Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer
File:                     ac260f04-d856-4e9f-9dcc-f16d93c3ab56.cer (raw, json)
Hash identifier:          dk+AOmJ1qkSoJjCFTUhCbXZgHMK0UQxwsYRxV8lc3Mk=
Subject key identifier:   EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285846311CA5F0454AFD391CF69400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 13 Jun 2024 00:45:20 +0000
Certificate not after:    Wed 16 Sep 2026 00:45:20 +0000
Subordinate resources:    AS: 27644
                          AS: 400635
                          IP: 192.124.129.0/24
                          IP: 207.167.126.0/23
                          IP: 2620:11e:f000::/44

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:31:1c:a5:f0:45:4a:fd:39:1c:f6:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jun 13 00:45:20 2024 GMT
            Not After : Sep 16 00:45:20 2026 GMT
        Subject: CN=ac260f04-d856-4e9f-9dcc-f16d93c3ab56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:d6:ac:8c:d0:8d:07:f6:77:55:8c:78:17:
                    d6:3e:2c:91:db:7c:69:fa:d5:0c:d0:0e:02:89:ee:
                    e9:3b:e7:ed:29:78:68:20:5c:3c:03:57:0a:9d:b6:
                    74:98:05:6d:3d:c5:4e:39:e7:11:0d:44:37:ea:1a:
                    6f:84:e1:2e:1c:10:46:f4:50:77:f0:a1:a8:d8:ec:
                    63:a4:12:dd:22:d8:df:c5:f9:a4:67:58:50:44:75:
                    91:a3:91:5f:a8:4f:c2:ae:31:a7:63:ad:35:4e:59:
                    fb:e3:65:24:23:c8:9f:c1:8e:6c:eb:f4:53:b3:53:
                    9b:64:a3:9b:98:46:1d:15:05:fa:e7:fa:c8:f0:d1:
                    c1:c1:8a:0a:ad:c4:8b:15:75:f2:e3:06:7e:f7:aa:
                    52:ec:1c:07:a9:02:26:7f:67:83:95:f6:90:dd:c9:
                    13:56:89:86:23:80:50:91:53:a9:6e:d5:05:8c:41:
                    9e:d3:e2:7b:84:a5:05:80:8e:11:35:08:29:c3:37:
                    77:a3:8d:4b:b3:8a:0f:52:06:73:81:cb:16:38:9a:
                    3f:8c:9f:af:c6:fe:fc:01:32:d0:76:69:40:f0:05:
                    e8:09:a1:4a:cb:e2:15:0c:b7:98:5e:48:82:05:a3:
                    87:95:ee:81:40:26:fc:0d:ec:44:be:6b:86:d5:bf:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:21:21:E4:9F:CD:F3:A0:53:A1:8C:0C:1F:BD:01:6B:99:6C:8B:9B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac260f04-d856-4e9f-9dcc-f16d93c3ab56/ac260f04-d856-4e9f-9dcc-f16d93c3ab56.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.129.0/24
                  207.167.126.0/23
                IPv6:
                  2620:11e:f000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27644
                  400635

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:72:26:c9:44:dd:da:6a:d1:e3:54:f5:6e:99:5a:81:43:4d:
         d6:fd:74:62:6b:59:d9:aa:12:a9:e0:1f:d3:ce:78:92:d4:71:
         52:87:eb:65:f2:c9:f7:e9:02:35:f0:a7:d9:9d:9e:8d:5f:43:
         57:49:38:92:e3:09:41:b8:d2:6a:95:c8:c1:f9:3b:b8:41:32:
         35:23:b6:77:25:74:33:e5:0b:55:ed:e9:31:83:fc:43:7c:a1:
         b4:a4:a4:c3:0e:87:42:dc:b5:ca:02:84:0e:6d:33:ba:47:be:
         ca:99:0f:a6:b1:ec:ac:d4:5c:31:61:01:df:2e:e1:88:a8:3e:
         bb:66:47:69:28:b9:2e:ec:27:d8:aa:81:e8:91:e0:96:47:a1:
         e1:31:d2:c9:b7:ef:c1:2c:3c:bf:3f:fa:eb:91:53:e7:00:85:
         ad:62:24:69:e1:62:ad:e0:aa:f9:7a:15:38:c2:cb:df:42:a5:
         ed:0d:54:97:eb:f0:8e:bb:4e:77:fb:f7:e6:0f:6d:43:f5:56:
         35:3f:1d:93:72:49:bc:3e:68:87:69:08:c6:f4:a6:77:8b:fd:
         2a:f9:ce:0f:69:7e:15:1f:0c:f4:93:28:69:7b:c6:52:3f:67:
         08:f3:23:7d:25:29:c2:b7:ee:1d:56:3d:58:ad:6d:a3:d7:02:
         df:86:11:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----