Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f.cer
File:                     b47dccf7-419a-4049-85b8-a6ede6c8e00f.cer (raw, json)
Hash identifier:          C/t7WkurphVV+8ouDZ0XfD8bbY78VBw6+u7vrEMIzkk=
Subject key identifier:   F5:EC:E1:29:15:58:CC:35:76:97:A3:F9:04:74:3D:03:46:9E:E8:E1
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285848A55E70EED4196B7E593E8180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 24 Jan 2025 01:45:33 +0000
Certificate not after:    Thu 29 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 63297
                          IP: 130.51.184.0/22
                          IP: 192.243.214.0/23
                          IP: 2605:cf80::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a5:5e:70:ee:d4:19:6b:7e:59:3e:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Jan 24 01:45:33 2025 GMT
            Not After : Apr 29 00:45:33 2027 GMT
        Subject: CN=b47dccf7-419a-4049-85b8-a6ede6c8e00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:63:62:54:c5:1a:7d:ee:d5:5b:d4:23:6c:5b:
                    1b:31:fa:8b:26:60:04:20:06:c5:da:bb:88:9e:0c:
                    dd:23:f7:fd:ca:60:cc:37:24:78:b2:dc:6e:6d:5c:
                    e3:85:ef:46:d5:39:ff:ae:8f:8a:b4:de:11:63:e2:
                    89:14:d8:98:1b:7a:97:fe:5a:80:8c:cb:8e:c4:e7:
                    f0:fd:db:c2:f3:49:b8:1f:90:f9:6e:5e:d9:62:67:
                    6b:95:09:a2:09:a0:e6:79:d2:f3:8b:c6:f5:b7:86:
                    d1:ec:0d:37:a0:29:aa:07:b5:e7:4a:2f:12:c8:70:
                    c8:74:8a:4f:aa:f1:17:ad:00:82:6a:cc:a3:b0:c1:
                    f5:48:d2:f7:f2:3a:ee:35:60:c6:24:10:10:3a:e1:
                    69:4e:7f:83:f3:6f:93:91:d8:8c:a4:16:ce:42:0b:
                    1c:05:1a:42:9e:f9:18:52:80:9b:0c:39:85:a0:0b:
                    d3:6c:c1:2b:01:98:bb:11:74:8d:45:23:bc:52:81:
                    37:d2:56:6a:07:05:ba:fb:0e:b0:8f:74:e2:19:7a:
                    57:49:4f:a7:0d:8d:81:47:7d:9c:3f:33:0d:ce:78:
                    2e:75:76:3c:43:c8:4c:9a:f1:46:50:5c:74:df:64:
                    3e:64:15:88:ea:7d:e1:44:25:e9:07:11:50:88:5d:
                    6e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:EC:E1:29:15:58:CC:35:76:97:A3:F9:04:74:3D:03:46:9E:E8:E1
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b47dccf7-419a-4049-85b8-a6ede6c8e00f/b47dccf7-419a-4049-85b8-a6ede6c8e00f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.184.0/22
                  192.243.214.0/23
                IPv6:
                  2605:cf80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63297

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a7:f9:4b:df:26:de:c3:15:f2:56:6f:14:36:b1:c8:30:05:
         cc:73:62:eb:a7:44:4d:6a:15:bc:46:71:d9:18:68:1d:83:8b:
         8f:ec:c6:88:26:10:4c:6a:05:78:95:28:ed:cd:4c:5a:02:6a:
         31:57:01:1a:8f:d2:20:82:a3:2d:82:02:d5:7e:67:c4:65:d6:
         89:73:f1:8b:58:f6:90:41:0e:93:4a:ec:4b:72:9d:c0:4e:9b:
         72:72:f8:04:4c:5a:a6:4e:27:85:f9:e7:23:7b:77:47:cb:29:
         65:3a:65:8f:a4:66:d2:a0:af:cf:f9:fb:27:db:7d:e1:5e:38:
         58:73:f2:9a:20:b5:23:85:bd:cf:c0:91:f1:38:e9:dd:0c:8d:
         41:58:35:77:18:ae:38:b0:84:ee:99:39:2f:ad:8f:73:e1:4c:
         77:c6:83:df:0c:41:73:5b:23:a1:49:c7:61:81:9b:94:49:15:
         35:fa:45:11:00:3c:de:47:b5:5b:f2:e9:9f:ae:b8:3d:f4:40:
         1e:87:3b:9b:aa:9c:a1:cb:12:dd:0f:77:88:fd:89:bf:87:f5:
         f6:bb:b9:1f:7c:41:10:d5:33:2c:52:60:1a:b8:1a:a5:42:f0:
         e1:4d:e4:d2:a4:c8:00:10:aa:86:46:c3:72:ae:6e:bd:fb:4a:
         f8:69:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:16 2025 by rpki-client