Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7.cer
File:                     447fba4c-60a0-499e-8d5b-087545c981b7.cer (raw, json)
Hash identifier:          GApf/qWdzUtXVCTQcOGYpJzH8z8V+6P3IJRwQIXTnz0=
Subject key identifier:   EE:19:B8:5F:E1:49:1F:BB:27:E1:4B:09:95:0F:35:36:91:30:16:8F
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584819C83CE157714450FD82F300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 05 Dec 2024 01:45:33 +0000
Certificate not after:    Wed 10 Mar 2027 01:45:33 +0000
Subordinate resources:    AS: 394510
                          IP: 64.49.4.0/22
                          IP: 206.168.2.0/23
                          IP: 2602:fa32::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:c8:3c:e1:57:71:44:50:fd:82:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec  5 01:45:33 2024 GMT
            Not After : Mar 10 01:45:33 2027 GMT
        Subject: CN=447fba4c-60a0-499e-8d5b-087545c981b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fd:c4:30:1f:53:11:2b:14:ff:bd:2e:17:0e:
                    cb:12:aa:e3:e0:20:3c:b1:a9:08:d8:33:0d:05:5b:
                    54:ef:dd:c1:54:5a:be:91:d5:d5:93:a5:63:dc:e6:
                    3c:40:bc:98:78:ef:af:11:e5:a6:b6:e9:9b:b4:14:
                    1d:30:60:ee:f8:20:fa:63:9c:30:5c:b6:d2:17:a9:
                    76:6f:c4:16:79:f4:49:a7:fc:b2:2b:ba:5e:40:1c:
                    e7:b1:95:09:7a:de:64:62:ea:23:ae:2c:b6:42:ec:
                    d9:84:28:e0:fb:94:a9:00:1b:f3:ea:05:1e:19:2d:
                    83:05:5b:d9:c4:71:74:77:cb:2e:5c:61:19:c6:7e:
                    f8:3f:50:c3:78:7e:29:c8:d8:8c:33:7e:2e:eb:6e:
                    64:21:f8:e9:b5:ad:7c:16:91:f0:e1:47:bb:1c:07:
                    2b:76:a6:4e:45:11:32:dc:af:fd:26:2e:43:f2:97:
                    7a:9c:c0:af:de:a0:34:0d:4f:00:ea:53:79:37:70:
                    00:12:cf:4d:c5:ab:42:b2:dd:e5:ed:b6:88:9f:77:
                    81:d8:09:1c:e7:36:29:4c:12:0e:9b:cf:ce:db:63:
                    d3:ce:73:f0:6c:5d:f9:12:c7:f2:59:5b:56:0d:e6:
                    e0:4d:88:c2:68:e2:f0:27:8f:3f:43:59:38:21:52:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:19:B8:5F:E1:49:1F:BB:27:E1:4B:09:95:0F:35:36:91:30:16:8F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.4.0/22
                  206.168.2.0/23
                IPv6:
                  2602:fa32::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394510

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:aa:bb:37:df:0f:28:99:cc:c3:3c:4e:68:30:47:24:fd:96:
         3c:15:e8:2b:de:df:d8:a7:8c:79:ed:d4:2e:91:6d:de:51:80:
         8c:94:c6:99:7f:42:ce:02:6e:5e:d5:81:f2:6d:c1:38:5e:54:
         c0:85:1b:90:c1:8b:ac:71:8c:b8:67:36:a6:9d:90:17:cd:31:
         be:f8:af:19:d4:1b:41:8b:d5:ff:c5:30:b9:24:59:0a:82:fd:
         f9:90:43:ac:28:61:e5:2e:13:2b:a7:55:98:40:35:81:67:d4:
         49:a8:fb:23:36:68:60:a2:91:de:13:fd:69:c9:46:14:e6:4a:
         3f:c8:53:79:a8:a4:99:eb:dc:4a:6a:08:89:da:20:3f:f9:d7:
         d6:65:4b:0e:18:00:e7:16:9f:12:02:f5:46:4c:04:26:91:f8:
         a1:f5:b0:e8:e4:33:86:23:35:d4:50:6d:87:ab:fc:df:7b:4c:
         01:20:fd:7f:a6:ab:61:ae:d0:e9:03:ed:75:e7:26:eb:8d:84:
         70:c2:2c:22:22:3b:ff:1e:c3:bb:7a:da:a9:d5:de:15:96:e5:
         5a:d5:1e:9d:61:3c:2e:0e:fa:ca:0b:26:7e:fc:66:21:09:2a:
         bc:b2:d1:12:96:84:fd:99:ce:2a:f6:74:2a:84:0e:12:ea:c3:
         98:76:c3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:31 2025 by rpki-client