Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8.cer
File:                     7e7e6463-5b7e-4edb-9081-3d19b06067c8.cer (raw, json)
Hash identifier:          qmF2792mOBL4RwAeZ3vhCRTyfQJ2EpWGwHLEC7ZfeSw=
Subject key identifier:   D0:EB:07:9E:E2:6D:2E:5F:C0:07:2E:E1:64:FF:49:B5:84:27:3F:48
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584325FE8575D18CBFBCFED4A100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/7e7e6463-5b7e-4edb-9081-3d19b06067c8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 07 Sep 2023 22:49:56 +0000
Certificate not after:    Wed 10 Dec 2025 23:49:56 +0000
Subordinate resources:    IP: 192.153.163.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:25:fe:85:75:d1:8c:bf:bc:fe:d4:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep  7 22:49:56 2023 GMT
            Not After : Dec 10 23:49:56 2025 GMT
        Subject: CN=7e7e6463-5b7e-4edb-9081-3d19b06067c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:98:aa:f2:56:07:a6:38:d9:e3:de:10:52:
                    b6:24:69:cd:40:25:81:89:8b:85:aa:ac:fd:29:57:
                    2c:4a:e1:36:d4:5f:54:f4:5b:af:d7:1a:c3:95:e3:
                    a3:26:0f:73:4f:4e:ea:7e:46:76:59:89:14:85:21:
                    ef:ac:6a:68:3d:ee:d3:30:71:b9:f9:8b:f4:8e:15:
                    40:64:61:a7:8c:ee:be:d3:1e:50:d4:5d:c4:c5:cc:
                    99:bc:d1:ab:6a:17:06:12:b8:d8:56:f9:c7:4a:c2:
                    2b:2a:7f:f0:61:7e:ba:4b:22:bd:63:2d:1f:16:5f:
                    dd:7d:b9:c2:b1:90:4b:4d:ab:0f:1f:df:fa:39:8c:
                    03:cc:73:26:cc:aa:39:02:e4:db:cc:08:af:a2:92:
                    90:b0:ee:fe:f9:45:3a:ad:0c:45:f1:7e:b4:78:7b:
                    04:3b:a9:40:7f:a4:43:5a:a6:dc:db:af:81:a1:17:
                    8d:e4:ab:5e:cb:1f:50:e3:95:55:3e:04:09:2b:b9:
                    7a:c5:1c:2f:7d:26:27:87:1c:90:f8:d9:b8:40:a9:
                    ff:de:b5:ea:bc:aa:c9:df:98:b2:c2:14:10:32:5b:
                    c5:26:5b:0b:65:38:38:d9:dd:42:07:d9:fe:86:6e:
                    f4:52:c8:70:73:46:77:e0:2e:43:d4:d0:97:15:84:
                    c2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EB:07:9E:E2:6D:2E:5F:C0:07:2E:E1:64:FF:49:B5:84:27:3F:48
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/7e7e6463-5b7e-4edb-9081-3d19b06067c8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:46:94:c7:33:0d:55:5e:0a:6f:7b:ad:33:63:00:5b:31:
         7f:b0:38:5c:17:4b:85:e4:80:74:e9:9c:d1:99:59:de:7c:45:
         77:77:a7:6e:83:01:9d:1f:e8:24:34:dc:e6:bb:57:28:94:58:
         1e:e2:66:1f:37:64:b9:0a:ae:1e:08:98:a6:a1:6b:14:02:73:
         03:93:f6:83:ca:65:84:9d:b8:f1:e7:50:c0:b6:7b:b5:23:bf:
         b2:4f:be:29:39:26:af:a3:b3:e2:bf:37:b7:05:16:a3:e2:d5:
         80:fc:9b:49:38:e6:1a:27:44:ae:8d:fa:bc:1a:bc:08:55:16:
         67:8a:5e:1b:fa:54:cb:bf:56:21:3b:40:11:9f:f4:56:59:34:
         a5:f1:a3:60:4d:9e:e2:39:0e:96:1f:5c:bc:c2:76:dd:1c:e0:
         a8:e4:78:d1:eb:b2:31:31:14:cd:fc:8a:69:b8:91:f1:d8:4c:
         d0:04:3b:9a:43:c8:da:0d:50:9d:1a:30:c6:82:3f:7d:d5:ec:
         ea:11:00:5a:55:c3:2c:c1:10:e1:a4:a7:96:e0:13:54:fe:a8:
         03:34:29:c1:54:cc:5a:16:04:42:52:9f:24:d8:88:c8:b6:52:
         e1:8b:9e:73:9c:17:5b:68:47:46:f3:ac:c5:68:22:35:18:4c:
         f7:cf:7d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----