Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer
File:                     ee195698-fb60-40ef-a454-85fcbf3381b9.cer (raw, json)
Hash identifier:          PaCyGWOYHGZxUc1P3VDDoNH0Nft778EBx52WdaCPoZE=
Subject key identifier:   3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858452D7B07A157FD2405A90A9780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 12 Mar 2024 00:45:20 +0000
Certificate not after:    Mon 15 Jun 2026 00:45:20 +0000
Subordinate resources:    IP: 137.216.0.0/16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2d:7b:07:a1:57:fd:24:05:a9:0a:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Mar 12 00:45:20 2024 GMT
            Not After : Jun 15 00:45:20 2026 GMT
        Subject: CN=ee195698-fb60-40ef-a454-85fcbf3381b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:9d:47:e8:b0:27:3a:0d:2f:ac:bb:61:35:
                    5c:e6:a9:85:fc:fd:8e:63:d1:d2:0e:58:24:52:4a:
                    c3:9c:a8:b2:7b:b1:d3:24:11:09:00:77:7c:7d:f6:
                    ab:a3:bb:a9:fc:19:56:33:a8:af:e4:52:2d:0a:45:
                    72:00:37:5a:61:aa:1f:dc:35:6a:e6:48:f1:d6:bb:
                    c6:94:af:08:28:65:b9:5f:82:b0:47:6a:20:f6:b2:
                    1b:cc:6b:f4:0f:d8:1d:81:32:71:27:02:2d:50:9b:
                    f8:02:ad:d0:08:f3:5f:72:2d:75:eb:c6:37:79:9a:
                    ca:ad:67:8a:82:0b:68:a1:b6:3c:48:b1:3b:3b:e2:
                    44:19:8c:15:70:cc:c5:30:76:78:1f:ea:8b:55:68:
                    04:6e:07:92:52:64:bb:1d:a3:48:0b:48:2a:54:de:
                    d7:06:7e:10:4c:26:cd:80:dc:67:84:2d:8b:03:3c:
                    e2:4f:e0:3d:0c:d3:ee:e7:ba:63:75:c9:f8:54:ad:
                    55:09:58:d7:87:e3:b2:84:02:a6:56:86:97:42:95:
                    6d:7a:8c:bf:47:e0:04:46:97:03:ab:ff:10:90:38:
                    b5:14:cd:96:27:85:56:59:23:fd:d4:eb:d2:21:7d:
                    a9:4b:a9:95:d4:08:c4:83:5e:11:b0:1c:3f:db:e5:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:ae:e9:a8:0d:37:e8:6a:2d:60:ca:7e:50:9e:82:85:d0:61:
         10:46:98:cf:37:99:78:a7:9c:39:ad:5f:5e:c6:c0:38:c9:00:
         43:94:3a:6c:d2:dd:8e:cf:47:b5:15:45:d7:89:6c:2e:bd:e7:
         f0:31:78:d8:ef:2f:89:ce:de:1d:96:96:0a:7a:99:7f:de:26:
         84:a0:62:b5:24:83:66:92:8a:03:7a:c0:3a:d2:07:48:aa:6c:
         ac:c8:98:e2:0c:5f:49:be:8b:f4:c5:58:b7:6c:21:53:2d:fe:
         8e:e0:4a:ef:78:9b:13:80:19:9f:68:b2:f1:38:13:6c:cc:e7:
         83:e0:5d:4f:1a:c2:45:39:b7:a9:61:08:2a:46:37:f4:71:9c:
         6f:4b:56:55:fa:5e:cd:56:39:be:7f:92:99:e6:63:b3:ae:38:
         c6:55:3e:ee:cb:c2:a8:7a:14:e9:41:2e:26:25:d9:f3:23:24:
         d7:a6:d1:ce:7a:46:66:95:56:80:43:df:0a:15:60:07:64:a9:
         0d:4b:4f:39:56:ec:d5:69:ca:f6:ba:b7:fe:04:52:8a:20:9b:
         73:28:9a:a4:6f:b6:ec:57:37:ee:d7:39:21:12:cc:64:43:68:
         12:f4:40:61:c4:7e:75:93:c0:69:0f:23:0a:2f:8c:33:45:67:
         ec:c8:ac:32
-----BEGIN CERTIFICATE-----
MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEUtewehV/0kBakKl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3
MWFjMB4XDTI0MDMxMjAwNDUyMFoXDTI2MDYxNTAwNDUyMFowLzEtMCsGA1UEAxMk
ZWUxOTU2OTgtZmI2MC00MGVmLWE0NTQtODVmY2JmMzM4MWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCCdR+iwJzoNL6y7YTVc5qmF/P2OY9HSDlgk
UkrDnKiye7HTJBEJAHd8ffaro7up/BlWM6iv5FItCkVyADdaYaof3DVq5kjx1rvG
lK8IKGW5X4KwR2og9rIbzGv0D9gdgTJxJwItUJv4Aq3QCPNfci1168Y3eZrKrWeK
ggtoobY8SLE7O+JEGYwVcMzFMHZ4H+qLVWgEbgeSUmS7HaNIC0gqVN7XBn4QTCbN
gNxnhC2LAzziT+A9DNPu57pjdcn4VK1VCVjXh+OyhAKmVoaXQpVteoy/R+AERpcD
q/8QkDi1FM2WJ4VWWSP91OvSIX2pS6mV1AjEg14RsBw/2+VHewIDAQABo4ID/jCC
A/owHQYDVR0OBBYEFD0XJfHbAqivzHPU4b+BWvb5jAgSMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l
ZTE5NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZjYmYzMzgxYjkvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt
OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VlMTk1Njk4LWZiNjAtNDBlZi1h
NDU0LTg1ZmNiZjMzODFiOS9lZTE5NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZjYmYz
MzgxYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi
MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj
ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD
Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHgYIKwYBBQUH
AQcBAf8EDzANMAsEAgABMAUDAwCJ2DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnrumoDTfoai1gyn5QnoKF
0GEQRpjPN5l4p5w5rV9exsA4yQBDlDps0t2Oz0e1FUXXiWwuvefwMXjY7y+Jzt4d
lpYKepl/3iaEoGK1JINmkooDesA60gdIqmysyJjiDF9Jvov0xVi3bCFTLf6O4Erv
eJsTgBmfaLLxOBNszOeD4F1PGsJFObepYQgqRjf0cZxvS1ZV+l7NVjm+f5KZ5mOz
rjjGVT7uy8KoehTpQS4mJdnzIyTXptHOekZmlVaAQ98KFWAHZKkNS085VuzVacr2
urf+BFKKIJtzKJqkb7bsVzfu1zkhEsxkQ2gS9EBhxH51k8BpDyMKL4wzRWfsyKwy
-----END CERTIFICATE-----