Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
File:                     00fd3378-4bc3-4216-94f7-90c7efb47d80.cer (raw, json)
Hash identifier:          C9A1jypWlZnUnShy5xQCWXjVFYbbRHYYb0Qfskj3iu4=
Subject key identifier:   4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858483B487099A5A75BF9762A9080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Dec 2024 01:45:32 +0000
Certificate not after:    Mon 22 Mar 2027 00:45:32 +0000
Subordinate resources:    AS: 31852
                          AS: 46133
                          IP: 2.57.164.0/22
                          IP: 208.103.174.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:48:70:99:a5:a7:5b:f9:76:2a:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 17 01:45:32 2024 GMT
            Not After : Mar 22 00:45:32 2027 GMT
        Subject: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:cd:5e:82:8d:50:c8:b3:23:15:cd:d8:60:
                    5d:e3:73:25:f3:c6:75:f5:d0:69:28:8f:66:a4:bc:
                    b6:95:f4:e9:33:cd:ae:3f:78:3c:2f:09:1b:d1:ff:
                    5d:ca:39:7c:53:81:ea:ed:0c:cb:98:b4:bb:8a:c4:
                    d1:14:d2:69:3c:85:70:c5:88:03:99:c1:74:4b:92:
                    fe:97:82:7f:ce:20:34:3a:e0:47:3b:97:69:d0:c6:
                    4b:a1:f5:92:73:09:ec:89:2c:3c:0d:fe:84:53:1a:
                    09:90:a2:df:0e:da:76:a8:95:2d:81:0d:e9:63:72:
                    0d:d9:02:5b:98:54:7a:2d:84:b8:10:9a:e4:64:43:
                    1d:e7:4c:54:da:b5:29:47:d0:f7:8c:82:9a:e6:4e:
                    66:c3:13:51:2e:40:68:a4:a7:1f:75:d9:24:6a:a2:
                    19:9c:f3:af:df:26:d3:e5:16:9b:c0:b2:2d:a4:e4:
                    ee:73:d9:25:22:62:f4:76:cf:f5:05:be:4e:13:95:
                    38:19:17:b2:11:81:f1:d3:d8:dc:c6:f0:6a:26:88:
                    3e:5d:0e:d6:24:35:4b:1d:1d:bf:f8:67:cf:b5:05:
                    af:01:2e:00:dc:36:52:03:fb:91:54:a0:c7:c8:40:
                    c8:2c:49:42:86:5c:27:65:e4:c3:31:8d:c8:48:df:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.164.0/22
                  208.103.174.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  31852
                  46133

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:f7:a1:f1:5b:9b:0e:9e:27:05:3f:7f:ba:b2:32:0c:56:
         64:a9:00:ee:91:eb:0c:0a:0e:19:3f:8d:48:91:34:b2:f3:c8:
         59:f6:a7:8e:34:c9:9e:7d:94:77:6d:99:40:2b:f2:9c:8f:6e:
         44:00:e6:bd:0b:62:de:e3:ab:a6:2f:ea:93:5d:dc:82:11:2f:
         b8:f8:85:fb:32:f9:9c:98:75:fc:b6:85:19:cb:26:8a:6d:55:
         b8:d0:19:e9:63:f5:f8:2a:6a:90:f6:22:f0:47:db:0c:58:a3:
         3a:b9:31:10:a9:82:b8:c5:fb:90:e5:3b:d9:73:5a:21:2c:d3:
         d3:88:d3:5c:20:8c:fd:0a:cf:4a:60:1b:c3:1c:bf:68:5e:6c:
         2e:ac:6d:81:14:0f:f4:34:81:1a:19:e2:80:97:4d:f0:74:e5:
         bc:24:ab:9e:17:e3:ec:85:f3:36:f5:0a:7d:9c:98:c5:ac:ef:
         4f:c8:e6:06:a3:e5:92:b0:9a:ef:c4:eb:ff:24:02:13:73:09:
         aa:8b:6d:9a:0b:52:b1:9d:22:bc:c5:3f:db:1a:f7:fb:ba:cb:
         69:61:14:0f:16:ad:7f:67:ee:78:d1:0a:fb:17:f4:33:61:60:
         3e:8d:79:a3:bd:d9:62:ad:ad:98:4c:b1:dc:bc:5b:e7:09:9c:
         d2:3e:fb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:48 2025 by rpki-client