Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer
File:                     5587bc0d-775f-4b49-89c0-0d12d8bddc05.cer (raw, json)
Hash identifier:          mGnhHvMBn7VzLHdpduTKB8bm8RSrH8wDaOijlksD+tM=
Subject key identifier:   CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584432573438A3D84EBE5D14AC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 13 Dec 2023 01:45:15 +0000
Certificate not after:    Tue 17 Mar 2026 00:45:15 +0000
Subordinate resources:    IP: 69.58.176.0/20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:32:57:34:38:a3:d8:4e:be:5d:14:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec 13 01:45:15 2023 GMT
            Not After : Mar 17 00:45:15 2026 GMT
        Subject: CN=5587bc0d-775f-4b49-89c0-0d12d8bddc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2d:1f:7d:0f:f1:d7:b0:6f:e3:0b:32:fb:37:
                    97:02:8a:e5:2d:f0:ed:25:41:41:23:96:28:f5:65:
                    fe:37:66:81:c8:db:dc:d8:9c:c6:69:2f:da:55:10:
                    88:e0:1d:66:54:a9:60:e2:b3:a7:ad:92:9b:77:fa:
                    53:b6:2e:bf:9e:89:55:7a:d1:28:2c:04:b5:ef:c5:
                    33:47:13:e3:11:61:48:38:ce:7c:38:88:8e:20:6b:
                    26:41:d1:96:cc:ef:1e:08:9a:34:be:67:2b:0e:56:
                    b6:86:a7:20:2a:e1:37:88:62:54:c1:10:3f:94:59:
                    f4:a8:b2:d7:46:9e:9b:45:ec:ff:77:5c:4e:0f:dc:
                    8e:c0:cf:54:14:92:83:2a:00:55:c7:f9:a7:4f:fd:
                    42:89:f2:5a:dd:5e:08:ec:ac:ea:3f:2a:8c:03:d3:
                    3e:52:0a:70:f4:8f:b8:17:88:32:cd:5e:8f:f0:94:
                    c5:33:50:d7:52:87:8e:cb:40:ad:d4:96:ee:c3:2a:
                    65:e4:33:51:45:93:a2:b2:8f:ba:6d:60:4c:79:4c:
                    72:2d:61:79:dd:6d:57:9f:83:8d:63:b7:96:7e:d5:
                    72:b5:9a:16:a3:3c:b4:91:e5:e8:d3:f9:99:c6:b0:
                    48:2b:5e:8a:ce:00:93:fe:b2:1d:cd:9b:eb:8e:01:
                    a7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F0:6F:96:E2:6B:1D:87:C6:FA:5F:BD:41:58:09:13:18:4F:3E:C2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5587bc0d-775f-4b49-89c0-0d12d8bddc05/5587bc0d-775f-4b49-89c0-0d12d8bddc05.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:14:a9:78:d9:0f:2a:ac:c6:99:f2:01:61:a8:45:80:16:ba:
         0d:27:c4:03:af:a3:d4:ec:a5:99:c5:c5:df:41:0e:8c:56:5f:
         c8:b2:71:6e:74:c6:49:1b:5d:c2:4f:3b:4e:20:be:aa:3d:6f:
         5b:35:d9:5c:61:dc:96:86:a2:4d:5c:e6:d2:50:38:50:df:f1:
         e6:38:f4:09:b0:b1:50:9a:5a:00:10:43:cb:e2:79:64:21:5c:
         d3:77:a9:0c:91:63:ea:27:f7:79:05:0e:f6:76:24:d3:8b:20:
         c7:c0:ca:b4:48:e4:ef:a3:76:43:0f:96:d1:3e:97:1e:a9:0d:
         be:c3:29:74:8c:d1:2c:47:76:2c:69:59:5b:7a:ed:ca:63:f5:
         f5:ff:a3:10:e3:1d:cd:2c:72:4e:80:bc:d7:89:08:03:d5:f5:
         83:f4:8a:9e:2c:3d:7b:47:cd:75:ec:df:8f:a8:30:82:75:08:
         00:95:46:7d:92:fb:0b:a7:45:1a:53:ba:a2:5e:6d:10:ac:ab:
         5c:17:3b:00:55:bb:4d:33:8e:e7:88:d6:04:32:e5:d8:ca:f1:
         f5:87:f8:ab:1f:55:1e:68:9c:96:cf:58:1b:95:11:80:da:bd:
         a9:2f:41:aa:56:ef:a1:f0:1a:97:ef:60:30:8f:e4:d8:0f:c5:
         11:40:6c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----