Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer
File:                     9ac09e11-24a9-4451-9633-b772a7a11960.cer (raw, json)
Hash identifier:          S2Y0bYqDk05ToUJNRiV3MGg0Q0s2WiAIFnFMsWPsOB0=
Subject key identifier:   37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858448BAD22E005F49BB7864D1520
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 14 Jan 2024 01:45:21 +0000
Certificate not after:    Sat 18 Apr 2026 00:45:21 +0000
Subordinate resources:    AS: 14041

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:8b:ad:22:e0:05:f4:9b:b7:86:4d:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jan 14 01:45:21 2024 GMT
            Not After : Apr 18 00:45:21 2026 GMT
        Subject: CN=9ac09e11-24a9-4451-9633-b772a7a11960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:66:e3:f4:bd:9b:9b:5e:7b:ea:c9:6a:ad:bb:
                    38:e7:d7:b5:4c:90:c5:03:34:57:de:c0:22:29:73:
                    59:fc:a0:fb:5e:15:85:19:46:2c:81:3d:3f:42:f7:
                    57:fc:a3:b5:aa:ed:36:cf:df:2c:12:1c:c1:b1:0b:
                    94:8c:9b:63:a7:e3:1b:0e:3e:de:e7:3b:1b:a9:4a:
                    f5:e2:e1:e5:8d:08:e3:6b:31:55:ca:ad:48:d6:34:
                    9c:cd:fb:20:41:a3:9e:c4:ef:ab:a7:5c:7d:d6:9d:
                    3b:7d:d7:ba:6e:ec:a2:d0:fc:60:5f:5f:8d:ba:c2:
                    04:23:7f:97:96:97:3f:3a:43:62:1d:b9:00:3e:e6:
                    5e:2d:2f:7a:3a:14:9f:d6:57:70:26:72:84:43:3a:
                    a6:54:22:88:e0:75:39:09:47:86:65:5d:19:9c:a8:
                    1b:c9:fd:a5:1a:6d:83:d8:38:cb:e3:6c:e8:f3:1a:
                    f1:d1:60:63:d8:5a:35:e8:24:47:7d:3c:df:9a:fc:
                    80:d7:b2:dd:4d:ec:bd:39:6c:66:2c:97:e2:7b:1a:
                    61:6b:ca:68:7c:ca:b1:a4:2a:7b:c6:01:43:0f:fa:
                    3a:59:68:5e:97:5b:b0:b0:f0:c7:47:0c:cc:f8:e9:
                    56:24:df:0d:9a:fc:24:42:e1:52:b3:f4:48:00:3c:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14041

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:67:3e:6f:f4:01:ac:f0:ff:06:8e:54:0a:e0:14:62:a2:fb:
         33:80:56:db:a3:c1:86:1b:14:c3:7b:79:c5:dd:a8:a1:b1:6e:
         78:7b:08:28:86:a3:6b:3d:4e:80:63:e0:e6:0f:41:de:00:02:
         57:1b:a2:ba:29:08:95:6f:e7:10:28:24:6d:6c:fc:79:e0:ef:
         3d:f9:39:50:30:cc:2b:3f:1a:21:12:a2:fc:f7:fc:6b:b4:8b:
         bc:16:c8:08:2d:62:68:f5:14:eb:08:94:1b:10:4f:5e:39:97:
         93:b3:72:64:eb:bc:9a:77:07:3c:ee:b4:8d:54:58:65:c4:00:
         93:83:ff:57:4e:4f:52:d8:96:56:a9:ef:9a:f0:c4:8d:af:51:
         11:61:09:8a:d9:00:34:b6:0d:b0:24:5c:05:00:aa:e5:1a:81:
         88:bf:c6:6c:d9:4c:b7:65:d3:6d:29:68:39:67:1b:d2:91:b6:
         91:52:84:e0:f6:35:ef:79:e7:51:33:76:4c:32:21:af:87:cb:
         83:bf:80:4f:7d:d6:62:8e:a7:f5:f1:0e:d2:4a:79:fc:a3:b5:
         de:2e:e2:9a:fd:95:8c:db:40:ce:a6:18:57:77:23:6c:fd:d7:
         04:d5:d7:22:78:a4:81:e9:bb:46:e5:de:8b:fa:96:92:0f:cb:
         d7:75:e8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----