Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer
File:                     d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer (raw, json)
Hash identifier:          /8DvaV0NQZPVnG1sOGzi04LEjjYMpTgApMf9acDGenY=
Subject key identifier:   49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285848705373531DCFE95EF3BDF980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 05 Jan 2025 01:45:33 +0000
Certificate not after:    Sat 10 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 21557
                          IP: 23.128.104.0/23
                          IP: 64.15.208.0/20
                          IP: 75.127.48.0/20
                          IP: 104.218.188.0/22
                          IP: 147.92.120.0/21
                          IP: 162.219.200.0/22
                          IP: 2605:5300::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:53:73:53:1d:cf:e9:5e:f3:bd:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jan  5 01:45:33 2025 GMT
            Not After : Apr 10 00:45:33 2027 GMT
        Subject: CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:de:c2:dd:18:9a:4b:17:49:bc:b0:1d:59:
                    06:7a:4f:9f:f7:46:e3:b8:ef:f0:0c:67:1e:4f:21:
                    fe:0d:ed:1e:11:07:4b:ca:4f:d6:a0:d3:03:28:db:
                    d3:dd:23:ba:c7:0b:3a:2e:ae:96:b5:c7:43:93:ee:
                    49:85:86:02:1e:68:92:10:ee:46:51:ff:9b:6d:ee:
                    fc:bc:7c:f6:e8:db:21:29:84:66:dd:2e:c0:1c:0b:
                    e9:1a:44:37:c8:b6:e6:26:6b:50:c4:e4:26:9b:fb:
                    2f:42:53:a5:41:87:56:7f:69:60:05:8a:de:c6:5c:
                    a5:9d:7c:27:da:83:74:0a:a2:b0:a5:d5:68:1d:4a:
                    66:a3:44:62:62:83:83:dd:0b:d7:f8:17:1b:e3:9c:
                    fc:b8:ab:3f:99:f2:b6:e2:60:10:54:03:84:a3:4f:
                    a2:f7:81:46:98:a6:81:19:67:88:81:b2:66:78:50:
                    a1:49:1b:ca:f2:79:db:73:f7:1d:7f:0e:f4:11:30:
                    6c:ee:fe:73:0f:e0:e6:eb:c1:1a:26:fb:d9:50:f2:
                    26:e3:9d:0d:ad:03:36:b8:62:ec:05:1f:ae:5b:40:
                    dd:7d:d4:2b:50:a7:f8:60:93:81:cd:c6:fe:0e:7f:
                    70:3a:0c:ad:8c:02:77:99:a4:54:b8:41:ab:b8:2c:
                    d0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.104.0/23
                  64.15.208.0/20
                  75.127.48.0/20
                  104.218.188.0/22
                  147.92.120.0/21
                  162.219.200.0/22
                IPv6:
                  2605:5300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21557

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:4e:66:ce:0a:8f:48:2d:6b:1a:ef:20:00:b1:1a:dc:04:
         07:14:e2:60:fa:68:92:bf:78:14:66:d6:95:33:6d:89:3d:52:
         f2:22:c6:4f:e9:81:0d:33:64:e0:61:a6:16:9f:e3:4d:de:dd:
         f7:e7:5b:9b:2a:e2:1a:30:09:aa:90:0c:db:4b:39:8a:33:20:
         1f:00:61:0f:7d:19:73:98:fa:2a:49:83:b1:32:30:ee:14:66:
         58:d7:16:e9:c8:08:0d:cb:b0:33:6d:d3:44:e3:9b:8e:7b:a2:
         8f:a6:3f:a4:39:92:51:eb:9d:05:41:c0:2b:82:20:6a:64:7c:
         47:e1:fa:46:86:a4:00:92:98:5a:67:75:d5:01:ca:60:ae:43:
         6a:5b:30:e0:d5:33:f0:89:0a:93:91:02:35:f2:58:5b:e4:e7:
         ad:fa:8e:4c:9c:dd:c3:1a:40:f4:a1:da:1e:44:49:97:d1:33:
         d7:03:e3:e2:fc:eb:50:77:d6:41:19:e3:36:90:4c:10:7d:e6:
         02:68:2f:76:32:f2:51:07:e1:e0:c9:47:fd:94:d5:9e:45:fb:
         ba:36:be:a0:73:93:44:34:6a:9e:90:29:d2:f8:5e:6a:dc:b5:
         e8:0a:3b:ee:69:ab:6e:57:7b:cc:14:2d:d2:37:17:19:e6:17:
         1f:2b:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:01 2025 by rpki-client