Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116.cer
File:                     7e50977e-3e40-4150-b9bd-c9bdff374116.cer (raw, json)
Hash identifier:          0Z/XIyPWUtJOpsg5fyfxydrOatDgce6HxvwZjBxU5qM=
Subject key identifier:   39:74:F0:F3:9E:E6:A1:66:E4:88:BE:F5:90:BE:B2:EC:91:81:5D:97
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584402E192F96C21228365971F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/7e50977e-3e40-4150-b9bd-c9bdff374116.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 26 Nov 2023 01:45:15 +0000
Certificate not after:    Sat 28 Feb 2026 01:45:15 +0000
Subordinate resources:    AS: 549
                          IP: 205.211.94.0/23
                          IP: 2606:b340::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:02:e1:92:f9:6c:21:22:83:65:97:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 26 01:45:15 2023 GMT
            Not After : Feb 28 01:45:15 2026 GMT
        Subject: CN=7e50977e-3e40-4150-b9bd-c9bdff374116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:61:b5:be:4f:04:c7:eb:05:12:f3:b7:e3:eb:
                    18:fa:63:2f:7a:01:5e:1b:ec:0d:47:9e:06:ce:47:
                    13:00:3a:69:79:cf:85:09:f3:49:8f:6a:c0:93:15:
                    c8:ef:63:54:4e:fd:fc:46:90:45:37:a5:f8:84:68:
                    f7:bc:af:8e:11:f4:78:43:da:c1:94:de:f7:b0:00:
                    08:76:b9:5e:d1:7f:58:82:3e:7e:80:fe:03:28:a3:
                    6b:05:24:5a:fd:1c:f3:5a:ff:4a:10:1a:97:71:2f:
                    05:6d:5d:77:da:a5:12:46:66:ac:cf:bb:3b:dd:82:
                    98:30:9a:56:02:27:ed:94:cf:72:b4:08:ec:65:7c:
                    f9:8f:27:39:b6:87:9d:14:fd:4e:87:39:5d:ef:45:
                    8c:68:d9:3f:08:e7:33:b2:5e:cc:99:6b:82:30:a2:
                    67:6d:f0:fc:f7:2c:6c:8e:de:ea:09:70:0a:2d:14:
                    77:6b:e9:ca:6b:b5:5a:93:60:bb:88:9b:24:46:21:
                    20:ba:da:6d:d9:a1:d7:09:05:0a:a4:d2:52:e3:4f:
                    ee:53:d6:c5:a7:ea:87:de:33:a7:6a:be:ce:d2:f8:
                    27:8d:29:9d:aa:a4:a4:b1:37:c7:02:50:1e:16:63:
                    38:d3:47:92:97:f4:ab:5c:c9:3f:ca:22:44:c0:56:
                    e8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:74:F0:F3:9E:E6:A1:66:E4:88:BE:F5:90:BE:B2:EC:91:81:5D:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/7e50977e-3e40-4150-b9bd-c9bdff374116.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.94.0/23
                IPv6:
                  2606:b340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  549

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:45:25:6f:24:0d:8b:6c:b2:c4:ed:41:95:c9:12:12:49:a5:
         07:2e:d2:8c:9a:59:ec:f8:39:2f:fa:c9:ae:c0:19:4a:b8:bf:
         32:f6:ea:d7:87:bf:a8:d8:a5:f4:7a:1e:5b:e1:4c:01:4e:b9:
         d7:5a:83:f2:3b:b4:9d:3e:e6:f0:b4:cc:a0:ca:b4:d9:50:fd:
         53:f9:3c:f2:82:47:0d:28:34:ca:98:c3:e6:90:58:19:8d:bc:
         16:d8:5e:81:6c:d5:49:1b:6e:7c:b8:fe:41:66:bf:da:75:4c:
         12:39:d6:6f:96:86:b7:1b:53:76:ec:55:8a:1d:e3:4f:24:c6:
         9d:3a:a5:49:1c:4d:f0:da:fe:5e:22:97:f6:71:99:0a:35:b9:
         bf:7d:ef:02:0b:7b:0f:65:2a:8d:48:1c:da:78:38:25:70:e2:
         a4:0d:68:0b:79:5e:8e:f5:19:2f:9c:b1:03:59:a9:ad:0d:80:
         94:e4:3c:a3:90:1b:fc:6f:01:a9:6a:09:e1:88:96:84:d7:e3:
         ff:f6:fe:6c:ad:54:a2:43:1e:1e:89:91:6a:61:0e:a4:86:68:
         7e:f8:91:26:9c:ac:4a:ba:77:95:e5:54:4e:45:3a:cd:ac:08:
         00:21:53:0c:bc:04:9f:dd:98:1d:bd:eb:d8:bc:27:4b:9c:0c:
         ac:c7:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----