Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf.cer
File:                     50deb463-b2f6-472b-b250-97bddd7db9cf.cer (raw, json)
Hash identifier:          5YmtP2376Zb5PFvOG+TLdgCphvZDF/aRwS/tdZ7ygiU=
Subject key identifier:   BA:0E:F3:4B:A8:FD:46:6C:16:B0:10:26:7F:09:9D:56:23:5F:81:F5
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285846A9280FF720A9EFD6B9A31400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/50deb463-b2f6-472b-b250-97bddd7db9cf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 26 Jul 2024 00:45:20 +0000
Certificate not after:    Thu 29 Oct 2026 00:45:20 +0000
Subordinate resources:    AS: 400031
                          IP: 173.0.8.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a9:28:0f:f7:20:a9:ef:d6:b9:a3:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jul 26 00:45:20 2024 GMT
            Not After : Oct 29 00:45:20 2026 GMT
        Subject: CN=50deb463-b2f6-472b-b250-97bddd7db9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:39:63:cb:6d:2d:e0:d7:2d:72:44:e8:18:24:
                    47:70:ef:d2:cb:73:c7:da:49:7c:1d:dc:d1:af:8c:
                    92:c4:97:67:68:cc:db:77:0b:ce:ef:a0:1e:12:64:
                    79:da:8d:bb:ce:7c:59:bc:bb:24:2a:3b:bb:f4:1f:
                    ff:6d:96:c5:6c:22:f3:2a:3c:fd:c6:db:ec:71:11:
                    81:8d:5d:db:ae:b1:01:19:7f:fd:e0:51:47:21:7e:
                    b9:53:00:22:2a:07:2d:60:df:85:92:4b:8b:f0:ff:
                    c4:38:f7:e3:9d:03:83:b8:90:7f:ce:2d:32:8a:ae:
                    ad:ef:bd:26:6d:9e:c9:9c:fd:5b:60:76:ab:1c:15:
                    4a:88:31:21:b0:9d:ff:c1:cc:d0:39:ce:b0:a8:9a:
                    2a:88:48:1c:49:94:f1:1e:6c:16:6f:a3:fa:dc:0a:
                    54:f7:70:c4:01:90:45:c0:b4:b2:3d:c5:95:bb:f1:
                    fb:d0:b2:6b:a6:8e:fe:6f:33:68:93:6b:cc:d3:4c:
                    c7:24:ef:84:4d:d8:eb:8c:ff:39:9f:e3:a4:15:26:
                    68:42:9d:02:ac:35:3a:2f:66:69:84:e4:58:24:43:
                    83:09:0c:a8:cc:ff:4a:2f:77:1a:28:d5:7c:09:d1:
                    8c:30:43:21:fb:48:8c:7e:f1:db:22:6c:a5:03:5e:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0E:F3:4B:A8:FD:46:6C:16:B0:10:26:7F:09:9D:56:23:5F:81:F5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/50deb463-b2f6-472b-b250-97bddd7db9cf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.8.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400031

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:1e:72:dc:49:96:79:5a:24:82:38:48:a4:03:eb:59:15:a4:
         14:3e:9f:31:9d:ed:2d:a2:17:d5:9a:61:2d:4e:8a:6b:56:a6:
         7f:54:5e:c1:f3:a2:c1:4f:a2:a5:8c:6a:7b:2a:4f:b7:25:e4:
         a0:c6:6c:a2:cf:99:64:3f:95:22:b8:80:7a:eb:c0:bb:d9:00:
         8c:84:3f:ea:03:94:8a:8c:34:20:80:f1:a3:47:34:4f:a2:20:
         a2:67:dd:88:3d:bc:ab:81:8b:4d:a0:58:08:91:2d:12:6d:7f:
         1d:9b:d3:fd:d9:b3:5b:a9:c2:01:03:82:6e:75:81:f3:c7:01:
         49:b3:c5:bd:8c:a8:25:92:3f:58:3d:2d:ae:bd:8d:74:cf:48:
         8b:fe:91:77:2e:0a:d1:cf:6a:13:e7:88:0d:65:c5:9b:59:80:
         45:b1:f4:4f:35:bc:97:43:73:e2:de:26:a0:22:94:8a:9f:bf:
         f5:d6:8d:df:cc:8f:f8:3c:b9:af:99:31:7c:70:31:7e:71:0c:
         c3:be:11:b2:17:b4:0b:39:ef:5a:d0:d3:2f:cb:74:66:d2:28:
         cd:6a:fe:7a:a5:36:9e:da:98:02:a8:db:7b:b2:83:93:73:8e:
         4e:fa:3b:f7:00:f5:59:c3:3d:ba:20:63:5c:61:c9:71:35:b9:
         d3:0b:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----