Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer
File:                     7c74b511-7d11-4209-84c2-f7b800242a7b.cer (raw, json)
Hash identifier:          UjQJKi6+gEu0/sxU65+YHzSnTZ35O7+lAgReI5eoigw=
Subject key identifier:   76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285843BA2E02F022FE3B906833B428
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 31 Oct 2023 00:45:15 +0000
Certificate not after:    Mon 02 Feb 2026 01:45:15 +0000
Subordinate resources:    IP: 192.231.202.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ba:2e:02:f0:22:fe:3b:90:68:33:b4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Oct 31 00:45:15 2023 GMT
            Not After : Feb  2 01:45:15 2026 GMT
        Subject: CN=7c74b511-7d11-4209-84c2-f7b800242a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:51:9b:ed:88:a7:f1:f7:a1:80:75:17:d8:d9:
                    a4:7d:11:0d:d1:0e:9f:88:f0:96:f8:c9:a2:98:c6:
                    09:36:84:50:d4:ed:65:c2:f6:76:de:37:6e:ab:81:
                    54:c3:91:3a:e8:6b:df:11:82:cb:3b:60:33:18:3e:
                    c1:38:1b:cd:43:0f:ed:97:1a:82:8d:50:db:79:35:
                    cc:b2:11:b3:8b:d4:14:d9:72:0d:ed:53:be:f1:2d:
                    e6:71:a4:f1:9e:73:3e:85:77:1e:a4:33:c2:58:2f:
                    e2:4d:24:c7:91:52:2d:dc:4b:22:00:6a:01:ec:cc:
                    06:7d:fe:cf:33:7d:b3:88:27:0a:5b:f9:39:53:46:
                    07:4b:3d:fa:b4:4a:ea:45:d2:f5:7c:d2:60:6c:6a:
                    83:c9:a2:db:27:f7:db:2c:16:75:a2:60:72:10:5b:
                    c9:1c:76:c3:e4:a7:6e:68:56:6b:bc:b3:37:7d:e8:
                    04:09:8d:d0:22:fa:c0:9b:a4:68:9b:fd:41:78:98:
                    e4:0d:77:a6:0e:41:92:c5:ce:c2:50:ee:f3:2c:ca:
                    ac:d9:34:fd:2c:4e:0a:48:84:f2:ed:f8:d8:0b:61:
                    15:9c:f2:a3:33:e3:1e:2b:0d:2f:43:81:9d:1c:6b:
                    06:57:6d:d3:18:5c:6c:cf:6c:43:c5:06:57:89:ef:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c9:a6:da:98:e3:70:00:7e:db:9d:50:24:e8:91:cc:73:34:
         d5:41:89:ed:3a:68:f2:49:aa:ab:8c:3c:2f:03:8f:89:3e:f7:
         b3:dd:d0:64:5e:36:01:c2:2d:23:30:2b:26:9e:1e:f9:6a:ce:
         35:a4:88:44:87:ff:fe:4f:5c:ab:81:a0:9e:fe:6c:e1:6d:31:
         49:d8:cf:35:a4:f6:28:e2:8d:a0:26:f7:e1:88:ce:40:a5:6b:
         a8:34:f3:04:b4:2a:f4:e0:7f:93:cd:37:3e:97:c0:09:f5:a4:
         da:a3:c7:d6:9d:47:a3:eb:0e:cd:e1:af:4d:b2:44:24:54:35:
         51:4b:81:6b:86:5c:0b:b5:47:3e:27:ca:9d:e4:d8:ca:9c:66:
         11:d4:76:d4:a0:01:87:06:fe:2a:c2:fe:68:1b:b8:9e:3a:91:
         da:2d:8c:0b:9b:1d:ef:41:e5:9b:53:f9:43:4b:5f:65:0d:4f:
         13:de:62:58:87:a5:d6:7d:5f:ea:f7:ee:4e:5c:eb:8e:5b:9d:
         c3:11:d2:86:97:7d:14:77:b9:45:87:19:38:ab:c2:1d:a3:fa:
         60:2a:f9:75:39:c4:ab:51:57:6b:ab:0a:60:be:0b:da:0d:68:
         73:cb:e3:19:b8:7b:38:92:95:04:a5:0a:8e:2c:0d:51:69:f8:
         b9:43:88:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----