Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57.cer
File:                     b194e538-e4ea-40c8-9645-c46a9d5dfe57.cer (raw, json)
Hash identifier:          986MAJDg0NAIzba7PVUR4HvvowgpwKAUI2FE82EjV8U=
Subject key identifier:   9E:B0:C7:9B:AA:D3:E0:97:9D:55:0D:F8:2B:6A:03:73:55:BE:34:1F
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858448082634E6FAEAAA9738FA3C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/b194e538-e4ea-40c8-9645-c46a9d5dfe57.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 10 Jan 2024 01:45:19 +0000
Certificate not after:    Tue 14 Apr 2026 00:45:19 +0000
Subordinate resources:    IP: 2604:a4c0::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:80:82:63:4e:6f:ae:aa:a9:73:8f:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jan 10 01:45:19 2024 GMT
            Not After : Apr 14 00:45:19 2026 GMT
        Subject: CN=b194e538-e4ea-40c8-9645-c46a9d5dfe57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:51:76:0a:02:f1:f5:29:6e:31:e8:12:84:a0:
                    d3:92:86:ab:f7:64:5b:af:e5:a7:3d:07:f7:6c:19:
                    19:3a:c0:de:c6:22:3d:29:7e:df:14:e9:2e:f2:4e:
                    8c:82:6d:7a:4e:6c:ad:01:e0:57:0d:35:cd:8c:d5:
                    37:b2:e2:83:bd:50:25:57:f7:ec:15:f8:f4:e2:6b:
                    bb:46:24:7b:a4:e8:61:97:23:fb:21:9f:9c:92:6e:
                    c4:e4:ab:09:90:4f:c8:97:f0:4f:aa:db:26:21:bf:
                    61:a1:20:61:b9:19:2d:43:fc:9c:dd:1e:f1:8d:eb:
                    93:2a:d6:fb:f9:92:65:b1:ef:64:17:79:62:a8:5f:
                    a5:8b:1a:46:a4:55:59:02:05:c5:74:aa:b1:93:9d:
                    51:8c:3b:f6:f1:b1:f2:f1:79:b3:ad:c9:d5:11:27:
                    63:d8:82:d0:0f:39:2f:5b:7b:0f:56:de:c4:d4:7d:
                    76:d8:16:79:67:d4:9e:6a:ec:09:d3:6e:84:83:bb:
                    4b:7d:00:b2:73:60:7b:6f:28:fe:40:97:17:52:06:
                    1a:bb:2a:ad:47:a6:dc:f1:47:32:45:be:38:ca:a3:
                    30:7f:04:b6:1d:af:45:a0:32:fc:8f:8d:e8:09:17:
                    e5:bb:ac:f0:a1:5b:f1:28:c6:e5:3a:4e:2f:76:a7:
                    8b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B0:C7:9B:AA:D3:E0:97:9D:55:0D:F8:2B:6A:03:73:55:BE:34:1F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/b194e538-e4ea-40c8-9645-c46a9d5dfe57.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:a4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:06:17:a9:9f:0f:b0:99:b5:cb:39:0a:c3:68:5b:99:7f:83:
         86:f1:09:94:8b:29:22:28:e4:7d:a6:68:64:8b:a9:5a:84:37:
         76:a7:ac:92:75:55:45:50:1d:9a:5d:75:5f:45:da:6d:c0:38:
         e9:bd:53:95:80:67:ef:16:0f:94:dd:ed:96:b4:9e:ad:31:e0:
         14:5f:9c:cc:38:f9:ee:da:fa:db:88:5c:7b:65:89:ce:0e:12:
         0b:4f:eb:2b:11:3b:b9:68:a6:56:41:08:61:e1:a5:e7:a8:42:
         33:29:90:15:4f:e2:31:2d:e0:44:b0:71:52:c7:01:9a:75:3e:
         94:6c:9e:8d:dd:15:53:4a:d7:df:a3:f0:af:22:87:80:39:03:
         56:ec:25:c1:b4:6d:3b:1d:8f:f2:bd:fc:d9:cd:48:87:cc:f1:
         cc:d1:65:29:82:a2:1a:91:ca:53:6a:1a:83:cc:87:25:4d:ff:
         12:0f:58:78:ac:7d:ee:42:8e:5c:1a:43:42:69:78:51:c0:7b:
         fa:5a:a8:4c:56:82:5b:87:ed:6c:e2:bc:5e:1b:7b:d0:58:ea:
         79:36:08:e2:bf:90:27:80:53:55:99:f7:7c:35:30:41:5f:fa:
         58:d2:49:8c:87:83:4d:82:82:bc:21:db:35:2d:41:11:c8:f1:
         8e:35:b1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----