Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955.cer
File:                     e6b50385-8dc3-40bf-b077-89afa371f955.cer (raw, json)
Hash identifier:          2mNgZ8w0ie43rqpMBQYwg6Ha9BM+eQHHbcnCFkc7bjI=
Subject key identifier:   69:0E:FE:C9:F7:C2:58:D5:A7:2B:B9:1B:30:55:61:A8:87:38:BB:4C
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285848CC7405F79616AC943883A320
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/e6b50385-8dc3-40bf-b077-89afa371f955.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 07 Feb 2025 01:45:33 +0000
Certificate not after:    Thu 13 May 2027 00:45:33 +0000
Subordinate resources:    AS: 22607
                          IP: 64.17.192.0/20
                          IP: 192.189.247.0/24
                          IP: 2620:6c:c060::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:74:05:f7:96:16:ac:94:38:83:a3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb  7 01:45:33 2025 GMT
            Not After : May 13 00:45:33 2027 GMT
        Subject: CN=e6b50385-8dc3-40bf-b077-89afa371f955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9e:98:93:10:ce:25:63:2b:64:1f:68:81:f8:
                    29:06:c5:be:58:92:5f:61:4c:b0:67:e9:ce:87:5c:
                    2f:4b:65:61:c2:db:20:9a:e3:d4:78:fd:25:e2:5c:
                    b6:d6:4b:db:47:62:f6:a6:5e:50:da:66:a0:03:b1:
                    a9:c3:25:f0:d3:f8:94:c5:48:cb:4a:95:ed:c6:b9:
                    c3:92:55:8d:0d:43:bb:6f:8f:14:e6:d2:c1:7d:e5:
                    08:db:70:32:21:2c:d2:59:05:ed:bd:47:50:97:37:
                    c9:01:ce:58:f3:09:7d:6f:9c:69:e1:f2:61:f5:c9:
                    66:b2:f8:b1:b4:b9:5f:89:a2:5e:4e:e4:c8:1a:92:
                    88:48:2b:96:9b:d1:a4:4c:ab:5d:52:31:a6:bd:3d:
                    cf:95:41:31:0a:a2:00:81:ee:71:71:77:f5:b7:b2:
                    be:b6:db:84:92:eb:c7:64:cf:05:f9:f5:31:33:da:
                    04:4e:13:4d:40:46:cd:fa:a9:98:58:43:50:be:fe:
                    cc:42:3d:69:8a:51:1d:67:14:83:5c:3b:22:ba:32:
                    58:8e:cd:8d:3b:cb:ab:f2:e5:12:da:71:d8:45:ef:
                    7c:f8:26:44:64:72:71:14:d8:0f:56:5e:6f:65:aa:
                    9e:9a:ce:d2:53:c6:43:94:00:5b:52:e7:41:fb:01:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0E:FE:C9:F7:C2:58:D5:A7:2B:B9:1B:30:55:61:A8:87:38:BB:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6b50385-8dc3-40bf-b077-89afa371f955/e6b50385-8dc3-40bf-b077-89afa371f955.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.192.0/20
                  192.189.247.0/24
                IPv6:
                  2620:6c:c060::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22607

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f0:0f:a6:82:b2:0e:61:d7:90:52:11:cb:cd:a7:a9:56:12:
         98:ee:c8:4c:65:39:ce:51:cd:e1:c4:97:ca:b4:66:99:d3:93:
         76:98:01:a9:6c:99:c4:92:aa:93:3a:04:bf:84:bd:f6:8c:3a:
         16:27:bd:19:c6:0d:ae:28:ee:74:01:b0:44:7c:6c:ba:c5:e8:
         77:35:5e:c4:d0:1c:27:1f:1d:ee:49:6f:9a:29:39:85:46:93:
         86:d3:f7:28:9d:b4:e2:f0:43:07:d0:d4:fe:bd:df:9b:d4:2c:
         ef:0c:11:48:5d:c6:f9:41:fb:c5:7e:a6:7d:fb:bf:d3:d5:76:
         9e:4a:78:2b:72:54:97:1d:bc:72:cf:d4:44:28:f9:ab:37:0a:
         02:80:27:83:1a:1c:33:1a:42:d8:98:fe:6b:36:e3:a5:cc:30:
         3a:e1:b6:e6:10:b9:a5:f1:40:e1:a8:37:fb:0d:dc:85:db:15:
         38:46:60:96:1d:d7:f7:e0:65:6c:cf:fd:e4:e1:3d:7b:1f:8b:
         3b:d9:51:71:aa:f2:ac:a2:17:53:e8:b7:4a:07:f4:2e:c8:ad:
         f3:34:03:87:05:01:a0:c6:68:67:2b:48:97:56:14:34:1b:22:
         c9:d5:c2:1b:1e:0c:ac:23:c4:1d:13:6c:b5:10:de:c0:e1:e4:
         71:8b:70:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:24:55 2025 by rpki-client