Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040.cer
File:                     a0b0a14e-6768-4444-a710-ff902d319040.cer (raw, json)
Hash identifier:          1SP45tQ+4bmMtg9ak/jae/EpOO1ntK9IsrKtX08PB7A=
Subject key identifier:   88:1F:DD:F5:D1:6A:C8:B3:52:3B:D5:27:D9:6C:6F:8E:7F:4C:54:1A
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F432858490714633A3B1276BD5D387800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/a0b0a14e-6768-4444-a710-ff902d319040.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 01:45:33 +0000
Certificate not after:    Thu 03 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 26828
                          IP: 208.84.160.0/21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:14:63:3a:3b:12:76:bd:5d:38:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 28 01:45:33 2025 GMT
            Not After : Jun  3 00:45:33 2027 GMT
        Subject: CN=a0b0a14e-6768-4444-a710-ff902d319040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:c8:0e:74:94:73:1f:c4:d4:cb:db:b4:c1:
                    3c:95:fc:96:43:ad:81:53:9e:a8:41:82:b1:55:07:
                    50:76:c8:9d:c8:0f:3f:6a:94:68:dc:cb:03:10:ce:
                    a3:2f:e9:d8:7a:4c:7f:86:21:94:3e:2a:03:45:f1:
                    84:b3:b5:16:62:41:8e:75:1a:27:40:8e:70:91:35:
                    65:0b:3e:03:2b:a6:55:1c:c0:b9:e4:2c:b9:59:ac:
                    76:90:d2:20:01:24:61:62:34:0a:8f:e9:51:d8:b3:
                    d8:94:83:cf:00:da:18:0d:f6:83:27:9a:0c:c4:0d:
                    45:f4:93:6e:d7:a6:b5:ec:dc:93:68:87:04:39:e9:
                    10:6f:c4:2c:16:eb:e9:50:5e:d6:9f:21:58:f5:bc:
                    c6:a4:a1:09:ca:84:8d:11:47:b5:bd:d1:b5:8c:52:
                    50:c6:38:f7:99:6b:e1:b8:a2:72:70:de:94:fc:e3:
                    8a:4e:75:15:cd:ae:bf:f6:8b:ee:5c:3b:9c:f1:ed:
                    23:41:a4:32:a0:b8:cf:db:25:16:74:93:0f:4b:ab:
                    a2:18:34:3a:29:27:4f:6d:3c:5d:61:cc:4c:bf:7e:
                    9e:e2:de:d1:20:bc:85:c5:47:12:b5:7c:ab:fd:2a:
                    9d:d5:e4:1a:52:9e:08:cb:69:24:b2:00:4d:3e:c8:
                    aa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1F:DD:F5:D1:6A:C8:B3:52:3B:D5:27:D9:6C:6F:8E:7F:4C:54:1A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a0b0a14e-6768-4444-a710-ff902d319040/a0b0a14e-6768-4444-a710-ff902d319040.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.160.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26828

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:06:b0:47:08:01:22:4f:b4:ab:b1:a3:90:06:f9:22:c5:6d:
         a9:06:f4:7f:ef:29:a0:0a:6b:f3:d8:ad:fa:1a:fb:6e:77:5c:
         f0:26:29:e5:b2:40:48:ee:e6:a5:24:8b:cb:c4:28:d8:6e:39:
         d7:8b:76:eb:5a:77:9a:ae:2d:60:ad:ae:82:b4:27:49:a6:eb:
         cb:b2:ec:3c:1c:53:d1:a6:45:5f:c0:1f:6f:73:ca:f2:b9:60:
         11:24:c5:54:92:ff:cd:a4:50:c2:ab:7f:0d:f8:59:35:45:97:
         d3:c0:52:6b:a4:61:d0:72:01:7d:39:92:15:3d:50:71:64:7d:
         b3:ee:81:03:02:f7:bf:cd:3d:a2:0e:7e:1f:db:dc:2d:f5:79:
         fe:6d:4f:73:8f:ae:2b:f0:f1:97:8e:62:38:1e:9b:fa:e8:94:
         30:29:31:df:be:5e:3b:32:71:ee:71:fd:86:f7:44:e9:85:a2:
         6e:9e:9a:58:18:6a:3b:3a:9a:9a:9f:fd:7e:77:44:19:3d:84:
         35:cc:20:da:f7:41:ac:11:28:4a:04:f5:3a:5a:8f:06:fa:50:
         8d:a2:3f:ea:5f:83:4f:21:e1:99:f2:65:9f:13:cf:79:2b:9d:
         28:f8:8b:b7:09:16:ff:2b:bc:54:29:bf:5a:c8:1f:6e:29:fe:
         67:92:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:20:35 2025 by rpki-client