Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438.cer
File:                     de848e16-b429-4505-9234-f6d889fd1438.cer (raw, json)
Hash identifier:          rL4e6uQkFcydwvMr+8uUqQdeVjPqcp3YsisZPPhSZUI=
Subject key identifier:   1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858465700EF816559F8956EEB9E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Jun 2024 14:30:13 +0000
Certificate not after:    Wed 31 Dec 2025 01:45:22 +0000
Subordinate resources:    AS: 399820
                          IP: 23.146.184.0/24
                          IP: 64.49.8.0/22
                          IP: 204.137.14.0/24
                          IP: 2602:fc2f::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:57:00:ef:81:65:59:f8:95:6e:eb:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jun 26 14:30:13 2024 GMT
            Not After : Dec 31 01:45:22 2025 GMT
        Subject: CN=de848e16-b429-4505-9234-f6d889fd1438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:8e:ff:77:19:d6:e0:c3:6b:b4:f7:39:d6:
                    6b:4e:c5:26:bd:50:fe:bb:d9:0c:20:7c:c1:af:84:
                    b1:36:55:7e:2a:7f:4b:49:34:88:87:bc:48:2e:c2:
                    c4:4b:70:e2:ca:0d:11:de:17:a9:bf:67:9d:d9:71:
                    4a:57:46:3e:6d:01:4e:38:df:92:c6:91:b4:85:ec:
                    50:04:93:56:c9:93:09:b9:04:c1:ec:c7:83:1d:12:
                    c4:7f:03:08:ce:be:0e:c0:2a:f6:20:5e:7f:c2:99:
                    19:2c:85:8e:e1:bc:e3:d7:7c:11:75:af:f4:c8:45:
                    53:c0:ff:b6:b0:1c:49:75:27:e4:70:48:f2:41:da:
                    69:2d:22:bb:5e:32:d7:4c:5b:27:a7:d1:ee:68:7c:
                    12:32:c3:2f:d3:97:3a:b4:a7:73:dd:f6:67:5c:25:
                    44:7c:3d:6f:3e:35:a3:23:8c:b8:6f:76:1e:a7:83:
                    a1:5d:13:83:1c:6d:ed:0d:38:71:5e:02:30:4f:38:
                    81:98:df:9a:d2:9e:b1:11:32:d9:41:6c:8f:6e:f7:
                    29:dd:b1:5e:b1:35:7d:a1:ad:d6:c9:89:43:0a:ba:
                    a2:79:5e:66:94:1e:c2:0a:08:5c:0c:90:1b:d4:d1:
                    c3:19:c0:3c:21:69:a2:f3:fa:77:c5:91:1b:ff:17:
                    d3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C9:D0:97:53:6B:94:8A:2B:83:C0:DA:28:28:65:9D:EB:62:67:E4
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de848e16-b429-4505-9234-f6d889fd1438/de848e16-b429-4505-9234-f6d889fd1438.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.184.0/24
                  64.49.8.0/22
                  204.137.14.0/24
                IPv6:
                  2602:fc2f::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399820

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:5c:71:43:39:00:ec:db:83:2b:b1:34:f7:3f:a3:2f:22:2b:
         ae:bb:d8:ed:3e:7a:67:5d:db:6c:f7:1a:5e:46:ef:6f:46:4b:
         bd:8b:ae:1d:c2:7c:3f:4e:74:1a:89:37:15:c9:b8:a7:0c:29:
         95:ef:3c:36:c5:d5:be:a0:2a:02:4d:8f:fe:05:e7:dd:76:74:
         89:d0:a5:ce:8f:bd:09:ab:67:d4:64:18:5f:01:b2:de:e5:ed:
         62:cb:07:bf:2a:34:f0:94:07:65:66:4d:4a:3d:6a:8a:6c:b4:
         af:93:93:62:87:7f:99:e7:75:a5:d4:3a:d6:84:77:3e:c7:3c:
         51:7f:2a:97:7a:39:4d:9b:8e:51:cf:d7:1e:4c:ca:40:c1:48:
         5f:f7:89:13:d0:3d:6e:7c:ec:86:6d:4b:ef:d6:8e:7a:69:ed:
         13:ef:2c:cc:10:9a:70:69:57:51:18:a1:c0:0f:94:b5:71:d7:
         cd:f7:ad:cf:5a:ed:04:dc:b4:0a:23:53:2e:7e:54:7e:7b:ab:
         21:83:df:1d:fb:5f:82:13:f0:a4:97:d8:ca:f1:52:5f:4b:50:
         9b:94:b1:df:78:9d:2c:73:01:fb:60:26:cd:3d:07:da:e5:e0:
         7d:cb:f5:9f:a5:7f:99:84:76:9a:66:08:8d:4d:46:eb:b9:22:
         a5:51:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----