Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12.cer
File:                     85154141-f81d-4a16-94db-ba21a7f28a12.cer (raw, json)
Hash identifier:          cHWXBHRc0w3E+HCCe+OvWMP+qWx+M61LqsKSDgY9rJo=
Subject key identifier:   48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584567378AA355217EF8FA7C3080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 01 Apr 2024 17:06:15 +0000
Certificate not after:    Thu 18 Jun 2026 00:45:21 +0000
Subordinate resources:    AS: 1046
                          AS: 36014
                          AS: 53464
                          IP: 64.20.212.0/22
                          IP: 216.38.224.0/22
                          IP: 2607:1340::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:67:37:8a:a3:55:21:7e:f8:fa:7c:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Apr  1 17:06:15 2024 GMT
            Not After : Jun 18 00:45:21 2026 GMT
        Subject: CN=85154141-f81d-4a16-94db-ba21a7f28a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:31:87:67:0b:31:4b:a4:d7:0e:93:13:87:
                    22:9a:62:32:93:fa:e3:c4:a6:8d:4c:52:3b:2e:97:
                    b8:e4:21:18:db:74:3d:e0:e9:23:01:62:e7:61:e4:
                    f7:99:42:41:92:a2:b9:ea:2e:f9:ca:0a:d4:1e:1d:
                    44:70:57:6f:96:29:7a:8d:1e:93:84:4d:01:c8:86:
                    d2:7b:fa:b5:8a:49:32:4e:c8:09:6d:ba:60:89:17:
                    c6:84:e9:4c:4c:c3:51:5e:88:13:2c:38:e9:8e:8d:
                    a4:de:79:ef:b9:9c:fc:40:2f:99:33:24:35:25:35:
                    93:42:ed:43:77:f8:5e:51:49:18:06:17:2d:43:47:
                    15:e0:77:15:7c:7a:d2:ef:b4:e0:2f:86:46:a5:ec:
                    84:18:b7:21:a9:f0:a6:72:e2:63:57:64:56:f8:09:
                    ae:0b:a9:21:7b:b2:4d:74:90:5a:ca:39:ca:83:2c:
                    1c:de:cc:fc:67:d4:fa:22:07:16:c6:d4:b3:02:14:
                    70:1f:f5:a8:41:d9:36:61:20:36:a3:ea:70:0e:9a:
                    b0:f4:52:7c:34:3c:c0:f6:2d:20:63:2b:25:bf:4e:
                    dd:e8:56:25:01:6c:ca:75:d6:aa:5f:00:04:b1:da:
                    48:15:30:cb:eb:d0:40:c4:59:12:6e:90:89:c3:76:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:96:90:9B:A0:3F:3D:5F:94:38:41:EE:F9:06:4E:49:64:43:3B:EC
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/85154141-f81d-4a16-94db-ba21a7f28a12/85154141-f81d-4a16-94db-ba21a7f28a12.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.212.0/22
                  216.38.224.0/22
                IPv6:
                  2607:1340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1046
                  36014
                  53464

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:1d:6d:a6:5b:08:79:7c:9e:91:df:b2:e7:5a:38:19:e5:03:
         b4:0f:93:50:fa:62:15:60:4c:79:b8:11:9a:3e:28:a3:89:10:
         70:33:c6:29:20:66:50:7d:04:9a:b2:1c:80:bc:32:12:46:10:
         a5:a5:05:9a:90:e0:98:27:1e:c9:f4:9a:79:97:76:b5:21:b1:
         ae:00:cc:0c:cb:19:b1:20:7b:d7:fa:2f:e8:f6:69:67:a6:07:
         e3:b7:ca:97:5e:0b:f0:0d:93:d3:e9:ad:13:d2:6b:ee:97:8f:
         5b:7a:fb:0a:24:43:32:89:89:df:42:83:da:c2:1d:21:50:7f:
         a7:09:92:cb:9c:a0:82:8e:9c:e3:5e:14:9d:93:c8:67:a8:3a:
         9f:17:cd:db:4d:90:1d:af:6b:02:01:7a:d5:d8:0e:60:25:23:
         50:85:91:0d:e5:98:7a:a5:d7:82:e1:c7:0d:c2:f7:6d:50:02:
         21:6c:08:89:23:1b:ad:67:76:9a:45:94:8d:61:f7:b3:a7:45:
         73:0f:9e:00:07:e6:e3:1f:44:5c:3c:b0:88:24:3a:33:75:af:
         3c:1f:5e:dc:58:59:d8:35:4e:e6:be:d2:72:ea:b5:65:f7:73:
         38:f2:85:74:6e:2a:77:d4:f6:8b:3d:f6:40:1a:bc:88:f8:26:
         0b:98:62:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----