Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer
File:                     fdccefde-032f-46cb-9138-30e7726ea619.cer (raw, json)
Hash identifier:          PB1P3+8qPlK3zIZsuWoI0AkQX1hj3chR5YwSZ+ocYpQ=
Subject key identifier:   5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285842A036EDDAD612202F68DEAE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 22 Jul 2023 00:45:16 +0000
Certificate not after:    Fri 24 Oct 2025 00:45:16 +0000
Subordinate resources:    AS: 32523
                          IP: 205.147.80.0/21
                          IP: 2604:f700::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a0:36:ed:da:d6:12:20:2f:68:de:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Jul 22 00:45:16 2023 GMT
            Not After : Oct 24 00:45:16 2025 GMT
        Subject: CN=fdccefde-032f-46cb-9138-30e7726ea619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:44:4f:27:1b:8c:bb:0f:96:43:66:b1:40:
                    21:78:80:2f:91:23:07:13:33:1d:68:dc:0c:ea:10:
                    03:a8:45:13:8a:e5:3d:34:ef:8e:1c:66:18:11:70:
                    0b:11:cf:02:26:87:37:85:70:f4:47:19:ef:31:c5:
                    6a:13:05:ef:0c:c4:f4:32:29:3a:8e:47:36:b8:37:
                    d5:f1:a5:52:8c:26:cf:3a:bf:95:ed:95:b4:b1:6a:
                    68:06:db:ed:f3:bd:df:74:d8:b3:01:49:ee:90:9a:
                    3a:c4:27:96:71:e7:b5:2b:e9:aa:6a:94:f2:60:48:
                    5d:1c:a3:d6:5b:9b:ec:14:0e:19:b5:98:14:c9:aa:
                    ff:ca:ed:13:d1:33:66:20:42:0d:37:b3:ad:3b:79:
                    55:ff:91:a6:6c:c4:9d:79:58:d9:a5:39:b2:22:73:
                    ce:99:48:4c:97:e7:f9:67:4d:aa:6a:f4:7f:85:f0:
                    d3:c7:4c:d1:2b:a0:72:cb:5e:0a:8a:95:72:ee:62:
                    bf:d7:5b:76:37:70:7d:db:2c:d5:1f:56:ce:97:b5:
                    69:4a:1e:75:19:3b:75:63:ad:6b:42:73:53:00:98:
                    37:bf:6e:20:4d:ec:14:a0:ec:bd:75:05:34:79:b0:
                    d3:9a:d6:04:56:02:b7:4a:94:a9:59:a3:48:f4:95:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.80.0/21
                IPv6:
                  2604:f700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32523

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:24:08:3e:3b:69:57:d9:d3:7e:01:85:9b:c6:1b:19:87:26:
         59:42:e2:9e:49:12:cd:e9:67:0b:eb:10:1e:95:2f:0d:6e:66:
         7d:11:f7:97:b5:4a:cf:76:ab:12:9e:19:ee:3f:9b:d3:0b:66:
         e7:94:08:df:fd:df:f7:fc:56:90:44:fa:b6:f6:e7:99:f1:85:
         ad:d1:c7:8e:19:88:ba:13:54:b9:0b:c3:b9:f3:8c:4a:0c:08:
         7d:a2:eb:6d:9b:9d:36:05:18:c1:63:cb:9c:0c:52:f7:1c:b2:
         f5:26:f0:63:78:73:76:ff:0a:7e:31:d3:13:ab:9a:8c:12:10:
         b1:27:1c:5b:b0:bc:97:29:1a:c4:7c:f3:11:2e:5e:5b:57:86:
         2d:9b:9b:fb:55:04:57:c0:d1:6b:c9:de:6d:74:26:10:a7:c2:
         25:4c:5a:e7:3a:2b:a6:20:5a:49:49:16:e5:de:a4:62:e4:a0:
         f5:7c:b8:52:2f:c3:33:b2:1c:7e:5f:78:46:67:57:e8:f2:be:
         7d:1e:46:8b:75:92:ea:4c:92:f0:c7:5e:7f:e1:da:4d:05:16:
         53:52:ec:17:69:c2:42:c3:02:91:a9:0a:04:01:db:5a:dd:df:
         67:f2:ee:76:cb:20:8f:b5:6c:51:9f:b7:c6:b1:a5:6e:32:bd:
         8a:60:1a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----