Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f.cer
File:                     4bc701e5-cff5-4660-9102-08342e5ad35f.cer (raw, json)
Hash identifier:          fRZcZENTOATEXJuDfR4YLfKdeE1IfmHKb2ZOMqWRtzA=
Subject key identifier:   62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F432858487E48DD03BB5629B21983FE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 10 Jan 2025 01:45:33 +0000
Certificate not after:    Thu 15 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 17120
                          IP: 2620:0:f0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:48:dd:03:bb:56:29:b2:19:83:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Jan 10 01:45:33 2025 GMT
            Not After : Apr 15 00:45:33 2027 GMT
        Subject: CN=4bc701e5-cff5-4660-9102-08342e5ad35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:73:90:62:a4:18:30:40:c4:45:2f:a5:68:
                    a8:37:a1:6e:4e:5c:fb:dd:ac:c1:08:b0:8f:7c:be:
                    05:56:7e:c3:5f:09:9b:3d:4d:27:65:eb:52:9d:1c:
                    f7:c1:6e:84:12:e8:d1:94:03:8d:81:2f:f9:f8:66:
                    7d:be:3b:59:56:38:59:a0:03:d9:de:db:b4:39:87:
                    5f:6f:56:ab:5c:ec:a1:45:a6:70:e8:98:10:67:c6:
                    86:ef:7b:e3:5c:df:e2:8c:c2:f7:7a:ae:ea:96:20:
                    7e:db:d8:43:08:3d:5b:a0:97:e2:11:f9:e0:b0:1c:
                    f8:64:56:93:e2:28:f1:32:67:23:32:f8:6c:52:96:
                    0d:9c:2d:b3:5e:ef:da:53:8b:dc:30:d0:54:97:5f:
                    e7:55:dd:8a:83:fa:83:fc:ff:09:49:a4:2e:f1:6a:
                    f4:18:53:1b:5d:a1:46:c7:4e:58:1f:65:01:b6:03:
                    cb:42:9d:47:cf:67:b3:55:d5:07:6c:81:98:6e:b8:
                    fd:e3:ef:50:23:a2:23:46:82:f7:46:4b:65:49:af:
                    8f:98:d7:99:4c:08:f3:10:ee:9f:2f:1e:30:57:39:
                    d3:4f:d4:b9:c7:52:64:22:d6:65:dd:76:fb:ce:57:
                    80:ec:4b:51:f2:fc:c1:12:e7:24:2b:21:72:16:65:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:64:53:7E:B9:56:B8:89:57:2C:44:D4:41:A2:1F:FA:5E:01:BB:B6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4bc701e5-cff5-4660-9102-08342e5ad35f/4bc701e5-cff5-4660-9102-08342e5ad35f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:f0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17120

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2a:b2:58:8a:36:45:5f:b7:90:ce:2d:37:88:c3:0e:b3:d5:
         c2:e0:04:6e:11:9b:32:52:20:94:a9:e6:d8:ad:cf:17:3a:b1:
         43:67:40:e5:f8:a4:44:c4:3a:22:d5:0d:1b:17:c1:b4:52:00:
         a8:fa:56:5c:3f:f2:97:b6:3b:88:a6:01:46:24:6b:10:4c:f8:
         b3:34:41:c0:e7:73:92:3d:87:8d:44:91:72:e2:46:d6:94:67:
         75:54:16:38:7e:10:0b:81:52:9f:e9:aa:3c:36:ab:83:b3:a8:
         ee:02:18:03:b2:08:ff:9d:b1:11:48:5c:9a:c0:d5:aa:0f:95:
         b2:97:10:32:5e:ff:73:07:fa:57:1e:1c:3a:d2:34:c9:31:7f:
         a5:62:69:b1:b9:76:4d:31:10:f3:60:0d:29:ef:9e:c3:87:cb:
         50:8f:82:e4:73:a5:f4:25:f7:a8:de:84:8b:1b:71:1d:75:37:
         49:aa:d8:bb:04:7c:cb:79:83:c0:78:8b:51:47:84:51:ce:6a:
         f1:97:bc:7a:75:3f:83:54:34:34:2e:88:45:93:30:b8:25:0a:
         64:dc:c1:08:1d:ac:cd:f6:6c:74:e6:b3:df:9c:02:0e:18:e1:
         54:34:fd:93:a8:cc:cc:0d:6d:1d:95:5b:ce:5f:28:cb:36:cb:
         28:0c:f0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:34 2025 by rpki-client