Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer
File:                     dd638a66-157d-4b37-b487-c2b5f4dbe940.cer (raw, json)
Hash identifier:          58PF82F2fdjkUhAEyPXQaEar4Qcg6F+1PUNcd8dVoms=
Subject key identifier:   F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285843F22179650E26461BB5359500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 20 Nov 2023 01:45:16 +0000
Certificate not after:    Sun 22 Feb 2026 01:45:16 +0000
Subordinate resources:    AS: 46192
                          IP: 144.86.200.0/22
                          IP: 2620:9a:a000::/48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f2:21:79:65:0e:26:46:1b:b5:35:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Nov 20 01:45:16 2023 GMT
            Not After : Feb 22 01:45:16 2026 GMT
        Subject: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:a4:f1:98:51:e6:5c:46:91:10:45:e9:c9:
                    8a:df:51:74:33:d5:82:47:05:9f:df:db:2c:ce:63:
                    7b:96:89:8c:49:e1:57:c2:4c:be:c0:6b:4f:e8:35:
                    17:7a:b1:af:70:d3:4e:5d:99:89:93:a2:d2:52:cf:
                    d1:e8:d7:1c:87:10:06:b0:8e:3d:62:f1:01:38:88:
                    47:06:f3:dc:bf:5f:3c:a4:1a:cb:6b:28:af:18:63:
                    97:4a:7a:a0:df:bf:fb:cc:a6:57:c5:a0:a1:be:0a:
                    13:32:27:71:9c:ff:1d:d5:8b:b9:eb:de:72:f7:f3:
                    64:bb:79:01:87:09:81:fa:a2:0e:e9:9c:52:69:32:
                    a6:32:25:ea:d4:99:46:e2:65:87:f4:8f:08:c6:2d:
                    1b:70:dc:e2:01:9e:43:da:3f:93:c3:c8:4d:57:50:
                    d5:36:2e:13:00:1f:ad:6d:c3:52:3a:ff:36:9c:d2:
                    37:1f:90:7f:19:88:30:c8:aa:17:4a:d4:94:41:ed:
                    17:57:53:95:0f:47:e4:47:14:50:73:ee:2c:a7:4e:
                    d3:87:7a:57:54:93:b5:af:ea:9c:79:5c:66:73:c8:
                    9c:a0:06:20:7c:51:4a:99:4c:09:d6:51:49:fe:3e:
                    60:56:a1:6c:cf:6c:e9:b3:e5:1d:38:89:a2:66:a8:
                    dc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.86.200.0/22
                IPv6:
                  2620:9a:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46192

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ed:94:1f:55:ad:e6:5a:d5:3e:2f:76:0c:6a:07:98:60:8e:
         d7:c4:6a:d9:69:8c:16:7f:85:cd:5b:b1:18:3f:55:4d:b9:ab:
         40:97:a5:84:30:77:a4:7b:4f:68:dd:ac:f9:ea:1d:23:98:c8:
         64:4d:74:ea:a0:88:2c:e0:8d:c1:7e:27:55:12:f9:35:e9:ba:
         ca:be:a5:cb:be:00:90:04:db:3e:59:84:78:b2:5e:95:7e:6a:
         0f:80:09:64:a1:eb:aa:bd:16:c3:80:00:e0:99:20:0c:7a:2d:
         ca:7e:bf:fe:98:14:a5:6b:5a:cf:de:6e:bb:df:50:df:a2:13:
         95:0a:dd:29:68:6c:27:d2:3e:98:5b:75:6e:68:4f:2b:b8:37:
         53:5c:31:cc:3d:63:dc:e0:af:d8:2c:3f:2f:68:99:ce:86:37:
         50:c3:70:b4:ac:87:06:18:82:a4:bd:48:6f:f7:ba:49:b8:f2:
         f1:ee:72:0b:81:7b:eb:b9:ba:12:a1:54:fd:67:e0:22:b4:e6:
         35:c9:3e:d7:0e:4e:83:66:02:d1:07:9c:05:75:4c:90:d4:63:
         8a:72:40:81:45:c3:18:f3:5f:3a:91:5d:cd:15:d8:81:69:6f:
         e2:39:21:86:4d:c6:92:10:85:9f:a1:fc:97:c1:02:57:3f:2c:
         6e:50:25:37
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----