Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer
File:                     2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.cer (raw, json)
Hash identifier:          fBUnodT5uf5XehxSPyRmMOI4uhWxljCJOURuPMk10o0=
Subject key identifier:   B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285848519DEBFA9EB3CBA4A1085F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 25 Dec 2024 01:45:33 +0000
Certificate not after:    Tue 30 Mar 2027 00:45:33 +0000
Subordinate resources:    AS: 396000
                          IP: 138.128.248.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:9d:eb:fa:9e:b3:cb:a4:a1:08:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Dec 25 01:45:33 2024 GMT
            Not After : Mar 30 00:45:33 2027 GMT
        Subject: CN=2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:80:e6:9c:94:38:cc:9e:99:85:b2:8d:42:a6:
                    81:0e:a2:ba:7c:33:c4:e1:8e:48:10:37:b3:fa:e7:
                    95:a9:00:54:6f:82:a0:c2:55:49:4a:be:fa:fc:d2:
                    80:28:06:61:88:c2:e4:77:01:cf:06:aa:37:71:23:
                    ea:3a:77:dc:b7:c9:f2:44:46:97:1a:83:1f:6c:aa:
                    2a:b6:6e:6b:c4:7f:e1:3b:ac:4a:20:c8:cf:ee:74:
                    36:9f:8e:57:17:2a:fe:c3:5b:13:91:6c:b2:5b:67:
                    36:f6:e9:6f:d3:5b:0f:1c:4d:22:72:2a:24:33:38:
                    fb:a6:27:58:2c:27:1e:64:a7:32:be:9b:5c:6b:b2:
                    0f:6a:67:ec:c7:ab:dc:6f:5a:b4:3d:10:1b:59:82:
                    57:ec:96:54:59:d3:44:e8:ee:18:87:1b:30:a0:de:
                    0a:65:15:46:07:a3:38:d1:cd:b6:8d:ed:87:e4:8a:
                    ec:07:2c:86:37:ed:f9:df:e7:7b:96:c6:41:b8:5b:
                    67:f7:00:ad:c4:b9:9f:4d:78:0c:a8:fa:80:93:b8:
                    44:7c:9e:05:8e:61:95:d8:0c:44:2c:aa:6b:69:b1:
                    14:fd:1f:72:27:bc:e5:f6:39:1e:03:72:b9:f0:3d:
                    2e:18:ae:10:f0:24:b1:b6:16:35:9e:05:44:ca:a3:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E6:E8:04:62:4C:F1:67:1E:06:89:04:66:D1:E6:25:2D:BB:82:AD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd/2b3bcb47-5f18-46d3-9b50-63d5cbb9e9dd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.128.248.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396000

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:eb:97:ba:52:ba:3e:49:11:30:6a:d7:4a:9c:c3:66:09:
         61:fd:cf:40:0a:32:5f:d1:ea:eb:3a:f3:ea:fd:82:7a:ce:76:
         3a:26:db:8a:b2:1c:f9:a4:d8:9b:d1:bc:33:91:df:3d:32:cc:
         72:5b:9b:8f:2b:d6:10:9b:33:7a:47:f9:95:2d:a5:44:5a:ab:
         03:ba:1c:8f:6b:1b:02:46:4c:94:e6:cb:2d:e4:b8:3a:4e:88:
         a5:0f:b2:2f:c8:10:64:6a:a0:93:4e:4b:46:60:28:3b:d5:f3:
         f9:52:89:97:fa:25:8a:69:b1:09:82:29:1f:76:4c:46:61:32:
         48:34:6c:75:07:b1:1f:bb:8f:10:ad:f0:89:6a:fb:e6:2c:3a:
         1e:3d:a7:6f:1c:99:cf:11:d5:d2:35:18:18:5d:5a:92:de:03:
         56:36:7f:6c:97:b0:f7:36:e7:b2:de:a5:f9:20:0f:a7:4b:28:
         3b:d4:4b:23:9c:87:b4:aa:fd:24:bb:ba:93:f8:25:28:70:3b:
         17:e5:56:cb:e7:a4:68:19:ca:d2:1f:f1:46:f2:8a:20:19:c6:
         3b:2d:a1:24:83:8e:6d:99:33:5e:b6:13:bb:38:28:b2:a3:85:
         9b:04:e3:c8:3b:d8:04:85:ea:ff:00:d2:cf:28:c9:ec:b9:2a:
         d8:7a:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:31 2025 by rpki-client