Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer
File:                     cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer (raw, json)
Hash identifier:          jpw+IJveNt3HbR/Ap5PqJP10PnW3G2MvIluPUBeJmSc=
Subject key identifier:   BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584488E27461046BFB59F4C9A9C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 13 Jan 2024 01:45:21 +0000
Certificate not after:    Fri 17 Apr 2026 00:45:21 +0000
Subordinate resources:    AS: 46149
                          IP: 208.96.144.0/20
                          IP: 2602:fc25::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:88:e2:74:61:04:6b:fb:59:f4:c9:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jan 13 01:45:21 2024 GMT
            Not After : Apr 17 00:45:21 2026 GMT
        Subject: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b7:83:22:14:4e:4c:2f:fd:11:2b:8c:3d:11:
                    19:06:0e:7f:77:39:06:e9:14:82:82:8d:dc:11:03:
                    9d:c8:39:ee:cc:e3:bd:07:2b:50:b6:60:d3:b0:e4:
                    78:58:d7:9e:0a:5b:08:c6:5a:9f:dc:76:df:df:b9:
                    df:10:c2:c3:00:3c:69:88:4c:2b:25:48:c9:11:86:
                    b7:94:43:fc:f2:db:34:44:07:28:ef:3a:b9:6f:c6:
                    83:33:dd:92:7c:2f:5c:1c:2d:34:fc:4f:9b:33:53:
                    e1:cd:0f:14:21:b2:42:04:27:9f:a6:63:5c:25:74:
                    c9:e8:90:aa:58:68:f9:73:59:43:4f:0b:92:c8:d3:
                    6e:02:38:ba:a1:b1:4a:2d:ba:d8:ff:6a:5f:0e:bf:
                    4a:11:7e:f7:0b:7f:bb:71:68:b6:9a:2f:00:6c:2f:
                    2f:b2:bd:2e:a3:9d:07:8a:b8:68:3e:60:3b:59:b0:
                    bc:16:49:1a:ea:d9:01:27:95:16:e0:0a:3f:81:64:
                    15:47:71:db:dd:6e:ff:ff:1a:c5:45:09:60:70:34:
                    c8:ae:ca:1b:0e:7f:2b:a7:fb:91:10:d1:52:5f:19:
                    b9:bc:22:ba:83:15:3e:b9:bf:6b:83:dc:72:a3:30:
                    04:40:07:ec:52:ef:92:d5:31:63:a4:af:75:37:a3:
                    83:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.96.144.0/20
                IPv6:
                  2602:fc25::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46149

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:76:5d:31:fb:68:ff:64:f9:24:75:d7:1b:f2:11:ae:13:49:
         8c:d6:61:ce:b3:9d:ca:2e:d3:c7:25:0e:5d:6c:8e:cb:c1:cc:
         7c:96:ca:c5:4d:25:ff:8b:8e:59:b9:02:e0:89:77:7a:7e:df:
         c7:ae:7f:b6:3a:48:74:32:77:45:eb:92:37:d7:f3:b3:93:64:
         4d:3c:78:18:74:a5:5d:0f:db:2f:f3:f2:94:1b:17:d1:9b:c8:
         da:ee:1b:07:86:53:6a:6a:d6:7a:12:8c:ac:a0:5c:77:48:e6:
         2c:cc:18:c5:a7:60:0b:00:68:e6:50:45:49:b3:d9:58:da:99:
         4a:1a:12:52:52:41:10:54:7b:77:15:1f:70:3e:e5:ce:fa:b6:
         31:59:9e:28:07:31:f1:05:18:56:16:ae:74:13:f8:72:0b:dd:
         b8:34:20:5f:94:27:94:be:4b:36:83:0f:ef:28:b7:58:d0:34:
         17:41:42:11:75:b2:2b:ae:a4:1c:e3:6d:64:51:ab:f8:ac:67:
         78:d2:52:cb:b0:8b:f9:a7:b7:4a:0c:ba:63:93:84:d7:18:19:
         ee:77:53:91:80:6b:fe:a9:ac:c4:29:3c:1a:00:00:8f:5f:77:
         bb:21:5d:b1:d7:29:f1:3c:5b:09:e0:cb:c1:86:0b:52:7d:af:
         88:09:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----