Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b.cer
File:                     4266161f-2cd7-4d22-a980-bfb4d861e17b.cer (raw, json)
Hash identifier:          KOdMGqnoWSMYhDlnh6FoVIJsgOOhHakVEtcODRiP89A=
Subject key identifier:   C2:5E:05:A1:A1:3E:84:68:0D:00:F5:AA:13:25:7C:00:10:0C:A2:85
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285849017F03890682D81499C0BE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Feb 2025 01:45:33 +0000
Certificate not after:    Tue 01 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 400421
                          IP: 138.84.204.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:01:7f:03:89:06:82:d8:14:99:c0:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Feb 26 01:45:33 2025 GMT
            Not After : Jun  1 00:45:33 2027 GMT
        Subject: CN=4266161f-2cd7-4d22-a980-bfb4d861e17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:b0:7c:82:af:e8:4d:76:42:e4:14:5a:ec:
                    50:b6:a8:20:9f:ef:e8:8c:c4:35:b4:c1:75:1e:46:
                    5b:0a:8d:69:09:51:a2:13:47:43:a9:35:05:97:d2:
                    9c:85:d0:37:17:e0:00:ba:7f:df:26:0f:1c:48:82:
                    53:42:15:12:99:1d:01:2f:5e:ef:94:a0:b1:86:ac:
                    31:3d:35:9c:9e:16:5b:45:3f:e9:51:80:12:2d:06:
                    da:2c:c6:ce:54:dd:bd:51:67:d2:8b:e6:4c:b7:5a:
                    68:06:7d:bf:e6:5e:ae:4b:54:82:08:2e:b7:61:9d:
                    c0:16:f2:91:a2:89:4d:7d:d8:d9:75:47:4f:57:6f:
                    fd:70:8c:e8:38:fa:af:95:ba:98:ef:a1:63:b0:b6:
                    21:4f:7a:41:fe:d1:62:88:aa:f1:fa:27:5d:e1:32:
                    71:0a:0e:72:81:7b:df:56:64:82:85:92:6d:42:dd:
                    e1:3d:93:9a:4a:4a:d7:7f:8c:54:60:ae:ca:5a:34:
                    16:74:49:7e:66:78:04:16:8e:64:ad:37:6d:2f:19:
                    3c:d3:c2:92:7c:e9:f6:d3:66:a4:e0:06:0d:dd:cb:
                    0a:ff:79:2b:9c:f9:c4:7c:04:62:13:e4:4b:d0:d0:
                    97:d9:98:ff:47:75:f7:13:ea:99:7e:ae:b5:91:b3:
                    8f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5E:05:A1:A1:3E:84:68:0D:00:F5:AA:13:25:7C:00:10:0C:A2:85
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4266161f-2cd7-4d22-a980-bfb4d861e17b/4266161f-2cd7-4d22-a980-bfb4d861e17b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.204.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400421

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b3:0d:42:97:eb:bf:1d:9b:17:2a:1f:10:92:3a:d6:8f:15:
         24:a2:5c:0a:40:fa:e4:5c:8b:6f:3e:12:90:ba:bd:cf:6d:71:
         7e:69:61:a5:99:e3:60:0a:17:32:a3:b2:55:e8:7c:a6:ae:48:
         17:2d:f3:f7:13:f3:87:6c:f3:f8:89:cc:d4:2b:f6:b0:81:a2:
         f4:45:28:15:b6:a4:0a:bd:fa:06:76:02:3b:53:a8:19:c1:8a:
         fc:ae:b8:48:1e:03:f0:85:b7:8a:2f:f3:6c:12:5c:d6:5c:1c:
         30:62:40:f8:4b:13:57:68:b9:00:4a:67:da:58:e6:6b:ed:0a:
         49:b3:90:48:8e:1b:88:6d:2b:52:e0:a6:7c:17:80:d0:ba:6f:
         26:16:d2:61:0f:4b:e4:9f:d2:93:f3:d5:af:e8:e3:14:6b:1c:
         9c:81:af:02:97:bf:54:f1:58:ad:cc:61:65:6a:26:f8:85:c0:
         bc:f4:9d:93:e7:e5:b1:5d:27:34:a3:8a:b5:be:81:d6:45:cf:
         8a:3c:d3:dc:a3:d6:e6:72:f7:6c:ac:70:10:8e:91:26:22:d1:
         0c:09:86:65:bd:c6:e8:13:1c:f0:df:6a:3c:b0:1c:b8:77:0f:
         b3:b9:cf:78:7d:51:7f:5b:dd:69:63:17:c8:d4:95:f2:2a:94:
         2b:67:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:15:10 2025 by rpki-client