Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer
File:                     dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer (raw, json)
Hash identifier:          nqqOvKH0wEQvKLIw26Q6WEMVmQcEeyRbdegnU+GL+88=
Subject key identifier:   31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584429F725D1AA977A4CB6663E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Dec 2023 01:45:15 +0000
Certificate not after:    Sat 14 Mar 2026 00:45:15 +0000
Subordinate resources:    AS: 398328
                          IP: 23.160.208.0/24
                          IP: 174.136.248.0/24
                          IP: 2602:fd46::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:29:f7:25:d1:aa:97:7a:4c:b6:66:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec 10 01:45:15 2023 GMT
            Not After : Mar 14 00:45:15 2026 GMT
        Subject: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a7:38:77:bc:f4:74:24:ad:07:4c:31:b9:4c:
                    15:fa:1b:13:f9:a1:51:f6:05:b1:ac:55:c7:fc:40:
                    ec:f1:8f:e8:63:85:a6:4f:0d:7b:7b:5c:dd:d9:71:
                    51:a4:46:39:5a:ed:3e:2a:79:e6:6e:9b:b3:d0:94:
                    c9:73:40:af:35:df:8d:d7:bd:fc:f7:25:aa:01:f6:
                    62:a3:af:aa:ce:06:ca:9a:65:6f:55:0a:7a:6c:55:
                    06:f3:2a:6c:0d:51:e9:25:54:15:e4:cd:f6:4f:84:
                    bf:0a:7c:50:bb:52:81:88:7b:ea:67:b8:27:59:58:
                    bb:0c:fd:88:d8:e4:1f:95:90:b7:c4:9b:b6:67:aa:
                    57:57:2b:e3:a4:0e:1d:61:6c:7f:3c:48:1b:59:e5:
                    9c:37:4e:1a:e7:2d:16:b2:df:97:d0:92:02:85:11:
                    98:2e:80:98:d6:58:ad:7f:91:37:40:60:ad:c1:e2:
                    f8:4a:e4:8c:53:43:69:0f:08:38:ee:46:6d:1c:98:
                    c9:2a:cb:47:6e:35:38:02:c1:a3:b2:cf:ea:0b:89:
                    a0:2b:29:ee:f0:6c:6e:42:18:d4:df:99:ca:c2:6d:
                    93:ef:0c:ee:a8:f3:a4:1c:c4:c8:14:e0:bc:aa:9c:
                    90:7b:53:5f:2b:dc:34:5c:67:2e:d1:9f:db:67:76:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.208.0/24
                  174.136.248.0/24
                IPv6:
                  2602:fd46::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398328

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:31:83:96:1e:35:1a:78:3c:62:e0:44:43:8d:ec:92:69:e5:
         53:69:45:9e:72:53:62:de:f8:1f:aa:75:85:06:b4:d0:c6:ab:
         ac:64:1b:61:2e:98:26:05:26:66:bf:28:50:57:d5:cb:f5:12:
         6b:aa:c8:59:d7:94:58:b2:de:47:78:6f:50:b2:20:4b:0e:bb:
         a0:fb:61:ca:5a:cc:fe:e7:02:83:cc:23:ed:89:73:ac:6c:c5:
         33:89:1d:6e:52:2c:95:6d:56:73:aa:bc:18:d7:49:38:26:ca:
         64:df:38:43:33:8d:f8:ee:43:7f:da:88:de:7a:72:16:85:84:
         55:8f:65:51:f9:6b:57:a3:75:ee:e5:73:58:f4:81:9a:88:3a:
         a5:99:1e:f0:85:ec:b1:65:14:bb:81:2b:8c:01:4f:b2:f9:08:
         a1:40:a2:ad:22:7e:e2:5a:cf:63:dc:af:ad:c5:57:f1:c2:bb:
         b2:ac:de:dd:61:25:be:f8:69:af:7e:24:ba:40:ca:71:10:1a:
         c7:86:df:13:66:3b:5c:02:8c:32:2f:ae:63:26:87:1e:24:df:
         dc:1a:85:7e:9a:2b:f2:97:bc:7e:4e:42:38:57:cd:b1:54:3a:
         cb:d1:ea:dc:28:98:2c:51:59:3c:46:ad:ae:24:b8:c4:f0:f5:
         26:cc:d2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----