Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
File:                     a20363da-11e1-47d9-ac51-fe156737c8bb.cer (raw, json)
Hash identifier:          kdEn/xzJbYCifSeuykZiFRP6suPxv2/QxTEfMKQFynM=
Subject key identifier:   D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F4328584927A4CE4FA6D92BFAA8FCB880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 11 Mar 2025 17:42:25 +0000
Certificate not after:    Tue 26 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 55039
                          AS: 63298
                          IP: 52.144.56.0/23
                          IP: 64.190.16.0/22
                          IP: 66.187.28.0/22
                          IP: 76.164.220.0/22
                          IP: 104.245.108.0/22
                          IP: 136.242.88.0/21
                          IP: 148.59.192.0/22
                          IP: 162.142.100.0/22
                          IP: 162.218.180.0/24
                          IP: 162.218.182.0/23
                          IP: 162.222.252.0/22
                          IP: 168.245.212.0/22
                          IP: 169.197.75.0/24
                          IP: 172.87.224.0/22
                          IP: 192.195.253.0/24
                          IP: 199.45.252.0/23
                          IP: 199.231.248.0/22
                          IP: 205.220.208.0/21
                          IP: 207.244.136.0/22
                          IP: 208.66.120.0/22
                          IP: 209.127.236.0/22
                          IP: 216.87.44.0/23
                          IP: 2602:ff7c::/36
                          IP: 2606:4b80::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:27:a4:ce:4f:a6:d9:2b:fa:a8:fc:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Mar 11 17:42:25 2025 GMT
            Not After : Jan 26 01:45:26 2027 GMT
        Subject: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cd:bb:e9:eb:b9:ac:af:bf:50:63:86:d9:78:
                    c8:69:03:0e:3f:ca:85:47:78:ce:7b:07:07:8d:22:
                    36:0d:18:1a:40:37:2e:17:cb:86:5e:3c:88:b3:4f:
                    5b:69:21:01:08:39:66:c3:ab:f9:1c:e4:8d:81:6f:
                    74:5d:05:4a:f7:82:dd:89:55:b1:bb:6d:12:47:1f:
                    66:82:77:6b:3c:5f:ee:61:fe:a6:ac:c5:5c:44:dd:
                    36:51:91:6c:38:22:d5:c9:db:88:96:3a:80:0c:91:
                    12:7f:c6:fb:c8:47:77:5c:4d:ff:81:d6:84:f8:47:
                    2a:a1:74:25:ac:48:9d:32:89:dd:33:f0:3c:2f:1a:
                    e1:cd:c9:6e:7c:bb:38:d4:09:c0:d4:b7:b3:e1:6c:
                    48:b2:97:6c:86:ee:1a:ce:10:32:08:97:bb:c1:41:
                    cb:d6:c0:75:e9:b9:b3:ac:50:36:2a:ea:e7:3d:df:
                    b0:8a:cf:f3:47:1b:34:37:15:de:cd:59:ec:3e:d1:
                    95:f0:f3:9f:e5:3e:0e:89:e1:b1:a9:f5:ea:af:7c:
                    71:e2:53:92:33:ca:31:3d:7f:a3:ba:ca:a7:2f:57:
                    53:23:58:e8:e2:97:59:74:06:9d:b0:f2:ff:6f:42:
                    65:67:32:21:40:33:74:6f:95:e5:be:c4:c5:4e:47:
                    1a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.56.0/23
                  64.190.16.0/22
                  66.187.28.0/22
                  76.164.220.0/22
                  104.245.108.0/22
                  136.242.88.0/21
                  148.59.192.0/22
                  162.142.100.0/22
                  162.218.180.0/24
                  162.218.182.0/23
                  162.222.252.0/22
                  168.245.212.0/22
                  169.197.75.0/24
                  172.87.224.0/22
                  192.195.253.0/24
                  199.45.252.0/23
                  199.231.248.0/22
                  205.220.208.0/21
                  207.244.136.0/22
                  208.66.120.0/22
                  209.127.236.0/22
                  216.87.44.0/23
                IPv6:
                  2602:ff7c::/36
                  2606:4b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  55039
                  63298

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:86:fd:a4:22:d1:9c:6b:a2:dd:16:c7:3e:6c:fa:27:3d:de:
         b8:73:1b:7b:5b:27:e9:4f:39:54:16:71:ef:89:f6:f8:c1:84:
         b5:9f:b0:ec:bc:4b:6f:26:67:f5:79:6c:e6:3a:3f:e6:69:1b:
         71:0e:2a:98:de:fd:58:f6:d9:91:5c:05:fb:3e:55:f9:20:06:
         78:a7:64:cd:01:e9:76:17:c2:b3:8a:ad:8e:4f:32:27:c8:38:
         b3:e9:c6:18:76:2e:96:f3:3a:8e:d8:19:47:ec:a3:38:68:87:
         61:ae:ea:35:b3:0a:35:fe:f7:2a:45:40:85:da:85:ec:49:ac:
         8e:99:c9:b0:9b:6e:90:34:3a:3c:b4:af:4c:2a:72:0f:9e:06:
         c1:54:fc:24:5f:c0:52:e4:9b:58:5a:69:f8:82:b2:26:74:4d:
         cd:16:f1:04:af:e5:74:d0:a2:df:d5:93:83:61:59:5d:12:20:
         5c:a6:f6:0b:82:2d:9e:ed:a2:bc:b8:20:de:1f:3d:34:02:30:
         31:36:52:6f:e0:73:6c:3f:a5:2e:c1:de:2b:20:46:4c:53:ff:
         2f:d4:33:8b:c7:f8:c6:61:c7:b3:98:b0:4e:75:fb:19:a3:82:
         f7:97:5e:4b:bc:24:18:08:84:1f:09:7e:ea:1e:22:40:fa:88:
         0e:a7:35:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:38:14 2025 by rpki-client