Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.cer
File:                     a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.cer (raw, json)
Hash identifier:          lAVet3ZAV2vcAv9fSHYnPPymbrafmynQqiOl7YLkzaU=
Subject key identifier:   C6:16:7B:95:BB:5B:EF:FC:BE:4B:AB:89:06:71:A6:53:41:1D:43:DD
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584840DDD05CBD76EF6D52855980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 19 Dec 2024 01:45:32 +0000
Certificate not after:    Wed 24 Mar 2027 00:45:32 +0000
Subordinate resources:    AS: 40464
                          IP: 135.84.48.0/22
                          IP: 2607:6700::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:dd:d0:5c:bd:76:ef:6d:52:85:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec 19 01:45:32 2024 GMT
            Not After : Mar 24 00:45:32 2027 GMT
        Subject: CN=a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:57:58:ad:f1:4a:3c:03:3d:87:ee:6e:25:
                    67:4f:1f:6b:0c:58:6b:d4:1d:dd:9d:81:4d:2f:c1:
                    ce:69:2d:6e:e4:0b:ce:08:f1:f4:ff:6c:e0:b6:a7:
                    58:c5:1d:a7:8a:d7:9d:1e:eb:8d:e1:d8:63:1c:74:
                    56:6a:09:6c:aa:a6:40:5e:0d:0e:ba:8c:c4:3e:59:
                    ca:74:62:6e:29:e5:f6:de:cd:db:c2:86:b4:7d:d9:
                    61:82:18:b3:ee:0d:3c:d7:6b:83:30:07:4f:9d:eb:
                    22:48:d8:d9:d8:f2:33:89:2a:7f:ca:98:c4:2a:53:
                    be:37:81:72:f3:76:83:e7:7c:13:64:35:c0:80:09:
                    23:48:7c:ec:d3:fb:de:1c:37:c4:c6:8b:ff:c6:f7:
                    94:2b:3b:5c:9b:f7:ed:e3:a0:83:33:c2:77:5c:da:
                    f8:90:e0:24:d5:73:bf:42:75:28:3f:1a:08:36:00:
                    d4:c2:08:55:3e:d6:46:ec:b8:16:07:54:bb:61:c2:
                    68:bb:71:c6:8b:b2:ff:38:5c:39:8c:96:55:73:f0:
                    32:15:90:ef:98:d5:8d:6c:66:9e:d0:57:fc:42:7e:
                    71:f8:bf:3a:87:d6:33:e6:2f:e2:b1:f2:dc:59:a7:
                    4b:b5:6b:f2:6a:38:e4:88:94:9d:49:bd:6b:30:bb:
                    93:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:16:7B:95:BB:5B:EF:FC:BE:4B:AB:89:06:71:A6:53:41:1D:43:DD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.48.0/22
                IPv6:
                  2607:6700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40464

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1e:62:43:07:b9:78:5d:12:13:02:95:92:28:1c:20:21:8a:
         85:c4:96:54:7c:4c:3c:4c:c1:b6:ca:01:3d:3a:fd:af:c3:8d:
         eb:6f:af:fd:f5:b9:b4:d2:f3:9a:a1:82:9d:8c:d9:03:01:30:
         66:e7:ba:28:f7:ea:be:55:05:63:42:7b:d8:f6:e2:ca:cf:66:
         94:73:a7:71:52:8b:47:d5:33:33:d9:ea:7a:4c:0f:b0:59:53:
         ba:93:e9:5c:6c:3b:a4:62:8f:65:ec:98:1e:be:fc:16:f6:dc:
         33:1e:77:47:fa:22:33:d9:99:b5:99:cb:b0:4c:ca:ba:1f:18:
         5b:ad:3f:bf:42:a6:fc:3b:ca:3e:c2:34:18:2c:9b:30:c0:36:
         8a:17:0c:5a:e9:14:52:0f:53:12:a6:92:82:f0:11:2e:0c:90:
         1e:62:e6:d4:5b:b7:1e:48:3e:91:a6:a4:93:74:f2:a2:b9:4d:
         92:67:81:0c:23:93:f6:5d:16:22:e6:4a:a0:1a:2b:86:12:1a:
         c3:0f:4f:bb:d3:87:91:9a:f9:fb:53:02:c7:c3:c5:cb:b7:df:
         7b:50:11:9b:34:22:46:87:88:9c:c2:6b:7f:9b:ed:55:58:de:
         91:2a:5d:f3:38:43:59:90:dd:90:f8:d5:e2:8b:64:98:09:bd:
         1a:ad:25:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:38 2025 by rpki-client