Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer
File:                     fdccefde-032f-46cb-9138-30e7726ea619.cer (raw, json)
Hash identifier:          Vdk062V8ORj4MMV3ZAXMZNQFlgoDBPU5tO0q1/PAjQQ=
Subject key identifier:   5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285847A469AD08378B549784FD6E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 24 Oct 2024 00:45:26 +0000
Certificate not after:    Wed 27 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 32523
                          IP: 205.147.80.0/21
                          IP: 2604:f700::/32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a4:69:ad:08:37:8b:54:97:84:fd:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Oct 24 00:45:26 2024 GMT
            Not After : Jan 27 01:45:26 2027 GMT
        Subject: CN=fdccefde-032f-46cb-9138-30e7726ea619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:44:4f:27:1b:8c:bb:0f:96:43:66:b1:40:
                    21:78:80:2f:91:23:07:13:33:1d:68:dc:0c:ea:10:
                    03:a8:45:13:8a:e5:3d:34:ef:8e:1c:66:18:11:70:
                    0b:11:cf:02:26:87:37:85:70:f4:47:19:ef:31:c5:
                    6a:13:05:ef:0c:c4:f4:32:29:3a:8e:47:36:b8:37:
                    d5:f1:a5:52:8c:26:cf:3a:bf:95:ed:95:b4:b1:6a:
                    68:06:db:ed:f3:bd:df:74:d8:b3:01:49:ee:90:9a:
                    3a:c4:27:96:71:e7:b5:2b:e9:aa:6a:94:f2:60:48:
                    5d:1c:a3:d6:5b:9b:ec:14:0e:19:b5:98:14:c9:aa:
                    ff:ca:ed:13:d1:33:66:20:42:0d:37:b3:ad:3b:79:
                    55:ff:91:a6:6c:c4:9d:79:58:d9:a5:39:b2:22:73:
                    ce:99:48:4c:97:e7:f9:67:4d:aa:6a:f4:7f:85:f0:
                    d3:c7:4c:d1:2b:a0:72:cb:5e:0a:8a:95:72:ee:62:
                    bf:d7:5b:76:37:70:7d:db:2c:d5:1f:56:ce:97:b5:
                    69:4a:1e:75:19:3b:75:63:ad:6b:42:73:53:00:98:
                    37:bf:6e:20:4d:ec:14:a0:ec:bd:75:05:34:79:b0:
                    d3:9a:d6:04:56:02:b7:4a:94:a9:59:a3:48:f4:95:
                    53:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.147.80.0/21
                IPv6:
                  2604:f700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32523

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d5:db:ef:39:99:5c:43:ff:e5:01:2b:68:27:fe:0c:9d:30:
         7a:2c:5b:4f:93:70:4a:d2:c7:f7:f9:96:18:9c:db:b5:9d:aa:
         61:d4:e9:dc:83:bb:df:19:bd:80:94:fb:f0:8c:ad:e1:5d:f8:
         c5:04:7a:2b:a0:77:5c:cf:34:04:39:a8:7c:9c:7b:2f:de:e7:
         0a:17:e5:a2:ee:45:99:12:52:48:2f:c6:ae:5a:35:f8:91:33:
         ce:0b:da:8c:13:e8:4a:6b:6b:3e:26:b0:0d:28:59:81:fb:fb:
         8d:91:f0:fe:39:71:64:0f:f3:e5:af:02:db:88:b9:e3:8b:81:
         a9:67:75:b3:1b:10:da:0a:a8:c9:c3:21:9a:63:c7:f5:ec:d4:
         85:18:f2:43:7d:e8:cc:17:60:a8:1c:cd:c3:4e:29:b6:1b:58:
         91:16:04:4b:20:98:63:1d:2f:5f:cc:65:7c:7a:16:d6:92:86:
         5b:d1:ec:d1:d7:f0:6a:93:c6:1f:5e:86:f3:37:e9:59:86:30:
         7a:91:ad:35:72:46:2a:97:d4:b5:81:ee:16:e2:5c:fa:0a:4b:
         cd:fb:ee:62:01:fe:d1:9e:10:e3:c3:0b:fe:91:fd:a3:8a:2c:
         83:e5:21:c5:23:23:90:5b:17:cc:cb:83:36:ce:f1:b6:45:c2:
         3e:01:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----