Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584.cer
File:                     d7e20303-2390-47a7-b89c-842367be4584.cer (raw, json)
Hash identifier:          wY3UwC+UwcAiJ53aOHhlFB8/v9RW+RQ1BGKrM8Kn+js=
Subject key identifier:   38:30:39:91:69:F1:77:78:F8:70:56:79:18:39:02:C2:21:86:48:99
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584312746A64A658043652631D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 31 Aug 2023 22:51:19 +0000
Certificate not after:    Tue 24 Jun 2025 19:06:39 +0000
Subordinate resources:    AS: 54476
                          IP: 23.175.192.0/24
                          IP: 2604:a340::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:12:74:6a:64:a6:58:04:36:52:63:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Aug 31 22:51:19 2023 GMT
            Not After : Jun 24 19:06:39 2025 GMT
        Subject: CN=d7e20303-2390-47a7-b89c-842367be4584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9c:f1:63:4a:8b:ad:65:68:0a:da:da:8d:7f:
                    5e:28:ca:0e:27:da:1a:0f:fe:1d:b8:7b:50:1d:90:
                    8e:84:a1:5f:af:72:44:d6:7f:18:75:27:87:df:8b:
                    e5:6c:a0:cc:63:74:61:e7:06:be:eb:b3:2c:6e:10:
                    01:d7:1e:7b:ef:78:72:e5:4b:ef:9f:64:0e:3d:6c:
                    0c:9f:be:20:10:2b:0d:33:f6:ae:13:e6:b9:f5:c5:
                    15:a4:5a:73:89:b7:17:17:87:ab:b7:bd:cd:39:d9:
                    4a:10:72:61:57:19:fa:82:bc:37:0a:e6:48:8d:23:
                    b6:12:59:ed:0a:08:de:9c:71:09:4c:b4:eb:85:ab:
                    44:90:36:71:b0:f7:0e:ce:bc:1a:2c:e9:14:09:20:
                    b3:34:60:5d:79:d5:2e:26:60:3d:87:a2:a0:11:29:
                    32:23:fb:0d:53:15:2c:ec:e6:b9:37:0d:b3:51:e7:
                    8e:04:65:f5:80:b2:c5:33:1d:76:a1:f6:fc:4b:52:
                    7b:01:51:26:25:07:56:f8:39:f4:96:11:38:d3:d8:
                    c2:1a:ac:5a:a3:e8:03:63:b5:b7:74:95:97:00:2f:
                    6a:47:ba:a9:87:19:d2:ba:a1:6b:a8:92:68:b4:21:
                    0b:f5:fa:34:1d:74:14:91:69:0a:b8:28:25:38:8f:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:30:39:91:69:F1:77:78:F8:70:56:79:18:39:02:C2:21:86:48:99
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/d7e20303-2390-47a7-b89c-842367be4584.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.192.0/24
                IPv6:
                  2604:a340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54476

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:3c:c7:af:ab:1b:45:3f:c9:15:86:06:6a:31:2a:56:b7:f3:
         59:24:09:a3:b6:b5:a1:b6:97:3b:74:bc:56:76:27:46:a1:3e:
         36:dc:e4:3d:40:cf:39:d2:57:64:0b:3b:45:33:eb:2e:69:72:
         5e:bc:37:ce:db:2d:ab:6e:30:b0:ae:fe:cb:9c:6e:9c:cc:a0:
         60:56:51:8a:96:51:5f:7e:dc:52:11:89:cb:47:d1:e3:c3:f5:
         92:b3:c0:18:96:49:9f:a3:16:f2:c9:57:e8:da:d1:af:2e:6c:
         c4:6c:59:2f:1c:f3:0c:2c:30:fc:f4:10:bb:b4:1f:b5:77:b6:
         57:db:d3:27:19:a7:64:8d:aa:cb:fe:bb:6c:e8:b6:3a:7a:cb:
         b8:c8:fa:8f:56:db:1d:c0:ce:80:45:a7:e4:cf:ff:ce:19:d5:
         13:d0:0a:37:93:27:9f:b4:0d:df:6e:51:1d:8d:e6:c3:90:87:
         b9:18:6a:16:4a:6f:51:bf:e0:a8:81:f6:b0:dc:d1:a3:23:c8:
         76:f9:85:bb:01:e2:c1:15:79:a3:52:88:ba:eb:a1:09:ed:ec:
         2d:57:fd:0f:98:6a:e0:fe:e1:c4:03:0f:96:5a:a2:fa:44:ff:
         e9:70:5c:21:d9:73:61:08:13:48:48:ef:ab:28:81:e7:95:fd:
         76:56:ff:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----