Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer
File:                     7ea21a7b-596c-45f8-899e-6879815f26b1.cer (raw, json)
Hash identifier:          MTI7fsj0asq4RMBh2TmpyXIACD2/JcLpNkXM0Q8yiGY=
Subject key identifier:   58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858433F57F87B6FD945CE866AF0A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 17 Sep 2023 00:45:22 +0000
Certificate not after:    Sat 20 Dec 2025 01:45:22 +0000
Subordinate resources:    IP: 139.64.200.0/24
                          IP: 2620:85:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:3f:57:f8:7b:6f:d9:45:ce:86:6a:f0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep 17 00:45:22 2023 GMT
            Not After : Dec 20 01:45:22 2025 GMT
        Subject: CN=7ea21a7b-596c-45f8-899e-6879815f26b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:9b:ee:aa:c6:20:3d:25:37:b1:8e:39:d6:
                    d1:b0:60:91:f0:bb:9f:c3:d5:8f:ca:c2:f1:b2:29:
                    e0:90:d4:81:b3:1e:2d:11:1d:60:18:a0:8a:e1:be:
                    0a:bc:18:96:f0:6f:61:3b:3d:98:69:ae:ce:2a:eb:
                    e4:88:f0:24:fb:ab:5d:1c:53:77:17:ef:54:58:75:
                    93:11:55:22:49:63:12:01:a3:03:7c:c8:fe:b1:63:
                    d4:b0:15:bf:c8:ad:cb:66:61:22:7f:ba:c0:cc:1e:
                    5e:33:eb:56:bf:7c:18:59:a1:3d:6b:f0:48:14:2d:
                    9c:b2:d4:ed:64:7d:dd:9c:44:9b:21:8e:17:cc:93:
                    51:3b:ba:c8:8f:df:e2:88:c8:68:54:28:8f:b7:3b:
                    3d:35:d2:ed:14:7a:ef:d4:06:89:78:3d:27:67:91:
                    38:70:07:9e:ef:5b:89:61:73:a9:89:23:0a:06:cc:
                    41:2f:fa:59:0e:e5:02:1d:c7:20:8f:cb:9c:9f:bf:
                    b0:6d:50:3b:ce:02:8b:02:1c:e3:21:50:d4:b1:e3:
                    3e:6d:7f:44:c9:8b:26:d0:24:b6:33:24:01:ea:25:
                    28:eb:a2:c8:81:d9:e5:01:76:a6:dd:11:79:c9:d6:
                    5e:70:df:67:bf:99:93:3d:a0:93:ca:8f:6f:2a:18:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.200.0/24
                IPv6:
                  2620:85:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:0b:0b:e8:3d:a9:50:89:5a:4e:87:f1:58:1b:ef:a6:5c:4e:
         1a:fd:11:74:a1:18:2b:db:97:17:58:af:00:63:b8:09:e5:fc:
         b7:30:5a:c0:94:8c:75:96:d4:e7:ea:9d:de:e5:5b:ec:ac:c0:
         35:0d:c4:13:a4:56:90:a2:fb:0c:73:49:f8:ae:2a:36:ad:92:
         a3:63:a5:31:1d:ba:7e:93:22:62:78:f5:6d:b5:09:94:b2:78:
         2f:77:17:3a:b6:60:cf:ee:dd:1f:29:83:b9:84:4f:06:63:18:
         24:46:ab:0c:91:2f:e3:4a:e7:91:aa:08:c8:d1:99:1c:6e:50:
         fd:7c:5f:ab:bf:cf:2a:b2:70:81:9e:a6:db:8d:b8:0e:67:c1:
         64:3a:1e:3d:c9:36:71:8e:e1:84:12:e7:66:11:8b:b2:aa:0b:
         b2:08:55:49:97:f5:95:08:ec:6d:24:f1:99:63:40:ca:3d:c8:
         bd:f8:ad:bc:a7:af:29:f0:a5:24:a1:62:45:31:5b:fa:d8:d5:
         81:6b:20:55:a4:f3:27:85:1b:13:19:f5:da:23:27:15:f6:4f:
         73:fa:cb:52:28:6f:53:79:c9:f8:0c:89:b3:a0:02:e9:3c:ff:
         c6:96:7f:2e:fb:0b:7a:02:de:dd:5b:5a:f2:44:d0:b4:1c:d4:
         88:83:e0:ea
-----BEGIN CERTIFICATE-----
MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEM/V/h7b9lFzoZq8KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTIzMDkxNzAwNDUyMloXDTI1MTIyMDAxNDUyMlowLzEtMCsGA1UEAxMk
N2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYyNmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZWb7qrGID0lN7GOOdbRsGCR8Lufw9WPysLx
singkNSBsx4tER1gGKCK4b4KvBiW8G9hOz2Yaa7OKuvkiPAk+6tdHFN3F+9UWHWT
EVUiSWMSAaMDfMj+sWPUsBW/yK3LZmEif7rAzB5eM+tWv3wYWaE9a/BIFC2cstTt
ZH3dnESbIY4XzJNRO7rIj9/iiMhoVCiPtzs9NdLtFHrv1AaJeD0nZ5E4cAee71uJ
YXOpiSMKBsxBL/pZDuUCHccgj8ucn7+wbVA7zgKLAhzjIVDUseM+bX9EyYsm0CS2
MyQB6iUo66LIgdnlAXam3RF5ydZecN9nv5mTPaCTyo9vKhgOKQIDAQABo4IEEDCC
BAwwHQYDVR0OBBYEFFjV1TLrEADEv4oZM87qo4Ytd/SpMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83
ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdlYTIxYTdiLTU5NmMtNDVmOC04
OTllLTY4Nzk4MTVmMjZiMS83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1
ZjI2YjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH
AQcBAf8EITAfMAwEAgABMAYDBACLQMgwDwQCAAIwCQMHACYgAIWgADBUBgNVHSAB
Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy
aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB
AQAjCwvoPalQiVpOh/FYG++mXE4a/RF0oRgr25cXWK8AY7gJ5fy3MFrAlIx1ltTn
6p3e5VvsrMA1DcQTpFaQovsMc0n4rio2rZKjY6UxHbp+kyJiePVttQmUsngvdxc6
tmDP7t0fKYO5hE8GYxgkRqsMkS/jSueRqgjI0ZkcblD9fF+rv88qsnCBnqbbjbgO
Z8FkOh49yTZxjuGEEudmEYuyqguyCFVJl/WVCOxtJPGZY0DKPci9+K28p68p8KUk
oWJFMVv62NWBayBVpPMnhRsTGfXaIycV9k9z+stSKG9Tecn4DImzoALpPP/Gln8u
+wt6At7dW1ryRNC0HNSIg+Dq
-----END CERTIFICATE-----