Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
File:                     e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer (raw, json)
Hash identifier:          dLVAsrLdL39qj5r2efoSMTkxx8O8hQaXpolzFEMXL54=
Subject key identifier:   50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285848C413F8D5E9DDFB8D25B6D180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Feb 2025 01:45:34 +0000
Certificate not after:    Mon 10 May 2027 00:45:34 +0000
Subordinate resources:    AS: 393960
                          IP: 23.139.0.0/24
                          IP: 23.184.240.0/24
                          IP: 66.85.44.0/22
                          IP: 72.18.72.0/22
                          IP: 172.93.120.0/22
                          IP: 2602:ff49::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:13:f8:d5:e9:dd:fb:8d:25:b6:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb  4 01:45:34 2025 GMT
            Not After : May 10 00:45:34 2027 GMT
        Subject: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:b7:9b:de:a9:49:5e:76:da:4e:56:04:b2:
                    2e:22:ba:7f:9e:50:2c:e0:61:1a:b2:6d:07:d4:1d:
                    8c:9d:0a:79:85:ab:62:a0:15:67:c6:f5:b3:d9:b6:
                    a5:b2:7a:17:f6:e4:c6:30:e3:cb:5c:e3:33:97:cc:
                    77:63:74:f9:8a:2a:0b:f7:40:a5:dd:50:82:8a:b9:
                    10:d3:20:c4:8a:f3:26:54:16:d3:b0:08:85:73:f8:
                    8c:0f:45:6d:bf:de:98:7e:5b:8f:89:fa:85:da:af:
                    13:bf:2c:00:af:92:c6:37:d1:fb:da:86:bc:89:de:
                    f1:04:0e:07:05:59:75:d7:7b:fd:ba:2c:49:d8:43:
                    c0:69:c3:ba:7a:65:62:a0:bc:18:5a:55:74:b3:35:
                    a3:ed:80:fb:7e:41:34:5a:5c:53:5f:8b:3f:db:6c:
                    b1:c1:28:97:03:43:7d:10:8e:10:8d:c6:3e:58:06:
                    f3:c3:a5:63:1e:58:6f:11:33:35:74:8c:5f:f6:92:
                    cb:d7:41:e6:10:c9:5b:e0:b2:d0:08:ea:a2:e0:fc:
                    68:20:76:44:87:72:07:06:6f:a5:e0:94:ff:ec:d1:
                    e4:ed:7d:e6:8e:ea:57:36:17:ae:b6:9d:e2:cf:01:
                    e1:2f:cc:de:38:02:9e:05:12:b0:56:2b:83:0e:fb:
                    5e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.0.0/24
                  23.184.240.0/24
                  66.85.44.0/22
                  72.18.72.0/22
                  172.93.120.0/22
                IPv6:
                  2602:ff49::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393960

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f8:af:f4:fc:fb:f3:f7:20:69:23:0b:35:8e:4e:bc:33:0b:
         08:c4:b3:09:9e:f5:2e:4a:95:63:b2:fb:77:65:43:70:fd:89:
         8f:0f:2a:4d:39:d9:5e:b5:3c:a3:a3:5d:9d:23:f8:8c:5f:63:
         84:e1:70:5a:a8:bb:91:75:6b:be:aa:e9:10:f8:a6:f2:2a:2e:
         7d:e4:80:74:ad:cf:94:50:6d:c3:66:ab:73:1c:44:ec:fd:38:
         95:df:f3:01:f6:7c:4a:ab:42:5c:3c:3c:02:d1:35:e7:9a:27:
         b5:0b:61:8b:24:37:9c:ff:40:14:c8:f9:c1:ca:4f:e7:c1:7c:
         94:d3:40:5e:c8:d1:b6:5b:0d:e8:6f:cf:79:59:68:60:cc:31:
         45:f9:f0:9a:67:60:b3:bd:37:59:6f:fd:c0:92:15:3b:55:01:
         a9:24:9a:ca:ca:a7:c6:8d:03:ad:99:f4:cb:b9:e9:12:e8:3c:
         9e:4c:28:5e:6b:ac:c8:93:78:25:5f:60:64:c9:b4:00:50:43:
         79:a5:a0:a8:e9:19:7f:af:f0:b9:01:06:c4:4b:b7:e1:aa:ff:
         4c:eb:a0:6a:41:76:94:87:63:a0:3f:ad:af:eb:6f:d8:b2:f2:
         eb:db:e2:a6:53:27:ea:3b:22:56:53:dc:94:a9:31:fd:ec:2c:
         92:4a:89:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:22 2025 by rpki-client