Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
File:                     e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer (raw, json)
Hash identifier:          xIZJ3m/YZHq8+t3dZeUjUpcNCgqjCLgtg8aTnUECW9E=
Subject key identifier:   29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584734BE510FED5DF1093FA72740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 14 Sep 2024 00:45:27 +0000
Certificate not after:    Fri 18 Dec 2026 01:45:27 +0000
Subordinate resources:    AS: 399805
                          IP: 23.179.144.0/23
                          IP: 2602:fc88::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Sep 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:be:51:0f:ed:5d:f1:09:3f:a7:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Sep 14 00:45:27 2024 GMT
            Not After : Dec 18 01:45:27 2026 GMT
        Subject: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:0a:8d:30:11:27:e3:26:5b:d1:85:3a:69:
                    f9:a0:3f:2e:29:b2:e8:f7:65:8b:d0:c3:82:8a:6d:
                    15:d8:10:a2:22:30:65:eb:ae:54:37:4c:4e:0a:ab:
                    1a:bb:6c:4e:ad:54:5e:27:db:97:b9:ce:e6:4d:bc:
                    8b:66:3c:8c:ac:27:47:9e:7c:32:ab:d5:af:b2:0e:
                    56:2a:81:1d:ce:12:99:f8:ca:c2:dd:ca:0b:90:9a:
                    58:0e:f3:ca:ca:9c:a3:ea:e3:61:05:55:f3:fc:27:
                    be:e1:cc:fe:f4:f7:41:54:36:11:fe:ab:67:8f:ab:
                    a6:7e:90:17:a7:ff:53:82:83:c4:0a:8e:80:a5:c1:
                    46:83:c8:c8:25:df:fe:bf:8f:f7:9e:ef:c2:11:90:
                    67:c2:49:d0:92:dd:86:51:f7:be:c6:28:65:13:f8:
                    e5:95:00:da:56:df:a6:4e:3c:a3:e4:86:0f:ca:11:
                    d2:38:17:87:9a:2a:ef:92:25:e8:82:52:54:4e:71:
                    39:2a:ef:30:49:76:08:7c:21:4c:fd:04:e8:51:89:
                    ab:ea:66:f1:f1:8f:51:bf:65:3e:75:8f:f8:00:86:
                    74:a6:6e:1f:dd:b2:45:99:7e:ad:9c:a6:4a:3e:f7:
                    4f:a6:ef:d4:50:d4:74:84:2c:70:30:0c:68:5b:5f:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.144.0/23
                IPv6:
                  2602:fc88::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  399805

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2c:73:ce:ee:91:01:26:ca:af:df:53:3a:f3:41:f5:18:71:
         dc:28:a7:f0:91:88:50:37:54:b8:ba:c9:99:a6:c9:87:d5:93:
         8a:28:3e:68:0d:3d:06:3f:59:9d:cd:c0:b4:26:ea:ec:24:f7:
         d2:87:73:d7:5e:f0:b3:21:b9:90:10:a3:ae:da:66:79:54:ba:
         15:7c:d7:5f:de:cd:41:fd:68:ca:36:dd:85:ef:33:62:52:2a:
         f2:26:9a:33:8d:b7:ab:93:a3:3c:da:7c:9b:99:03:ea:8a:bc:
         23:f6:c3:ca:72:78:3e:f2:9d:a1:f3:d2:64:a3:df:e0:fa:b2:
         71:0f:76:f2:16:87:97:7b:a8:b0:2b:29:1b:96:63:bd:87:3a:
         e1:f0:e0:87:5a:1c:cf:e1:a0:7e:b4:bf:43:f4:c1:85:3b:32:
         0f:36:43:59:55:6a:8d:c6:78:52:4b:10:57:31:ce:52:af:c6:
         9a:0f:d4:3c:bf:f0:6e:1b:43:22:6b:24:52:b0:9f:6c:96:aa:
         46:04:eb:6f:46:ff:73:bf:bd:ee:bc:b6:7e:00:d8:e5:a1:63:
         cb:b0:90:e6:d2:dd:a7:3e:71:27:e6:47:46:f2:d5:61:ad:70:
         07:c2:dd:4b:73:7a:c4:61:23:e4:03:a8:17:6a:f6:72:51:e5:
         f3:0a:ed:f5
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEc0vlEP7V3xCT+nJ0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDkxNDAwNDUyN1oXDTI2MTIxODAxNDUyN1owLzEtMCsGA1UEAxMk
ZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRiMzk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc4KjTARJ+MmW9GFOmn5oD8uKbLo92WL0MOC
im0V2BCiIjBl665UN0xOCqsau2xOrVReJ9uXuc7mTbyLZjyMrCdHnnwyq9Wvsg5W
KoEdzhKZ+MrC3coLkJpYDvPKypyj6uNhBVXz/Ce+4cz+9PdBVDYR/qtnj6umfpAX
p/9TgoPECo6ApcFGg8jIJd/+v4/3nu/CEZBnwknQkt2GUfe+xihlE/jllQDaVt+m
Tjyj5IYPyhHSOBeHmirvkiXoglJUTnE5Ku8wSXYIfCFM/QToUYmr6mbx8Y9Rv2U+
dY/4AIZ0pm4f3bJFmX6tnKZKPvdPpu/UUNR0hCxwMAxoW19RXQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFCmT8B+pYunCzgf1IBvvHUWvLVkQMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l
N2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2U3ZjU1ODllLTRmYTEtNDFhZi05
ZDNmLTdkYmQ1ZmJkYjM5NS9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZi
ZGIzOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAEXs5AwDgQCAAIwCAMGBCYC/IgAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwYZvTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5LHPO7pEBJsqv31M680H1GHHc
KKfwkYhQN1S4usmZpsmH1ZOKKD5oDT0GP1mdzcC0JursJPfSh3PXXvCzIbmQEKOu
2mZ5VLoVfNdf3s1B/WjKNt2F7zNiUiryJpozjberk6M82nybmQPqirwj9sPKcng+
8p2h89Jko9/g+rJxD3byFoeXe6iwKykblmO9hzrh8OCHWhzP4aB+tL9D9MGFOzIP
NkNZVWqNxnhSSxBXMc5Sr8aaD9Q8v/BuG0MiayRSsJ9slqpGBOtvRv9zv73uvLZ+
ANjloWPLsJDm0t2nPnEn5kdG8tVhrXAHwt1Lc3rEYSPkA6gXavZyUeXzCu31
-----END CERTIFICATE-----