Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer
File:                     dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.cer (raw, json)
Hash identifier:          JVe1FV6S8AEpBY9mEe76aPPMOReOTPmrAgQr3jE+OiE=
Subject key identifier:   0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285845DD5C1E813D5B5DF8CFBAE800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 14 May 2024 00:45:19 +0000
Certificate not after:    Mon 17 Aug 2026 00:45:19 +0000
Subordinate resources:    AS: 22215
                          IP: 198.177.154.0/24
                          IP: 204.52.252.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dd:5c:1e:81:3d:5b:5d:f8:cf:ba:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 14 00:45:19 2024 GMT
            Not After : Aug 17 00:45:19 2026 GMT
        Subject: CN=dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:19:97:3d:9e:70:5e:2b:82:aa:f7:8f:77:
                    5c:d0:b1:a7:05:5c:39:94:47:34:3b:46:1f:29:75:
                    ea:81:e4:7a:5a:58:c1:66:46:c4:69:3f:cd:9a:21:
                    52:01:eb:6c:63:f9:6e:bb:d0:51:fe:ba:03:1a:56:
                    58:20:75:36:dd:6d:0d:96:f1:ca:74:be:de:aa:0d:
                    b2:e3:c4:be:ea:ec:91:15:b5:5b:d6:99:e8:b5:03:
                    49:da:a2:af:ee:4e:10:49:b7:cf:45:fb:a8:e5:a9:
                    47:73:31:a3:28:5f:1c:f1:7a:46:ab:38:ba:c9:6e:
                    68:ad:f5:3c:ea:1f:b8:f7:4c:64:c8:96:4d:2a:a3:
                    1a:e5:9e:2a:8f:e4:1a:5f:7b:ca:b0:55:9a:fa:6a:
                    06:b9:95:cf:06:20:c4:46:10:c3:58:c7:53:e7:3e:
                    fa:fb:b6:98:10:45:ce:fc:41:26:00:b6:34:a5:3d:
                    2d:db:1d:09:be:c6:5d:79:09:57:cd:2e:53:78:98:
                    dc:38:86:e5:0f:97:a3:d1:07:a5:d7:ed:29:74:bd:
                    ee:df:8f:a5:66:46:a7:2c:ee:ac:07:7e:db:3c:60:
                    eb:50:11:6b:95:dc:08:b6:da:d1:3e:ed:03:d9:22:
                    66:d8:50:da:2e:e3:dd:8e:7a:92:f5:6f:61:8d:6e:
                    e6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4D:D1:2F:80:E5:2F:D9:F9:0A:B6:5D:8F:FF:C0:B1:2C:66:58:B5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1/dcb0a597-f6eb-4c97-aa6c-36d04bd7c2d1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.154.0/24
                  204.52.252.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22215

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:13:18:43:7e:05:23:a2:9b:e6:dc:34:23:fd:1e:46:86:90:
         fc:dc:d7:f3:26:cb:a2:cf:54:a6:d6:1e:da:98:7d:07:fe:2d:
         c4:d0:c2:3d:7c:71:78:c9:34:b4:da:83:29:f3:a6:17:8a:15:
         ea:54:1d:b7:0b:36:82:a9:62:4b:48:b2:67:bc:93:cc:9a:f7:
         19:dc:25:c6:e1:a2:94:13:c1:f8:13:70:42:aa:2e:cd:1b:55:
         79:2c:95:87:ac:ea:58:98:7a:0c:06:a2:44:71:e2:da:15:91:
         d9:25:e7:8a:e2:bb:7e:42:9b:37:1e:d3:86:2e:09:0e:d3:af:
         3c:00:02:0f:c4:dd:3a:24:01:a1:09:70:a5:76:5b:b7:5c:ac:
         fd:11:30:18:a2:ca:97:22:a5:7f:14:82:bb:81:d1:bf:7f:5c:
         50:25:60:ad:6d:91:43:53:1f:60:1c:7f:4a:0b:87:59:60:d3:
         0d:6f:4c:db:c6:97:c2:2f:36:57:06:70:70:7c:51:03:c1:96:
         73:0b:dd:e7:27:52:84:fd:0a:e8:c5:fa:ba:16:a3:dc:6f:23:
         1f:85:d6:b7:72:c2:30:9f:c2:f2:9b:95:d0:8d:49:03:79:e5:
         d5:77:f7:b8:24:ae:9f:8d:36:cb:f5:52:34:0b:e9:41:a1:5b:
         30:8e:bc:65
-----BEGIN CERTIFICATE-----
MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEXdXB6BPVtd+M+66AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDUxNDAwNDUxOVoXDTI2MDgxNzAwNDUxOVowLzEtMCsGA1UEAxMk
ZGNiMGE1OTctZjZlYi00Yzk3LWFhNmMtMzZkMDRiZDdjMmQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzUZlz2ecF4rgqr3j3dc0LGnBVw5lEc0O0Yf
KXXqgeR6WljBZkbEaT/NmiFSAetsY/luu9BR/roDGlZYIHU23W0NlvHKdL7eqg2y
48S+6uyRFbVb1pnotQNJ2qKv7k4QSbfPRfuo5alHczGjKF8c8XpGqzi6yW5orfU8
6h+490xkyJZNKqMa5Z4qj+QaX3vKsFWa+moGuZXPBiDERhDDWMdT5z76+7aYEEXO
/EEmALY0pT0t2x0JvsZdeQlXzS5TeJjcOIblD5ej0Qel1+0pdL3u34+lZkanLO6s
B37bPGDrUBFrldwIttrRPu0D2SJm2FDaLuPdjnqS9W9hjW7mMwIDAQABo4IEIDCC
BBwwHQYDVR0OBBYEFApN0S+A5S/Z+Qq2XY//wLEsZli1MIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k
Y2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJkN2MyZDEvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RjYjBhNTk3LWY2ZWItNGM5Ny1h
YTZjLTM2ZDA0YmQ3YzJkMS9kY2IwYTU5Ny1mNmViLTRjOTctYWE2Yy0zNmQwNGJk
N2MyZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH
AQcBAf8EFjAUMBIEAgABMAwDBADGsZoDBADMNPwwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICVscwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEANBMYQ34FI6Kb5tw0I/0eRoaQ/NzX8ybLos9UptYe
2ph9B/4txNDCPXxxeMk0tNqDKfOmF4oV6lQdtws2gqliS0iyZ7yTzJr3GdwlxuGi
lBPB+BNwQqouzRtVeSyVh6zqWJh6DAaiRHHi2hWR2SXniuK7fkKbNx7Thi4JDtOv
PAACD8TdOiQBoQlwpXZbt1ys/REwGKLKlyKlfxSCu4HRv39cUCVgrW2RQ1MfYBx/
SguHWWDTDW9M28aXwi82VwZwcHxRA8GWcwvd5ydShP0K6MX6uhaj3G8jH4XWt3LC
MJ/C8puV0I1JA3nl1Xf3uCSun402y/VSNAvpQaFbMI68ZQ==
-----END CERTIFICATE-----