a:2f:66:69:84:e4:58:24:43:
                    83:09:0c:a8:cc:ff:4a:2f:77:1a:28:d5:7c:09:d1:
                    8c:30:43:21:fb:48:8c:7e:f1:db:22:6c:a5:03:5e:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0E:F3:4B:A8:FD:46:6C:16:B0:10:26:7F:09:9D:56:23:5F:81:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/50deb463-b2f6-472b-b250-97bddd7db9cf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.8.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400031

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:09:7b:cd:ca:4a:23:39:de:05:1e:6e:1c:af:af:67:11:f2:
         09:ff:9c:4d:d7:ba:33:67:3e:6b:6e:49:50:0c:e2:ee:f8:60:
         2e:d2:c5:cf:6e:21:99:b5:a7:9d:2e:e9:05:dc:fb:be:8a:63:
         b2:77:6c:80:f8:09:53:86:1a:51:09:bd:cd:d9:68:b1:80:38:
         91:27:c8:f9:82:64:fd:74:8e:90:e2:43:60:77:55:57:b1:4f:
         98:b9:86:27:31:34:b2:69:af:bd:6c:27:65:c7:99:97:9c:42:
         e3:b8:02:44:98:89:0b:fb:30:70:b6:4a:a1:a2:30:29:4f:ad:
         11:9e:22:92:9b:f6:03:c0:2b:81:3b:a5:64:04:f4:24:a8:bb:
         2e:59:cc:c2:0d:3d:b6:c4:22:c9:62:f3:84:40:94:e3:a1:2c:
         19:27:5b:b9:6b:c7:f5:d6:ca:fd:1e:71:ce:62:b9:57:8b:ce:
         5a:bc:c7:fc:3a:87:31:9f:d6:ca:48:a5:23:b2:45:1e:8c:01:
         ea:c1:2d:79:20:15:ca:28:bf:cb:1d:53:ea:06:48:1d:36:28:
         43:f5:ff:10:43:38:30:f1:7e:ee:d5:57:f5:92:0b:9e:a5:10:
         58:5e:4f:96:17:80:c3:d7:2b:58:23:14:b1:ad:7d:dc:8d:ae:
         d7:e7:ef:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----