Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d.cer
File:                     66580030-eaac-4617-b624-3b0a2974a04d.cer (raw, json)
Hash identifier:          zBCJkFlxBt+vamYBvpDTpkFKay/Fa9fQu23tK1aGKRQ=
Subject key identifier:   7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858484D88A1E77235D10C55979740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 23 Dec 2024 14:39:26 +0000
Certificate not after:    Mon 20 Apr 2026 00:45:20 +0000
Subordinate resources:    IP: 199.30.216.0/22
                          IP: 2607:4440::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4d:88:a1:e7:72:35:d1:0c:55:97:97:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 23 14:39:26 2024 GMT
            Not After : Apr 20 00:45:20 2026 GMT
        Subject: CN=66580030-eaac-4617-b624-3b0a2974a04d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:8b:37:49:59:97:f6:39:21:69:46:ac:30:
                    14:f2:3d:43:41:96:2f:ff:77:dd:d3:8f:14:59:d7:
                    76:8f:82:6d:43:4e:67:1a:ca:46:20:66:61:9f:c7:
                    93:70:db:ef:2c:03:7c:9e:de:a2:9c:f2:c4:cf:f4:
                    26:f6:56:c3:a2:4a:ac:3e:76:0e:cc:21:dd:69:d7:
                    99:7f:7f:3a:fb:d8:07:3d:42:10:48:40:e0:83:9d:
                    f0:9f:fb:a9:fb:ba:38:62:21:64:af:dd:9f:e5:2e:
                    03:a8:e8:f6:46:f1:db:92:55:cf:cf:86:bf:fe:95:
                    e1:4a:13:8b:9c:03:08:25:52:7f:ad:ac:ea:c7:ab:
                    96:b9:f8:75:1f:bb:18:26:ac:fa:33:0b:ba:5a:9a:
                    26:f0:2b:29:8c:57:39:75:18:81:e9:7e:9b:9c:bd:
                    53:71:41:a6:ae:f4:75:7b:8b:0a:92:8c:ca:e2:9b:
                    83:b8:cf:39:57:8b:b3:65:0d:1e:7c:f7:da:30:b4:
                    95:9d:8b:d0:e1:ce:8e:95:8d:0b:1b:7e:53:e2:27:
                    e8:0e:3b:8f:dc:58:70:b5:4d:16:1a:2f:66:9f:a7:
                    1d:f2:55:49:6f:97:9f:ff:cc:9f:05:b1:5b:2f:c8:
                    7e:46:73:e7:d3:9f:2d:98:77:85:a0:72:a8:04:08:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:9E:7D:64:DA:9C:05:BF:C8:72:F4:15:78:B5:7E:0B:33:29:49
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66580030-eaac-4617-b624-3b0a2974a04d/66580030-eaac-4617-b624-3b0a2974a04d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.30.216.0/22
                IPv6:
                  2607:4440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:22:80:b9:7f:e3:f9:cb:a8:92:20:2d:cd:db:65:2e:d7:ea:
         c6:f8:19:25:5c:74:b9:d1:95:fe:d1:5c:8b:f3:e4:91:67:f1:
         58:64:54:cb:68:3a:f2:02:1a:d1:75:0c:83:40:70:60:1f:32:
         0e:77:9b:f4:68:a1:d1:dd:c1:6b:2b:3d:c1:92:78:b0:c3:92:
         54:44:f2:72:cb:5e:7d:2a:51:59:e5:f0:8a:30:94:ea:f9:71:
         30:91:c2:14:56:9b:43:21:d7:06:60:8e:ab:9a:c7:6e:11:d9:
         14:30:7d:bb:6a:bc:8e:8b:b0:f2:ee:f2:f6:93:9b:76:06:81:
         20:87:05:aa:4c:cf:86:18:ed:51:22:89:ce:f0:aa:f8:fe:1b:
         e4:3f:ae:20:d0:41:bb:57:d6:ae:a1:5f:67:04:55:7e:81:c9:
         f1:e4:ef:0a:5c:18:d7:a1:2d:6c:0c:4d:94:63:24:dd:e9:66:
         bf:1e:62:9f:83:16:a0:03:4a:a6:80:b3:ad:75:5f:a5:48:56:
         32:f0:86:ac:ae:40:a2:05:b6:34:ed:87:d6:d9:d1:72:94:4f:
         8e:a8:63:d3:79:9c:aa:1a:ed:a8:ed:cb:7b:14:1f:8a:ef:64:
         26:31:54:ba:c0:1c:4d:a6:71:3e:c2:1f:70:8b:38:df:ae:11:
         93:84:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:42 2025 by rpki-client