Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer
File:                     f30a83fc-5753-4d94-85d1-26924afa8ea3.cer (raw, json)
Hash identifier:          /1ecHe6cqT9nsUx6pNep3Fyfp7Z78a/2Ls76EC6MW2Q=
Subject key identifier:   F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285845EB518A215449B930FD0F1C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 19 May 2024 00:45:19 +0000
Certificate not after:    Sat 22 Aug 2026 00:45:19 +0000
Subordinate resources:    IP: 198.252.153.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:eb:51:8a:21:54:49:b9:30:fd:0f:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 19 00:45:19 2024 GMT
            Not After : Aug 22 00:45:19 2026 GMT
        Subject: CN=f30a83fc-5753-4d94-85d1-26924afa8ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:e1:bf:f9:b6:dc:33:70:ee:5b:2d:be:b5:
                    03:d2:56:ea:d3:ed:cc:18:4f:0a:c6:07:a3:7f:47:
                    46:ca:6a:63:9f:0a:79:4c:ed:85:79:a1:e2:81:51:
                    eb:82:c2:81:1f:e0:25:88:40:b8:87:9c:40:c8:85:
                    95:d7:c4:5c:f9:e2:82:a2:f8:c9:6a:60:ea:00:d8:
                    17:67:33:b5:7a:01:1a:5d:6e:30:37:58:74:dd:ae:
                    43:28:ac:de:ff:b4:d1:f0:8b:fc:a6:e5:52:70:37:
                    32:71:2e:f3:d0:a4:2c:78:a2:89:27:12:9d:ad:b0:
                    57:57:0e:89:6e:f1:ca:21:81:ea:90:1b:c5:93:97:
                    b7:8c:e9:7b:21:d6:bb:39:58:66:f7:83:2b:1e:93:
                    ff:99:d7:3e:19:82:a3:5b:74:21:e5:b4:b4:08:07:
                    53:0a:5d:28:ab:70:bb:0f:03:7b:8c:d4:14:69:c5:
                    fc:b4:76:6a:a9:db:50:70:a4:74:f6:1d:6d:61:63:
                    bc:48:d2:ac:ec:6a:cc:27:39:d3:7c:9c:3d:98:95:
                    e8:be:61:52:7f:5c:83:e5:e9:19:8f:c7:42:57:f4:
                    4f:f0:dd:f5:36:75:8a:26:3c:7e:38:1a:cc:0a:c8:
                    7b:ac:6c:59:39:c2:a2:08:28:9d:be:64:7d:4b:ba:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:a8:35:26:60:6c:b7:f1:e9:9e:20:4f:42:7c:36:b2:3f:e3:
         b6:0a:da:70:89:d1:42:18:4a:4b:ea:77:42:95:87:b0:67:64:
         7e:f8:ea:25:72:8f:d7:7b:0c:66:0e:4b:a4:91:d1:62:21:66:
         02:ba:77:1b:a1:50:0a:5a:98:73:c6:63:9a:91:d1:2c:09:4e:
         55:be:34:a2:43:a7:82:9c:30:3e:ba:3d:3e:e5:0d:8e:2f:ac:
         5b:c5:5e:81:67:42:2b:6c:14:43:9e:2b:86:9d:9a:60:71:a7:
         ca:ee:99:b8:8d:3b:35:e7:8e:95:c3:86:a2:e4:95:8a:19:ee:
         1f:17:f4:fa:1d:52:b8:93:c0:04:ed:38:b9:8f:d2:df:0b:f3:
         ae:5e:49:b9:ba:1a:17:c0:88:ff:9d:f4:d7:ab:e0:39:62:e2:
         bc:d0:85:f0:fb:1a:32:a2:db:3e:58:5d:fd:da:f5:36:0b:31:
         15:48:1b:39:09:86:64:ba:d3:b8:a2:9b:3b:78:a1:12:59:13:
         fc:f7:ab:b9:54:a3:4f:46:99:19:ec:a7:c7:d8:87:01:e7:1f:
         5a:dd:2e:57:26:ae:c6:81:0c:37:f9:bb:64:d7:10:ca:88:b0:
         a7:91:d5:f3:c6:5d:40:34:42:36:63:46:68:0a:a5:4e:a5:e8:
         96:fd:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----