Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116.cer
File:                     7e50977e-3e40-4150-b9bd-c9bdff374116.cer (raw, json)
Hash identifier:          RfiSrh4DEThgWdIZV/719Ef2yfprB74beL62nKMH+0Y=
Subject key identifier:   39:74:F0:F3:9E:E6:A1:66:E4:88:BE:F5:90:BE:B2:EC:91:81:5D:97
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858490714634B12B00DEBAE546200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/7e50977e-3e40-4150-b9bd-c9bdff374116.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 01:45:33 +0000
Certificate not after:    Thu 03 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 549
                          IP: 205.211.94.0/23
                          IP: 2606:b340::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:14:63:4b:12:b0:0d:eb:ae:54:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb 28 01:45:33 2025 GMT
            Not After : Jun  3 00:45:33 2027 GMT
        Subject: CN=7e50977e-3e40-4150-b9bd-c9bdff374116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:61:b5:be:4f:04:c7:eb:05:12:f3:b7:e3:eb:
                    18:fa:63:2f:7a:01:5e:1b:ec:0d:47:9e:06:ce:47:
                    13:00:3a:69:79:cf:85:09:f3:49:8f:6a:c0:93:15:
                    c8:ef:63:54:4e:fd:fc:46:90:45:37:a5:f8:84:68:
                    f7:bc:af:8e:11:f4:78:43:da:c1:94:de:f7:b0:00:
                    08:76:b9:5e:d1:7f:58:82:3e:7e:80:fe:03:28:a3:
                    6b:05:24:5a:fd:1c:f3:5a:ff:4a:10:1a:97:71:2f:
                    05:6d:5d:77:da:a5:12:46:66:ac:cf:bb:3b:dd:82:
                    98:30:9a:56:02:27:ed:94:cf:72:b4:08:ec:65:7c:
                    f9:8f:27:39:b6:87:9d:14:fd:4e:87:39:5d:ef:45:
                    8c:68:d9:3f:08:e7:33:b2:5e:cc:99:6b:82:30:a2:
                    67:6d:f0:fc:f7:2c:6c:8e:de:ea:09:70:0a:2d:14:
                    77:6b:e9:ca:6b:b5:5a:93:60:bb:88:9b:24:46:21:
                    20:ba:da:6d:d9:a1:d7:09:05:0a:a4:d2:52:e3:4f:
                    ee:53:d6:c5:a7:ea:87:de:33:a7:6a:be:ce:d2:f8:
                    27:8d:29:9d:aa:a4:a4:b1:37:c7:02:50:1e:16:63:
                    38:d3:47:92:97:f4:ab:5c:c9:3f:ca:22:44:c0:56:
                    e8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:74:F0:F3:9E:E6:A1:66:E4:88:BE:F5:90:BE:B2:EC:91:81:5D:97
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/7e50977e-3e40-4150-b9bd-c9bdff374116.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.94.0/23
                IPv6:
                  2606:b340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  549

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:ff:e7:e5:55:23:12:dd:8d:0a:7a:3a:9b:f5:fd:cd:6b:
         08:21:5e:58:8e:1b:78:01:d9:55:66:17:5b:49:dc:c9:a6:56:
         8c:e5:29:13:d2:f9:a3:29:fa:3a:70:cc:77:3c:07:85:1c:e1:
         5c:f5:9c:26:e8:1d:fe:89:4a:87:c2:40:20:9b:eb:e8:fb:67:
         8b:df:88:e2:43:d8:8d:ee:e3:9a:a4:1d:1d:87:60:fd:05:4f:
         9e:6b:fc:1b:c0:e5:bb:33:6e:38:6b:f0:bf:88:83:87:56:74:
         ca:99:e5:ba:62:56:6d:70:d8:d7:b1:76:2f:5b:4e:b6:2a:12:
         ff:0b:9f:c4:9b:46:ff:f3:69:fc:b5:a9:cf:29:ae:bd:6c:ef:
         83:11:6c:ac:73:d1:76:65:ab:02:09:58:9c:b1:0d:83:a2:5e:
         e4:5a:ab:6e:e7:46:e0:db:1b:f1:f1:74:37:58:3f:d9:33:e4:
         ee:25:1f:32:cf:d1:bd:71:93:92:ee:40:13:c3:01:e3:cd:c2:
         d3:9d:e9:37:9e:5c:e2:17:39:03:b1:a5:f7:26:25:f9:4d:46:
         e7:73:78:b1:ff:df:6e:fa:0c:fa:ba:72:53:f9:c2:73:08:51:
         9c:2c:a2:7e:9b:47:54:7c:be:57:96:dc:65:9f:40:d8:7b:0e:
         28:8f:d6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:20:44 2025 by rpki-client