Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer
File:                     7405a32c-964c-4b30-a008-0f287767e1c1.cer (raw, json)
Hash identifier:          KctbDXLrnTY0/0thna6S1X4y6qh7CfXRhFLh+G+v2EE=
Subject key identifier:   E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285844FB5880CFE08441E9FD7327A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 23 Feb 2024 01:45:21 +0000
Certificate not after:    Thu 28 May 2026 00:45:21 +0000
Subordinate resources:    IP: 23.247.212.0/22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fb:58:80:cf:e0:84:41:e9:fd:73:27:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb 23 01:45:21 2024 GMT
            Not After : May 28 00:45:21 2026 GMT
        Subject: CN=7405a32c-964c-4b30-a008-0f287767e1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:7f:b1:33:cf:99:98:9e:60:0a:8d:7d:6c:
                    80:02:c6:e6:bb:65:a5:ff:f7:66:8c:d3:bf:65:8b:
                    a7:ca:c4:a3:19:fd:f5:b7:e0:09:fb:bc:e0:00:3c:
                    3c:7e:92:14:e7:4b:32:3d:23:02:4a:96:a0:a0:e3:
                    8c:ea:cc:3f:c7:73:d7:54:b6:da:3e:59:a5:bc:f1:
                    65:bd:94:7a:fd:ae:65:a3:8b:81:6d:67:97:0c:3a:
                    58:92:9b:70:e0:b7:34:64:31:c3:84:6c:9a:ed:22:
                    54:67:64:7b:f9:c8:5d:15:57:f1:77:ca:31:35:f6:
                    73:20:3c:ac:11:18:aa:42:5c:fb:bd:2a:4b:36:5a:
                    d4:f1:63:68:e7:16:d6:12:7b:26:a9:da:19:ad:ae:
                    ee:8d:54:6d:12:58:30:ac:a0:c2:20:84:44:5f:de:
                    66:14:43:d8:57:24:36:49:af:0d:44:1e:d7:e6:f4:
                    4f:b4:95:e0:1e:3d:2b:54:6b:94:bf:04:ed:ed:40:
                    6e:c5:82:93:83:99:ea:3e:59:7e:68:4f:23:cd:8a:
                    da:cd:e0:19:b2:b4:b5:3b:94:a2:1f:1b:aa:69:c1:
                    58:58:e4:70:dc:2b:a1:6b:eb:7b:5d:c0:da:ad:5b:
                    67:4e:3f:41:b8:5e:80:97:13:8c:02:0d:06:f3:24:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:96:7f:9f:d4:f1:6c:04:04:b8:51:bb:89:68:3e:a6:3e:b0:
         0c:08:2e:db:f5:d7:ce:9e:24:58:49:cc:d6:c2:86:50:88:df:
         6b:c5:dd:d6:6b:f0:8c:b8:e3:4d:37:18:db:18:77:ca:bd:4e:
         82:89:e4:77:6c:89:af:ea:e4:9f:08:ac:ea:42:e1:c3:88:cb:
         ea:49:19:29:b4:6b:07:8a:23:0e:9b:67:48:31:d7:53:5e:ad:
         fe:1f:6e:b9:0b:b7:34:70:8b:d2:1d:90:03:31:db:b7:dd:b3:
         5d:51:23:a9:ab:e1:86:21:91:dc:cc:4b:f0:36:61:26:ce:fa:
         bc:4f:f4:6b:5a:af:96:7f:69:b2:c3:13:18:44:92:58:ca:c7:
         04:c2:78:5e:66:b8:d0:f9:e3:16:6e:80:a1:73:e0:0d:a1:a1:
         d7:fe:42:a9:c0:78:65:91:4c:17:eb:74:3c:f1:59:5a:2e:8a:
         85:c6:29:8d:31:12:67:c6:ef:02:5a:57:ba:53:be:b5:f3:91:
         8b:d9:59:c7:2d:bd:62:9c:db:84:e2:1b:86:0f:be:58:5f:e6:
         97:f7:07:0d:3d:6e:8f:ae:f4:0d:9a:b7:d7:69:d5:64:31:8c:
         84:7c:39:f4:af:fd:94:02:7c:d3:27:52:83:b7:3d:f0:19:0e:
         fa:6e:80:91
-----BEGIN CERTIFICATE-----
MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWET7WIDP4IRB6f1zJ6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDIyMzAxNDUyMVoXDTI2MDUyODAwNDUyMVowLzEtMCsGA1UEAxMk
NzQwNWEzMmMtOTY0Yy00YjMwLWEwMDgtMGYyODc3NjdlMWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn89/sTPPmZieYAqNfWyAAsbmu2Wl//dmjNO/
ZYunysSjGf31t+AJ+7zgADw8fpIU50syPSMCSpagoOOM6sw/x3PXVLbaPlmlvPFl
vZR6/a5lo4uBbWeXDDpYkptw4Lc0ZDHDhGya7SJUZ2R7+chdFVfxd8oxNfZzIDys
ERiqQlz7vSpLNlrU8WNo5xbWEnsmqdoZra7ujVRtElgwrKDCIIREX95mFEPYVyQ2
Sa8NRB7X5vRPtJXgHj0rVGuUvwTt7UBuxYKTg5nqPll+aE8jzYrazeAZsrS1O5Si
HxuqacFYWORw3Cuha+t7XcDarVtnTj9BuF6AlxOMAg0G8yRySQIDAQABo4ID/zCC
A/swHQYDVR0OBBYEFOlzexXNZu2jC2hmQ3GUUggT99hYMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83
NDA1YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4Nzc2N2UxYzEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc0MDVhMzJjLTk2NGMtNGIzMC1h
MDA4LTBmMjg3NzY3ZTFjMS83NDA1YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4Nzc2
N2UxYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIX99QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGZZ/n9TxbAQEuFG7iWg+
pj6wDAgu2/XXzp4kWEnM1sKGUIjfa8Xd1mvwjLjjTTcY2xh3yr1Ogonkd2yJr+rk
nwis6kLhw4jL6kkZKbRrB4ojDptnSDHXU16t/h9uuQu3NHCL0h2QAzHbt92zXVEj
qavhhiGR3MxL8DZhJs76vE/0a1qvln9pssMTGESSWMrHBMJ4Xma40PnjFm6AoXPg
DaGh1/5CqcB4ZZFMF+t0PPFZWi6KhcYpjTESZ8bvAlpXulO+tfORi9lZxy29Ypzb
hOIbhg++WF/ml/cHDT1uj670DZq312nVZDGMhHw59K/9lAJ80ydSg7c98BkO+m6A
kQ==
-----END CERTIFICATE-----