Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b.cer
File:                     d455139a-f627-4743-8284-7fbd2f76dd8b.cer (raw, json)
Hash identifier:          1OpWKcZ3Y5AeeXU9QRQpCzci0YgnGo4iFR2adf9FE3A=
Subject key identifier:   05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584456A2171CEB901DD86DC62800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 26 Dec 2023 01:45:15 +0000
Certificate not after:    Mon 30 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 53542
                          IP: 199.255.240.0/22
                          IP: 2620:86:6000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:56:a2:17:1c:eb:90:1d:d8:6d:c6:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec 26 01:45:15 2023 GMT
            Not After : Mar 30 00:45:15 2026 GMT
        Subject: CN=d455139a-f627-4743-8284-7fbd2f76dd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:dc:c4:9b:b2:7f:a3:fd:97:45:68:c1:3c:
                    aa:94:b3:ca:23:6a:13:16:bb:0f:0c:6e:f8:14:28:
                    a8:75:9b:30:3c:d8:97:9d:64:34:85:23:71:df:32:
                    b3:3e:d4:5f:5b:9d:8c:c9:be:47:23:a5:85:c2:c8:
                    05:9d:16:0b:ca:35:56:48:a2:a8:89:45:e7:2b:ac:
                    1c:84:b1:7c:9d:27:d6:46:5c:fd:c5:fd:da:d1:97:
                    3b:9a:07:de:d0:d9:34:cf:af:85:88:96:0b:58:e0:
                    94:f1:0a:64:04:b7:07:97:2c:77:ba:75:a7:6f:63:
                    81:10:64:4e:24:ec:0e:02:94:60:fa:7d:30:da:de:
                    c6:f1:08:db:ac:3e:e2:4e:1f:05:0f:d5:73:a4:b9:
                    2e:dd:0d:a5:c2:72:e0:64:5d:32:b9:b2:b0:65:f1:
                    72:ed:92:ac:9e:da:f6:44:72:96:06:e8:c1:3f:87:
                    9e:32:de:ef:b3:3e:46:54:86:7a:ba:b6:69:14:a4:
                    17:d5:5d:31:35:6c:67:4f:6b:e6:7a:c4:8c:46:28:
                    b6:3b:0e:fd:e2:a5:0a:79:57:4e:18:07:77:23:5d:
                    c2:80:72:d6:bd:8f:a6:47:4a:7d:1f:39:c7:d5:b2:
                    3b:cd:b3:a6:ac:8c:da:4c:8c:9e:78:93:74:59:cc:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:07:B2:96:74:08:2D:02:EF:EC:F8:37:85:3C:62:40:1C:25:37:AA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d455139a-f627-4743-8284-7fbd2f76dd8b/d455139a-f627-4743-8284-7fbd2f76dd8b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.240.0/22
                IPv6:
                  2620:86:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53542

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:98:94:8b:a9:7c:3e:c8:5b:87:5c:38:37:f9:fb:8b:42:6c:
         3c:b5:21:36:32:4a:c5:ac:b0:59:40:90:84:70:4d:74:3a:ab:
         2e:1f:6d:e0:a9:70:6a:ae:01:31:38:33:1b:cb:b2:1e:d3:ab:
         c2:1e:ea:f4:e8:3a:db:63:35:fb:a5:63:d5:df:ba:ab:13:84:
         fc:46:5b:70:97:d3:82:32:d0:9f:db:45:7b:5a:22:f7:2c:7b:
         ab:10:73:20:b5:bb:6f:a5:64:e4:24:8d:60:9f:a0:fa:4f:d3:
         82:cc:f4:25:40:86:c4:cb:ba:2f:c5:e9:e9:af:64:4d:78:01:
         cd:ed:2d:98:f9:fc:26:bc:bc:03:c9:97:93:5c:c2:1c:fc:49:
         6e:8e:82:bd:03:0e:d2:e4:15:b1:f4:75:a2:c4:47:15:55:43:
         fd:14:6e:60:d4:c2:2f:3d:62:06:17:a3:78:64:1e:8a:ba:9c:
         98:af:9a:99:f2:64:7b:74:d2:cb:00:f9:2e:9b:21:81:5e:21:
         00:4f:14:ad:f7:ff:ca:f2:0a:63:87:69:58:5e:ea:52:45:62:
         11:64:53:1e:f8:08:b6:67:b0:17:92:85:f6:c8:74:e0:c4:5b:
         17:ab:3f:f3:1a:c6:15:0d:b2:a6:93:cf:29:2c:6a:58:ee:67:
         18:88:46:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----