Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744.cer
File:                     4d4940f4-61c2-4251-acdb-36be83cdc744.cer (raw, json)
Hash identifier:          nW+eNXDcYkxKTlpfvIOnbR2QLvrR0dm/Y2ViOAOFVc8=
Subject key identifier:   3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285848F0BEEB5E40F7278E0704DAA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 20 Feb 2025 01:45:34 +0000
Certificate not after:    Wed 26 May 2027 00:45:34 +0000
Subordinate resources:    AS: 3672
                          AS: 5688
                          AS: 6407
                          AS: 7036
                          AS: 7443
                          IP: 50.93.160.0/20
                          IP: 67.230.128.0/19
                          IP: 108.63.0.0 -- 108.63.13.255
                          IP: 108.63.18.0 -- 108.63.21.255
                          IP: 108.63.30.0 -- 108.63.255.255
                          IP: 173.206.0.0/16
                          IP: 204.48.0.0/21
                          IP: 205.207.88.0 -- 205.207.90.255
                          IP: 205.210.104.0/24
                          IP: 207.112.0.0/22
                          IP: 207.112.8.0/24
                          IP: 207.112.16.0 -- 207.112.45.255
                          IP: 207.112.47.0 -- 207.112.69.255
                          IP: 207.112.71.0 -- 207.112.127.255
                          IP: 209.90.128.0/21
                          IP: 209.90.141.0 -- 209.90.157.255
                          IP: 209.90.159.0 -- 209.90.170.255
                          IP: 209.90.172.0/23
                          IP: 209.90.177.0 -- 209.90.187.255
                          IP: 209.90.190.0/23
                          IP: 209.183.0.0 -- 209.183.11.255
                          IP: 209.183.13.0 -- 209.183.19.255
                          IP: 209.183.21.0 -- 209.183.31.255
                          IP: 209.216.128.0 -- 209.216.136.255
                          IP: 209.216.138.0 -- 209.216.159.255
                          IP: 209.225.128.0/18
                          IP: 209.227.128.0/18
                          IP: 216.181.0.0/24
                          IP: 216.181.3.0/24
                          IP: 216.181.5.0 -- 216.181.18.255
                          IP: 216.181.21.0 -- 216.181.97.255
                          IP: 216.181.109.0 -- 216.181.119.255
                          IP: 216.181.121.0/24
                          IP: 216.181.124.0/24
                          IP: 216.181.126.0 -- 216.181.129.255
                          IP: 216.181.131.0 -- 216.181.157.255
                          IP: 216.181.166.0 -- 216.181.229.255
                          IP: 216.181.232.0 -- 216.181.247.255
                          IP: 216.181.250.0 -- 216.181.255.255
                          IP: 216.254.128.0 -- 216.254.157.255
                          IP: 216.254.160.0 -- 216.254.168.255
                          IP: 216.254.170.0 -- 216.254.196.255
                          IP: 216.254.198.0/23
                          IP: 216.254.204.0 -- 216.254.208.255
                          IP: 216.254.210.0 -- 216.254.222.255
                          IP: 2604:7f00::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:be:eb:5e:40:f7:27:8e:07:04:da:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 20 01:45:34 2025 GMT
            Not After : May 26 00:45:34 2027 GMT
        Subject: CN=4d4940f4-61c2-4251-acdb-36be83cdc744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:23:91:79:3c:9a:50:65:cf:aa:fb:93:58:
                    b1:02:d6:34:3b:f0:34:ee:5f:12:76:a3:65:ad:bc:
                    79:37:1b:8a:aa:18:23:47:be:61:d1:b1:14:1c:51:
                    f8:b2:85:a5:b5:dd:e2:9c:e2:71:d8:a7:63:5b:67:
                    ba:d3:d8:62:4d:2a:01:51:f3:c9:0f:07:b1:bb:a0:
                    59:5d:74:11:7a:4c:75:6e:4a:75:69:7e:4a:c0:8f:
                    e0:dd:ff:99:8a:7d:c4:60:09:fd:f5:e0:f0:ca:95:
                    9e:fd:a0:87:3e:56:87:52:ce:31:8c:54:27:e0:1d:
                    09:5a:f0:12:74:6c:95:01:95:a1:d8:fc:04:7c:3a:
                    75:11:3b:6d:64:61:bc:fd:46:25:5d:87:2c:e0:d3:
                    05:7f:e0:9e:f0:24:e5:6c:c8:95:bb:bf:15:90:81:
                    f7:31:4a:45:9b:ca:a4:07:9e:45:cb:12:02:e8:a8:
                    df:6c:90:6d:6e:01:85:5f:c1:e2:78:57:b2:9c:3c:
                    d7:ea:35:e0:0a:19:46:5a:de:48:17:50:01:28:5e:
                    5f:34:fa:00:d2:40:c8:b5:6c:41:cc:6a:47:d3:17:
                    fb:55:bc:b7:22:bb:fd:e1:28:67:f0:5e:c6:f0:94:
                    9a:e6:41:09:7c:2e:19:f1:97:ba:19:4e:fa:e3:ff:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D7:AF:D6:4E:83:98:16:38:2C:81:FD:92:56:D2:87:6A:33:99:C2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4d4940f4-61c2-4251-acdb-36be83cdc744/4d4940f4-61c2-4251-acdb-36be83cdc744.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.93.160.0/20
                  67.230.128.0/19
                  108.63.0.0-108.63.13.255
                  108.63.18.0-108.63.21.255
                  108.63.30.0-108.63.255.255
                  173.206.0.0/16
                  204.48.0.0/21
                  205.207.88.0-205.207.90.255
                  205.210.104.0/24
                  207.112.0.0/22
                  207.112.8.0/24
                  207.112.16.0-207.112.45.255
                  207.112.47.0-207.112.69.255
                  207.112.71.0-207.112.127.255
                  209.90.128.0/21
                  209.90.141.0-209.90.157.255
                  209.90.159.0-209.90.170.255
                  209.90.172.0/23
                  209.90.177.0-209.90.187.255
                  209.90.190.0/23
                  209.183.0.0-209.183.11.255
                  209.183.13.0-209.183.19.255
                  209.183.21.0-209.183.31.255
                  209.216.128.0-209.216.136.255
                  209.216.138.0-209.216.159.255
                  209.225.128.0/18
                  209.227.128.0/18
                  216.181.0.0/24
                  216.181.3.0/24
                  216.181.5.0-216.181.18.255
                  216.181.21.0-216.181.97.255
                  216.181.109.0-216.181.119.255
                  216.181.121.0/24
                  216.181.124.0/24
                  216.181.126.0-216.181.129.255
                  216.181.131.0-216.181.157.255
                  216.181.166.0-216.181.229.255
                  216.181.232.0-216.181.247.255
                  216.181.250.0-216.181.255.255
                  216.254.128.0-216.254.157.255
                  216.254.160.0-216.254.168.255
                  216.254.170.0-216.254.196.255
                  216.254.198.0/23
                  216.254.204.0-216.254.208.255
                  216.254.210.0-216.254.222.255
                IPv6:
                  2604:7f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3672
                  5688
                  6407
                  7036
                  7443

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ec:62:b6:19:27:68:09:07:20:16:23:8f:e3:d4:b5:fe:c2:
         3a:3f:3a:9e:96:3b:52:03:97:ab:16:c0:6e:4b:2a:43:93:fa:
         24:fe:2d:9d:ef:70:23:ef:bd:61:b1:e5:bb:83:ac:9b:52:74:
         a9:06:3e:db:d2:12:52:7d:27:2c:18:00:c7:8e:28:5d:d0:bd:
         ed:d7:56:07:07:18:6b:63:6a:77:43:62:b3:d1:e5:9f:9c:4d:
         8a:e5:cf:a9:08:a3:ff:7a:7f:de:81:87:fa:b2:10:ec:70:ed:
         ee:ff:48:e1:c1:2e:c8:4f:0a:8e:b5:33:d1:fe:f4:07:12:d8:
         12:0e:7a:00:37:c1:d7:20:31:0f:8a:01:33:07:da:4e:78:95:
         ce:67:28:94:d5:39:61:b5:7e:ef:ec:95:18:2e:c1:fe:80:45:
         d2:d8:46:1a:32:84:cd:63:df:4e:39:c2:5c:a9:5e:93:a2:d9:
         03:6d:c6:06:e2:99:11:e2:1d:75:30:b9:b7:d4:ff:be:81:41:
         ae:f2:45:fb:62:3d:d2:57:3f:1d:45:b8:fe:3d:e4:b8:10:dd:
         1e:32:10:5d:99:b5:1b:d6:65:53:a4:5d:84:e4:37:ee:b2:13:
         83:65:a3:be:ec:6b:b7:e8:f4:09:e0:43:e8:4e:4e:60:cf:fa:
         30:cb:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:03:47 2025 by rpki-client