Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer
File:                     804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer (raw, json)
Hash identifier:          Bro0+vySIT+Q9HrZQ1m/jkfDqxjdRTpbmpeE72+J+8M=
Subject key identifier:   55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285844940D312D8601239C5A15BF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 17 Jan 2024 01:45:21 +0000
Certificate not after:    Tue 21 Apr 2026 00:45:21 +0000
Subordinate resources:    AS: 18903
                          IP: 208.80.128.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:94:0d:31:2d:86:01:23:9c:5a:15:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jan 17 01:45:21 2024 GMT
            Not After : Apr 21 00:45:21 2026 GMT
        Subject: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:02:de:8c:d0:31:6d:90:a3:08:18:68:1c:
                    b9:24:0e:67:0b:74:5b:01:85:33:a4:b8:17:a0:42:
                    59:70:fd:84:e9:44:cd:1e:7a:00:df:a2:7b:e6:17:
                    7c:ff:d7:e6:40:80:85:c2:a6:d7:55:0b:d3:e3:fb:
                    af:b5:f2:b2:a0:9d:3e:74:c6:43:5c:ae:0c:5b:fb:
                    f7:c2:a8:c6:20:3d:0e:9e:0f:62:d9:30:17:66:2f:
                    b3:71:51:78:7d:f6:33:36:8c:e0:51:14:53:db:54:
                    2b:20:04:b2:31:a4:25:d5:a6:4f:97:78:5a:55:fa:
                    66:7f:53:96:66:5b:fb:16:91:f3:c1:41:ed:75:ea:
                    26:ee:e7:21:f0:23:b5:ee:59:60:61:00:5c:1f:7d:
                    5f:dc:20:53:db:7d:69:3d:65:3d:96:26:07:8a:83:
                    90:96:1c:82:e2:63:34:46:2b:de:e2:9d:aa:19:3a:
                    e8:cf:56:0d:78:f6:79:a5:5c:1b:fe:c2:bf:77:00:
                    50:f6:73:7c:3a:79:3a:af:60:a9:ad:b0:71:1f:de:
                    79:41:89:16:57:2c:70:55:23:81:fa:04:77:ad:7e:
                    cf:e2:98:f0:65:e0:81:95:41:91:08:3e:c6:b1:65:
                    42:a6:a5:d5:f5:ce:bd:8d:2a:fb:76:f2:bb:55:a3:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.128.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18903

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:07:07:0c:fc:2e:52:77:8d:d1:3d:7d:15:90:d5:0b:e8:b6:
         64:aa:4e:19:57:f4:7d:88:fb:c2:8c:f6:0c:7b:d5:87:81:34:
         45:44:d9:e1:dd:2c:30:2a:36:6f:9b:11:12:cc:98:20:9a:18:
         d0:c5:26:42:47:54:20:2c:f0:3d:31:99:ee:36:14:19:d0:af:
         a0:da:4e:b8:ca:66:f4:62:19:9f:40:0a:05:21:50:b4:9f:5e:
         0d:a9:5f:61:2d:20:05:d3:f8:de:d7:a7:10:38:c0:25:89:00:
         8a:f9:ea:0e:80:f2:fa:23:96:a8:a4:7d:34:f1:5c:52:6f:6b:
         72:34:e2:a4:87:f9:5b:3d:91:52:fd:c7:56:e6:2b:80:23:e3:
         8f:0c:56:f9:88:02:68:20:9a:9d:c6:c8:02:71:09:c0:36:33:
         7f:5a:af:08:46:48:b1:b8:82:e4:83:ef:c9:35:08:29:d3:92:
         62:16:a6:f4:90:5f:a2:e3:f9:8e:4e:13:a9:0f:72:31:5d:ff:
         03:4c:fc:6d:4e:14:3c:bb:d9:c1:0c:ea:cd:68:d3:b9:ed:44:
         5a:1b:00:11:a1:7f:2b:d0:bb:56:a5:3a:70:0b:be:fa:d8:0e:
         fc:46:fe:3c:3c:ec:5d:45:b3:1f:b5:46:4b:83:7a:c2:f4:78:
         63:21:bf:e2
-----BEGIN CERTIFICATE-----
MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWESUDTEthgEjnFoVv4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDExNzAxNDUyMVoXDTI2MDQyMTAwNDUyMVowLzEtMCsGA1UEAxMk
ODA0YjFlNGItODlkMy00NzY5LWJhYjEtMzhkZjFkOWJiNzJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxREC3ozQMW2QowgYaBy5JA5nC3RbAYUzpLgX
oEJZcP2E6UTNHnoA36J75hd8/9fmQICFwqbXVQvT4/uvtfKyoJ0+dMZDXK4MW/v3
wqjGID0Ong9i2TAXZi+zcVF4ffYzNozgURRT21QrIASyMaQl1aZPl3haVfpmf1OW
Zlv7FpHzwUHtdeom7uch8CO17llgYQBcH31f3CBT231pPWU9liYHioOQlhyC4mM0
Rive4p2qGTroz1YNePZ5pVwb/sK/dwBQ9nN8Onk6r2CprbBxH955QYkWVyxwVSOB
+gR3rX7P4pjwZeCBlUGRCD7GsWVCpqXV9c69jSr7dvK7VaOTKwIDAQABo4IEGjCC
BBYwHQYDVR0OBBYEFFUDZSr3fwyvUFL6yYfJT2IEL7g6MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84
MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5YmI3MmUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzgwNGIxZTRiLTg5ZDMtNDc2OS1i
YWIxLTM4ZGYxZDliYjcyZS84MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5
YmI3MmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPQUIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC
SdcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAjgcHDPwuUneN0T19FZDVC+i2ZKpOGVf0fYj7woz2DHvVh4E0
RUTZ4d0sMCo2b5sREsyYIJoY0MUmQkdUICzwPTGZ7jYUGdCvoNpOuMpm9GIZn0AK
BSFQtJ9eDalfYS0gBdP43tenEDjAJYkAivnqDoDy+iOWqKR9NPFcUm9rcjTipIf5
Wz2RUv3HVuYrgCPjjwxW+YgCaCCancbIAnEJwDYzf1qvCEZIsbiC5IPvyTUIKdOS
Yham9JBfouP5jk4TqQ9yMV3/A0z8bU4UPLvZwQzqzWjTue1EWhsAEaF/K9C7VqU6
cAu++tgO/Eb+PDzsXUWzH7VGS4N6wvR4YyG/4g==
-----END CERTIFICATE-----