Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b.cer
File:                     50dd3001-8039-47e8-a642-92a97c54da3b.cer (raw, json)
Hash identifier:          kyu/jQ3U4yhWDdAGhxTbQRgP1ssYUgO/OsHaGQb27WQ=
Subject key identifier:   1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858490F746F406A712A3C9052C71C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 03 Mar 2025 01:45:33 +0000
Certificate not after:    Sun 06 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 400771
                          IP: 23.141.40.0/24
                          IP: 2620:b0:2000::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:74:6f:40:6a:71:2a:3c:90:52:c7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Mar  3 01:45:33 2025 GMT
            Not After : Jun  6 00:45:33 2027 GMT
        Subject: CN=50dd3001-8039-47e8-a642-92a97c54da3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:9d:ee:39:06:83:d7:96:d1:87:7c:28:66:
                    b1:a9:5a:f6:2f:e5:60:2b:1f:66:9c:8f:2a:bc:00:
                    0c:33:73:cf:7a:1a:b3:71:04:07:d8:a0:41:21:7b:
                    d2:38:d4:60:20:75:eb:21:c7:1e:dc:10:a1:e1:cc:
                    d0:e8:0e:7e:a5:9c:6b:a0:37:11:db:29:65:7b:60:
                    bf:a9:ac:a1:cc:20:dd:cd:81:5a:ad:16:f2:3d:cd:
                    26:d9:96:25:65:59:45:0c:b2:1e:0f:53:f8:5a:ad:
                    cc:94:22:41:a1:c0:76:5f:c0:92:4c:0e:63:39:d7:
                    b5:8f:9c:12:31:4c:f6:f1:1f:bb:b7:46:41:51:7c:
                    45:f2:8e:e1:30:01:a6:10:e5:82:28:69:90:c6:86:
                    82:ce:94:8b:42:36:f9:16:f8:ad:e6:bb:0f:7d:f0:
                    9a:9e:93:97:27:b8:20:c9:f0:70:c7:35:04:8e:b1:
                    b8:e8:ba:66:52:04:87:3b:51:cb:6b:08:05:4e:0d:
                    3d:e4:aa:e0:34:59:e9:aa:fe:e0:d0:0c:f6:93:33:
                    b7:c8:c4:9b:c3:fd:b7:02:7d:ca:75:6f:d2:10:c3:
                    05:db:f0:18:f4:12:df:83:4d:08:dc:db:8c:25:c5:
                    e5:14:9c:db:5c:b2:8b:a4:22:42:9a:0e:3e:c2:15:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8A:BE:1B:4E:A1:BE:5B:17:12:B4:45:04:D0:BF:E4:15:70:3C:0A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/50dd3001-8039-47e8-a642-92a97c54da3b/50dd3001-8039-47e8-a642-92a97c54da3b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.40.0/24
                IPv6:
                  2620:b0:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400771

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:85:c5:24:a2:3a:16:58:2c:7b:e8:a6:49:53:e8:f8:90:67:
         b1:53:76:8c:37:46:4d:77:06:28:28:76:4f:bb:10:d5:72:05:
         9b:b3:0a:08:1a:21:49:cb:dc:78:b1:75:2c:d4:63:3f:2a:13:
         94:9d:65:82:c1:10:8e:84:64:91:26:1c:be:79:62:d4:82:b3:
         69:98:88:6d:37:8b:fa:36:a9:89:2e:39:3d:10:3f:d9:41:03:
         02:06:e8:75:44:e6:fb:cd:a5:f7:7d:4a:fd:61:4b:00:42:1a:
         51:d6:8c:ec:33:e8:92:19:ee:5e:3b:02:6b:bb:e2:97:b7:f3:
         a9:25:89:4c:72:d5:4f:68:58:ae:c0:90:58:fe:68:7a:e5:79:
         33:ed:f0:6a:4a:69:a3:0c:88:aa:9a:a6:1c:85:6c:15:32:ab:
         06:41:f7:cf:75:19:f4:4e:e8:30:ef:de:de:53:5a:da:bb:32:
         da:fd:7c:8a:7f:26:d7:29:5c:ba:62:ae:06:cf:4e:e6:b9:1b:
         a9:09:1c:5b:1f:6a:4c:e8:a9:df:bf:d9:8c:a2:54:c3:45:b4:
         7e:4f:78:e0:cd:9f:6d:28:30:6f:cb:65:7e:8b:38:21:b8:b4:
         95:25:ef:c4:51:a8:cb:53:15:50:d8:5c:7f:02:49:f7:c4:ac:
         4e:c9:14:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:21:06 2025 by rpki-client