Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
File:                     64da013d-8ba3-4af5-80ad-7674bd0cc403.cer (raw, json)
Hash identifier:          eSBvuWAJx/IVl7OYiwlBnJMH3XiRTOHn0X/IRT3TRTc=
Subject key identifier:   2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285846AEBD736F6ECE7140A6D9B000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 28 Jul 2024 00:45:23 +0000
Certificate not after:    Sat 31 Oct 2026 00:45:23 +0000
Subordinate resources:    AS: 30316
                          AS: 399916
                          IP: 66.118.0.0/22
                          IP: 2602:f88f::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ae:bd:73:6f:6e:ce:71:40:a6:d9:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jul 28 00:45:23 2024 GMT
            Not After : Oct 31 00:45:23 2026 GMT
        Subject: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:cb:ea:66:38:bd:05:cf:79:66:5e:62:43:
                    81:f6:c4:65:ec:0c:9c:4f:8d:cf:08:d5:a8:33:7d:
                    17:2c:b8:c9:71:0b:71:59:c7:82:0e:ae:70:94:cd:
                    f7:df:60:75:9b:19:3e:5a:e0:3a:0b:52:0f:04:da:
                    5d:d9:fe:ef:86:e1:72:17:79:5f:c5:ac:b3:35:f0:
                    d7:b8:a1:9b:a0:15:3a:d6:30:c9:71:f0:ca:b4:45:
                    6d:6f:80:69:fe:7e:45:98:84:7b:dc:d3:ed:50:a3:
                    09:b1:dd:a7:da:2c:ea:d0:75:d8:22:94:3a:b5:ae:
                    90:b0:13:4f:4e:45:1b:37:b5:4a:e0:16:2e:92:77:
                    a9:09:e0:1e:98:4c:17:14:97:90:90:71:37:62:fa:
                    8c:c4:4c:22:90:d9:12:59:07:5d:7c:72:97:3a:18:
                    b9:d8:88:21:02:7d:f4:92:9b:4f:af:5b:db:42:cc:
                    d1:14:94:82:78:a0:7a:58:0a:85:49:40:5e:c1:7e:
                    d9:48:88:37:ca:c6:49:1d:3f:b4:0d:4c:32:06:8c:
                    ef:7f:e4:d2:37:fa:d4:c2:ba:5c:24:a6:f6:57:02:
                    7b:aa:82:c6:0b:d2:b8:43:9a:6a:a7:b5:fd:09:82:
                    40:45:d5:e7:cc:f4:87:77:21:79:41:d9:b3:49:23:
                    fa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.0.0/22
                IPv6:
                  2602:f88f::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30316
                  399916

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:61:83:af:09:29:2e:4d:cb:6c:83:53:10:39:8b:b4:51:59:
         83:a0:ec:f7:80:0f:91:83:b8:12:6e:9f:eb:8a:d2:4b:5c:78:
         a0:a3:76:ed:dd:8c:f6:ce:54:0b:5f:81:39:5f:a3:53:6c:74:
         69:69:06:e7:bc:f1:d8:a5:8e:d2:13:9b:09:20:14:6d:70:4d:
         0a:32:ce:6e:79:de:9f:6e:a9:10:53:34:47:6e:ec:80:77:18:
         c5:16:83:80:ce:3d:f0:17:65:0e:a1:5c:90:6c:aa:d3:28:7e:
         f0:0f:8d:b4:32:7c:30:e2:7a:39:9f:29:20:10:b8:b8:d1:44:
         fb:bb:0a:47:cd:16:e5:9a:98:f6:95:c9:99:96:73:c7:1a:a0:
         d5:cd:f7:4d:71:2c:89:99:a5:db:97:67:dd:f1:39:5f:23:e4:
         74:4c:ea:39:34:a7:39:e3:f9:db:05:cf:d3:df:13:b7:cb:b2:
         bc:b2:30:43:42:17:7e:92:a8:a8:b0:8b:cb:14:8c:9e:20:c7:
         da:1b:84:2b:d4:ea:30:6c:1f:8c:76:4d:0e:a4:62:74:04:b5:
         10:21:1c:d3:fe:29:fd:b7:93:b4:21:2d:74:d4:6f:bb:39:4c:
         55:6e:d5:60:ee:5e:80:28:06:f3:f2:cf:41:f6:4b:8b:9b:d1:
         dc:b2:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----