Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer
File:                     ea68408f-7dee-415b-a1c1-b76df0a87a93.cer (raw, json)
Hash identifier:          cUAGZuZqyk78UYd405VCQSxpJvokWhsnmQjL6VK78Gk=
Subject key identifier:   16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285845469B2EEA51A2B4FB522F8200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 21 Mar 2024 00:45:20 +0000
Certificate not after:    Wed 24 Jun 2026 00:45:20 +0000
Subordinate resources:    AS: 13629
                          IP: 208.94.216.0/21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:46:9b:2e:ea:51:a2:b4:fb:52:2f:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 21 00:45:20 2024 GMT
            Not After : Jun 24 00:45:20 2026 GMT
        Subject: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:23:d4:58:eb:fc:f6:18:94:a4:8b:5f:f7:76:
                    7e:88:19:42:49:db:a1:ff:9c:c0:9e:11:68:cd:e8:
                    3a:18:73:fb:40:54:3c:e5:f9:4a:49:8a:a2:2c:ae:
                    57:cd:50:47:30:3e:2b:78:fd:7d:9b:3f:c3:4b:ad:
                    82:90:a2:d8:fb:00:dc:e6:bb:8c:1d:3b:3f:ca:dd:
                    1d:c8:a6:f3:ba:4f:0a:5e:cb:83:92:2e:19:db:e5:
                    a9:24:5c:89:b8:72:3c:1c:b2:8c:1b:bc:d0:7d:51:
                    42:a2:6a:3e:ef:40:e9:bc:6c:1b:b0:5e:65:b4:49:
                    3c:96:93:1c:f4:0b:99:30:22:cf:e5:6a:42:5c:01:
                    35:1c:54:0e:f4:22:41:77:aa:7c:2f:3d:3f:04:ae:
                    87:ce:ba:0f:59:f8:1e:23:77:54:57:09:22:c9:3b:
                    3b:f2:31:7b:dc:b9:ed:63:48:9f:18:a3:43:e8:49:
                    aa:0d:db:c4:c2:bf:bd:69:54:04:65:60:ef:0d:3d:
                    53:14:92:19:75:93:0b:28:5c:f3:02:c9:3b:99:36:
                    50:ff:e2:38:ba:a0:e2:23:bb:78:3e:68:05:d7:80:
                    53:10:e3:77:03:be:e4:73:e2:54:6a:4d:a5:01:af:
                    77:53:1f:ee:fa:79:53:d8:85:6c:11:9e:96:25:37:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.216.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13629

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:14:a0:39:a8:21:7e:a5:a5:71:a6:34:1c:ce:c1:5c:5f:68:
         6d:fc:c0:11:fa:96:47:4e:5d:fe:c6:ec:e6:f8:16:8c:71:86:
         8f:64:46:83:d6:35:ce:13:0b:3e:50:25:18:78:9f:3b:ef:0f:
         0b:85:52:14:0b:9f:1f:d2:18:d1:60:d7:f8:43:3e:a6:a5:c8:
         a7:6f:87:c1:11:f1:78:9f:11:e0:47:88:d0:0b:39:02:b4:50:
         8a:5a:ca:9b:1a:b6:a5:46:eb:75:41:66:a5:87:f8:8c:bc:29:
         73:41:f3:ba:c0:8b:6a:f0:58:0a:10:c1:2f:75:87:bf:ee:0d:
         1f:d5:c1:eb:a4:7e:95:ea:53:f6:c0:bd:5f:3c:a6:fb:10:e5:
         f5:2a:f3:78:0d:14:d5:ef:e0:2c:2c:25:16:be:1a:a9:75:d4:
         16:c6:74:b4:ee:30:01:9a:bf:9e:b3:a0:1e:82:de:66:c2:21:
         0d:d0:ab:c5:ab:c1:26:6a:37:d9:18:08:34:cb:5d:95:ae:f4:
         a0:08:a3:3c:f8:6d:0a:77:00:f6:a1:2d:a6:16:6d:d8:90:7b:
         92:c6:b8:23:8d:48:e0:43:75:6c:e4:c0:f5:b0:34:cd:da:68:
         b6:4f:ca:94:c2:ed:2e:27:32:fa:fd:e3:4b:41:44:7e:e0:9b:
         0a:18:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----