Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
File:                     ec23d019-d079-49df-94b6-ad79d138e90f.cer (raw, json)
Hash identifier:          IhrNOJQLliVWSfQuUWCId+4Xki/f4eA5mxHy/qAKYgA=
Subject key identifier:   7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858469867F6DB1D5C6EF340E8D660
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 20 Jul 2024 00:45:21 +0000
Certificate not after:    Fri 23 Oct 2026 00:45:21 +0000
Subordinate resources:    AS: 46978
                          IP: 23.187.144.0/22
                          IP: 66.118.40.0/22
                          IP: 2606:7540::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:98:67:f6:db:1d:5c:6e:f3:40:e8:d6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jul 20 00:45:21 2024 GMT
            Not After : Oct 23 00:45:21 2026 GMT
        Subject: CN=ec23d019-d079-49df-94b6-ad79d138e90f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:01:88:11:70:88:68:c4:04:04:f4:2c:66:
                    de:d2:19:d6:15:a5:a8:3d:0d:a7:ba:ef:d7:bd:6e:
                    89:9d:91:15:05:e7:a5:84:00:2b:f0:29:92:8a:05:
                    76:e8:0b:fe:c2:1d:33:f7:f6:40:5d:63:ff:d7:d8:
                    e6:f6:2b:ee:bd:1a:d9:82:40:6f:2f:36:02:64:7f:
                    0e:c4:72:36:e5:c6:21:13:1a:34:bf:10:5d:94:47:
                    f2:2b:ef:2e:3a:b8:84:c8:b0:ba:e0:c6:bc:ac:62:
                    f3:f9:3a:f4:c3:8b:8c:9a:e9:67:6e:c9:26:31:48:
                    40:96:90:a5:d1:38:dd:01:1c:ee:34:e2:da:a8:c0:
                    02:2a:e2:84:90:bd:98:fd:08:6d:78:dc:22:12:65:
                    eb:df:21:5e:83:69:34:ef:21:e3:e2:d4:e9:85:6c:
                    c5:47:d4:ad:55:81:78:fc:92:38:60:d5:09:73:63:
                    07:a1:5b:e0:68:4c:3b:26:2d:1a:ea:63:bc:dc:7e:
                    8f:78:16:10:62:c7:87:8a:03:97:c1:b2:fc:9c:eb:
                    b5:28:35:43:06:b0:5f:c6:e9:b5:a7:85:b0:2c:82:
                    b2:6b:ac:cc:b8:40:a7:eb:9b:a7:94:20:02:cd:12:
                    6b:d8:c2:1b:ad:85:e4:74:1d:20:e7:32:44:6f:55:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.144.0/22
                  66.118.40.0/22
                IPv6:
                  2606:7540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46978

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e8:00:cb:b8:f2:44:01:5a:6c:c3:82:c0:af:5e:fd:b0:fd:
         a2:87:02:96:c2:0c:85:de:5f:9a:be:10:58:fa:07:ea:40:d4:
         9a:2f:8f:5c:79:18:53:cc:d7:71:a2:31:8f:5b:d5:72:a4:a7:
         f9:5f:4e:6b:84:87:6c:b2:8a:13:8b:74:43:50:99:29:25:92:
         d7:04:71:02:c8:47:a6:a9:39:f1:7f:f1:2e:29:12:42:04:f3:
         4e:47:e3:7c:ae:90:ac:15:a5:51:ee:81:37:db:a1:e3:09:78:
         b0:bf:10:83:ed:51:57:de:a3:cf:9e:65:a4:ab:72:c6:c9:7b:
         a0:60:1c:7e:52:b6:89:05:f8:e9:e0:61:f5:90:58:78:3b:ca:
         1c:f7:bc:d8:79:39:f4:25:13:6f:a5:57:05:7d:71:89:d5:3f:
         89:0e:36:7d:9f:4d:2c:38:b8:69:4e:4a:50:99:b0:8a:01:62:
         a8:34:4d:d5:aa:69:86:f2:4b:90:a0:cc:29:fc:5f:42:d3:16:
         9f:4d:1b:9c:6f:1f:e7:60:b9:7a:db:85:53:c8:bb:1c:6f:55:
         c5:69:e4:0c:fd:89:23:c0:66:e3:b2:50:df:fd:73:da:ba:dc:
         a5:ed:51:24:1f:dc:27:e4:46:e0:64:41:91:17:b9:cc:64:c7:
         65:72:9d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----