Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer
File:                     df1c4d20-5b5b-4073-83b7-529a82c159fd.cer (raw, json)
Hash identifier:          Nf25sFTamourj1BjWQtS2JXATFKo1d4mN17U8qgOikw=
Subject key identifier:   36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285844166C5BC8D633CC2CED6DAF90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 03 Dec 2023 01:45:15 +0000
Certificate not after:    Sat 07 Mar 2026 01:45:15 +0000
Subordinate resources:    AS: 22036
                          AS: 25854
                          AS: 46250
                          AS: 46271
                          AS: 393803
                          IP: 74.200.96.0/19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:16:6c:5b:c8:d6:33:cc:2c:ed:6d:af:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec  3 01:45:15 2023 GMT
            Not After : Mar  7 01:45:15 2026 GMT
        Subject: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:30:c3:e0:68:de:94:83:2d:c0:5c:28:8c:89:
                    0c:d4:d1:91:02:c5:21:40:b1:ba:7c:3a:d1:e6:77:
                    f3:9f:4d:53:8b:06:d2:e5:12:88:9c:6a:b1:d4:39:
                    87:c4:e9:26:dd:80:34:c6:80:43:40:61:51:c2:ad:
                    d1:aa:22:3d:d9:8a:49:f5:3e:0c:fa:d1:3d:5e:29:
                    3c:6e:fd:92:72:d9:54:24:33:5e:12:7e:26:f7:04:
                    58:f2:40:4d:39:1d:00:ea:ec:78:a9:57:a0:57:81:
                    84:66:c9:5c:ff:b8:a4:24:7f:9d:e5:c2:de:15:ff:
                    f7:49:91:11:80:8d:4d:2d:09:7a:f3:e9:1e:6c:85:
                    54:5c:f6:d7:30:80:95:92:4a:c4:92:24:02:10:75:
                    b8:f0:11:c4:a5:a2:18:35:60:a5:06:c7:84:10:a4:
                    1f:d0:a7:f4:f9:21:61:31:9a:d6:14:eb:83:48:26:
                    7f:4d:4f:78:0f:e8:df:60:63:fb:68:48:13:7c:c9:
                    ff:7e:57:62:7d:49:5b:f9:1e:bc:61:c8:45:ce:66:
                    16:e9:de:d7:1b:2f:58:22:b5:2c:0a:5a:f6:6e:b9:
                    57:ea:3e:06:86:a2:08:c9:0d:2d:7a:6a:f1:43:c3:
                    dc:c7:b5:4f:df:0c:39:e2:fd:6e:12:2a:2e:4c:c8:
                    11:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.200.96.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22036
                  25854
                  46250
                  46271
                  393803

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:c1:66:a7:40:b4:9d:f8:7f:19:63:b7:43:39:d4:2e:df:1f:
         60:37:b0:b2:c4:e0:11:3c:22:ed:31:e1:bc:f3:89:f3:e9:e0:
         80:cd:36:04:e3:8e:76:af:3b:a3:24:51:8f:d9:7d:f0:a1:48:
         47:b3:20:e1:65:c4:69:01:24:84:b9:74:c7:eb:fc:78:20:27:
         61:01:30:0c:2f:d9:42:0e:44:ed:dd:56:c3:c7:74:16:92:5b:
         38:1e:19:19:dd:9a:00:03:59:8e:d9:dd:0b:15:c9:fd:62:c1:
         92:9f:a6:f8:6b:09:1f:08:89:4d:a0:9a:f5:a6:52:67:9d:b1:
         a3:d5:1f:6c:f7:08:a5:e6:a4:d2:cc:ae:a7:c5:7c:3a:32:90:
         24:dd:38:96:1f:7a:42:7b:ba:10:d0:8f:bd:a0:bc:71:08:e1:
         6b:ec:06:58:4a:0b:61:f2:0c:ce:b0:be:2d:12:3b:1a:f6:d4:
         5c:56:9d:98:90:ff:fb:fc:74:f0:53:1b:a9:be:ee:26:b5:24:
         d6:8e:34:c2:c4:ca:31:e0:f0:47:10:70:cd:e2:0c:f6:ce:a6:
         25:cb:c5:7e:c8:dc:3c:a6:16:04:be:29:2b:73:ef:7c:0d:20:
         ba:49:94:4c:ca:6d:aa:ea:88:fd:9a:2f:d5:64:17:14:1d:8b:
         fb:0a:e5:b6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----