Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
File:                     7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer (raw, json)
Hash identifier:          J1ynNQrWJ1J/MI79dL9zFNunFItBIjh6MRxeYHP4PrQ=
Subject key identifier:   B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584827BDA91E131B9FA4CCC46050
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 10 Dec 2024 01:45:33 +0000
Certificate not after:    Mon 15 Mar 2027 00:45:33 +0000
Subordinate resources:    IP: 192.54.242.0/24
                          IP: 192.219.236.0 -- 192.219.240.255
                          IP: 205.189.16.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:bd:a9:1e:13:1b:9f:a4:cc:c4:60:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 10 01:45:33 2024 GMT
            Not After : Mar 15 00:45:33 2027 GMT
        Subject: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9b:96:97:f8:b1:41:a4:da:f1:77:bf:a4:ee:
                    fb:4b:d2:e6:4c:e7:00:77:43:0d:d1:8d:55:d3:81:
                    e1:63:42:9e:0f:95:15:c4:fc:91:e5:d0:e1:54:99:
                    9d:2d:a5:b9:b6:9d:82:bf:eb:89:4f:b2:36:a0:3c:
                    e2:08:8f:05:d3:c7:09:a9:9e:48:9b:19:d7:77:08:
                    ad:ee:64:a3:17:6d:69:f1:e6:98:fd:bf:fa:99:fa:
                    b0:6f:eb:7a:06:f5:c1:57:05:a6:81:6d:d7:72:58:
                    9e:1c:d9:a3:a7:b0:26:f8:89:97:89:9a:60:c9:a4:
                    4d:b8:0c:9c:27:73:90:9f:33:74:bb:e6:d0:1b:e6:
                    eb:c7:2f:59:af:96:69:7c:ab:9d:58:d6:08:15:d4:
                    6e:d7:75:d6:f1:09:db:9a:df:90:28:fb:76:76:37:
                    94:a3:57:a5:27:d0:cc:ac:28:f2:5e:bb:65:c9:24:
                    de:5c:89:2d:f7:39:68:52:7c:46:da:d9:7b:1d:a8:
                    39:ec:00:e1:3b:d9:49:13:0a:17:fe:b2:6b:27:bd:
                    1f:7d:a8:bb:a5:74:5a:3f:66:38:e0:26:d1:02:83:
                    2a:bc:17:b0:0b:cd:23:ca:4e:5d:82:af:5b:5c:62:
                    08:c5:ea:16:17:d2:b2:b8:eb:57:eb:66:66:00:17:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.242.0/24
                  192.219.236.0-192.219.240.255
                  205.189.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:ba:26:cd:c2:2a:f0:06:81:5c:77:69:20:0e:ed:a8:90:
         33:e5:73:a2:91:c5:4f:fe:cb:29:ec:da:62:1f:bc:88:b3:d9:
         aa:37:a9:58:0b:c1:8f:2f:dd:9c:f5:0d:1e:27:1c:03:25:94:
         16:59:61:42:1c:e2:70:89:91:4e:dd:d7:18:27:7f:de:ac:6b:
         b3:55:19:fc:3b:38:ca:1e:09:8e:35:9b:a8:24:37:00:de:b0:
         75:6c:ce:b9:7e:f7:cc:ae:0e:60:c5:77:f1:93:fd:39:2c:7c:
         cd:05:c0:6a:21:bf:c2:bc:ea:a1:4a:f9:aa:76:7d:64:9f:99:
         4b:71:a3:4f:1e:fc:d6:bc:5c:38:1e:44:88:68:1d:c1:88:e7:
         c5:ac:d7:ed:51:4c:db:65:20:9e:38:14:5b:ca:2f:65:21:99:
         f8:ed:9f:c0:e6:3e:98:92:de:c9:d9:b6:a8:a1:a6:53:a7:26:
         ff:25:69:dd:a2:c5:51:dd:db:74:36:64:69:f9:f1:e7:01:98:
         47:05:fe:e6:96:d4:e6:50:66:23:18:ae:8e:a7:90:3a:c2:9f:
         c3:bc:c8:e5:1c:fc:83:98:e6:d9:2c:ea:c2:09:50:a2:56:3b:
         b5:c5:22:c5:0c:df:54:60:90:2b:8e:da:56:64:f3:8c:b9:c3:
         77:2a:39:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:14:01 2025 by rpki-client