Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer
File:                     f30a83fc-5753-4d94-85d1-26924afa8ea3.cer (raw, json)
Hash identifier:          sAW3RcOwyLiKDYS4l2RW2J9DiNjUjeayngEezg9pjvI=
Subject key identifier:   F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285841E48348D4435FCC436DAF5720
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 15 May 2023 19:06:39 +0000
Certificate not after:    Sun 18 May 2025 19:06:39 +0000
Subordinate resources:    IP: 198.252.153.0/24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:83:48:d4:43:5f:cc:43:6d:af:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: May 15 19:06:39 2023 GMT
            Not After : May 18 19:06:39 2025 GMT
        Subject: CN=f30a83fc-5753-4d94-85d1-26924afa8ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:e1:bf:f9:b6:dc:33:70:ee:5b:2d:be:b5:
                    03:d2:56:ea:d3:ed:cc:18:4f:0a:c6:07:a3:7f:47:
                    46:ca:6a:63:9f:0a:79:4c:ed:85:79:a1:e2:81:51:
                    eb:82:c2:81:1f:e0:25:88:40:b8:87:9c:40:c8:85:
                    95:d7:c4:5c:f9:e2:82:a2:f8:c9:6a:60:ea:00:d8:
                    17:67:33:b5:7a:01:1a:5d:6e:30:37:58:74:dd:ae:
                    43:28:ac:de:ff:b4:d1:f0:8b:fc:a6:e5:52:70:37:
                    32:71:2e:f3:d0:a4:2c:78:a2:89:27:12:9d:ad:b0:
                    57:57:0e:89:6e:f1:ca:21:81:ea:90:1b:c5:93:97:
                    b7:8c:e9:7b:21:d6:bb:39:58:66:f7:83:2b:1e:93:
                    ff:99:d7:3e:19:82:a3:5b:74:21:e5:b4:b4:08:07:
                    53:0a:5d:28:ab:70:bb:0f:03:7b:8c:d4:14:69:c5:
                    fc:b4:76:6a:a9:db:50:70:a4:74:f6:1d:6d:61:63:
                    bc:48:d2:ac:ec:6a:cc:27:39:d3:7c:9c:3d:98:95:
                    e8:be:61:52:7f:5c:83:e5:e9:19:8f:c7:42:57:f4:
                    4f:f0:dd:f5:36:75:8a:26:3c:7e:38:1a:cc:0a:c8:
                    7b:ac:6c:59:39:c2:a2:08:28:9d:be:64:7d:4b:ba:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5a:11:40:de:fe:43:1b:2f:e4:16:05:4d:2f:7d:f3:45:08:
         3c:8a:da:12:d3:45:6e:52:28:8f:4c:f0:f8:87:ec:0c:f6:19:
         95:b0:62:7e:e8:f4:de:87:02:bd:d7:61:bd:fd:9d:8b:d9:99:
         11:c7:26:53:a4:8d:21:0b:0c:f8:1c:63:5d:3f:38:73:15:5f:
         91:a4:57:82:c3:e8:0e:41:2e:30:ac:e2:7e:24:8f:88:87:bf:
         61:75:83:e2:70:e8:65:15:41:2a:38:80:1d:e1:ea:b6:a4:8a:
         af:39:d7:76:3b:ad:81:8c:bb:d8:f1:89:28:fe:c4:25:86:a8:
         f5:fa:1c:85:77:d0:d7:1a:e2:39:80:e7:ea:72:b3:50:4c:a0:
         7a:9b:b9:62:f3:30:67:da:6f:5f:95:d4:8e:6e:de:a0:5f:b4:
         73:6e:a7:2a:72:db:28:8c:d4:a5:67:24:42:7c:8a:9e:74:bb:
         c3:10:c2:72:99:64:69:9a:a1:e4:35:d1:11:55:9b:08:43:b4:
         a7:37:a9:62:c1:4e:8d:7d:5a:53:3d:e2:34:e0:fa:d7:e2:d2:
         c0:df:a2:f5:d7:36:fb:21:d4:7f:e1:3f:bc:ae:09:da:b0:cd:
         2b:05:e3:8a:81:d5:12:de:a2:24:2e:53:1b:77:d5:49:b2:fa:
         3f:95:78:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----