Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da.cer
File:                     6edf1958-c03a-4505-9a75-2b1c81b948da.cer (raw, json)
Hash identifier:          9c7Svlmu6ivZwCjAFsqK2Apl0TIqlbHhJ1z9Hcbhhrs=
Subject key identifier:   B2:0D:E6:D6:7D:36:5C:25:D3:34:7A:54:83:44:FF:F9:FE:49:1D:97
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285843EF56C85FD96B717B9E6FF000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/6edf1958-c03a-4505-9a75-2b1c81b948da.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 19 Nov 2023 01:45:15 +0000
Certificate not after:    Sat 21 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 63416
                          IP: 104.251.119.0 -- 104.251.120.255
                          IP: 2607:f8b8::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ef:56:c8:5f:d9:6b:71:7b:9e:6f:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 19 01:45:15 2023 GMT
            Not After : Feb 21 01:45:15 2026 GMT
        Subject: CN=6edf1958-c03a-4505-9a75-2b1c81b948da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:58:c6:36:6a:a3:da:89:dd:15:b5:10:58:
                    81:9d:29:e6:88:fc:b3:17:be:ee:0a:aa:fa:81:c2:
                    0a:e5:83:6d:b8:13:71:e9:11:ab:4b:fd:fc:ca:f3:
                    ca:a9:ab:0a:6d:74:05:89:2a:41:c8:d9:b5:4a:23:
                    66:12:9a:4b:3d:4e:a4:e1:d1:8e:6e:fd:55:5a:9b:
                    30:85:9f:1c:b6:6e:fc:01:03:fc:81:c4:49:cd:2d:
                    68:79:28:46:8d:39:19:50:ef:52:66:b4:14:8d:d0:
                    30:2e:bc:8b:4f:26:78:7d:62:73:1d:30:d1:2d:96:
                    3e:6c:cd:93:db:d9:67:a7:b6:67:e8:8f:ce:9e:7b:
                    a5:5b:50:d7:fd:4f:47:f3:ff:76:ea:33:99:fe:47:
                    08:e9:61:bb:d3:7e:96:b2:ad:74:f3:0b:c3:5e:89:
                    40:37:ac:36:6c:ff:ee:bb:32:53:62:73:a6:94:22:
                    fc:ff:9b:e4:b4:f4:c4:c3:be:8f:43:1e:df:56:91:
                    60:32:25:ea:90:97:d8:7c:cf:60:b1:93:f6:a5:08:
                    8f:7f:9c:ce:e9:a1:b7:fe:eb:e3:b2:7c:36:6e:56:
                    e7:9f:5f:05:50:a7:bc:51:e1:63:f2:2c:ca:16:79:
                    d1:fe:8a:32:94:e3:5f:f2:da:c7:e7:04:ee:9a:2e:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0D:E6:D6:7D:36:5C:25:D3:34:7A:54:83:44:FF:F9:FE:49:1D:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6edf1958-c03a-4505-9a75-2b1c81b948da/6edf1958-c03a-4505-9a75-2b1c81b948da.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.119.0-104.251.120.255
                IPv6:
                  2607:f8b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63416

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:cf:9f:06:24:34:5a:fa:85:5d:2c:98:52:6b:f0:c9:6b:45:
         3f:dd:60:4b:d0:27:7f:5b:db:a9:53:f2:5e:7f:86:1b:8d:dd:
         de:98:18:42:83:d4:19:3c:a5:38:72:69:67:e4:15:13:32:97:
         29:bc:47:df:56:c1:77:9e:88:42:2f:d4:04:9b:38:e4:d4:37:
         a4:96:d1:06:ea:90:0a:86:2c:03:81:95:bb:bb:15:44:d8:84:
         67:8a:d4:0f:9e:d4:0d:70:a2:e0:27:4a:77:eb:bf:98:fc:f4:
         1f:af:b4:0d:a8:85:22:ee:08:ac:a2:89:d3:ab:ed:76:62:76:
         59:55:e3:96:3f:db:a3:25:e2:60:ff:2f:ca:6d:ac:4d:3e:12:
         b3:61:f3:ff:67:33:ba:af:8a:13:ae:ae:fe:d4:2a:bb:f4:63:
         87:14:37:49:31:61:4e:42:84:9f:10:39:a3:99:00:43:c9:9e:
         f6:a3:a2:dd:49:37:d0:40:4e:ec:f9:dc:d2:98:13:15:44:3c:
         2a:dd:17:54:b0:c7:f7:2c:7a:9c:24:72:44:3f:92:82:0d:60:
         a7:c5:1a:a9:3c:c5:e1:90:6a:19:19:36:86:32:8e:15:22:c9:
         3b:85:a6:57:e3:82:22:4c:ef:02:50:d1:cb:3d:41:b0:45:ef:
         6b:1c:28:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----