Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e.cer
File:                     7de612cf-a880-4f90-bd0f-bf90530a8f4e.cer (raw, json)
Hash identifier:          XDODHtsSi4f+EwyqDc2olZ3hhZTcOu21wq0kexN4xrM=
Subject key identifier:   3B:7B:1A:C4:65:16:4E:24:D1:94:87:5D:9D:9C:17:0F:E8:8A:B6:4C
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858481F5D9D386D292D166305A780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/7de612cf-a880-4f90-bd0f-bf90530a8f4e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 07 Dec 2024 01:45:34 +0000
Certificate not after:    Fri 12 Mar 2027 01:45:34 +0000
Subordinate resources:    IP: 23.158.200.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:5d:9d:38:6d:29:2d:16:63:05:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec  7 01:45:34 2024 GMT
            Not After : Mar 12 01:45:34 2027 GMT
        Subject: CN=7de612cf-a880-4f90-bd0f-bf90530a8f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:c5:44:22:be:14:ff:40:10:7a:e6:34:99:
                    53:8a:37:6d:47:8b:01:2d:62:68:1b:be:d8:03:f9:
                    a2:69:25:7c:dc:bc:b9:76:96:f8:7c:2c:01:d5:8a:
                    01:dc:3b:5a:44:88:58:3a:ed:ad:d7:4d:39:af:46:
                    6c:66:1f:e4:c6:8f:23:65:59:0b:5c:1b:9d:b6:a8:
                    15:6f:4b:2b:9e:00:52:b4:d1:f3:48:c4:af:c6:e0:
                    e3:25:2a:f5:84:ba:f8:2d:88:e1:e9:b9:53:05:f2:
                    1a:c1:2e:97:e7:41:14:45:18:04:65:0e:73:4e:ef:
                    3c:30:84:78:36:26:95:75:0c:15:09:8e:18:e6:11:
                    a4:0a:51:a5:37:63:6a:a8:75:d6:c0:cc:34:a4:d2:
                    88:47:ca:e5:c5:31:92:4d:4e:db:8b:6d:5c:2f:90:
                    72:3e:6e:21:48:e6:4c:1e:87:0d:c7:e5:cb:f1:4b:
                    f1:72:46:84:f3:b8:4c:1a:ea:eb:16:96:10:1a:dd:
                    d5:06:e8:65:99:2d:a7:d4:74:98:b1:d3:1c:09:c3:
                    12:99:06:59:a0:88:e6:07:f3:fa:aa:9c:e2:30:bf:
                    10:a3:33:9b:ee:91:fa:5f:62:a6:78:f3:85:93:6b:
                    fd:3d:ab:b7:eb:5f:88:93:5b:e9:70:16:ca:31:48:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7B:1A:C4:65:16:4E:24:D1:94:87:5D:9D:9C:17:0F:E8:8A:B6:4C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7de612cf-a880-4f90-bd0f-bf90530a8f4e/7de612cf-a880-4f90-bd0f-bf90530a8f4e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:e3:a8:84:bc:a1:eb:d4:59:fe:64:e8:5c:82:1a:59:0b:
         89:e5:2b:96:c0:d5:a4:1d:4a:94:b7:35:b8:5d:96:83:0b:d1:
         32:62:e8:8f:f9:d7:be:22:6f:c6:f8:e7:15:6c:74:f3:92:5f:
         75:1e:1f:a9:e1:8d:55:47:75:00:e8:58:8c:d4:17:b5:b1:6c:
         14:df:6a:d6:d8:11:f0:d4:70:3e:ef:cb:35:26:00:b3:19:96:
         32:75:08:8f:29:ca:4a:8f:13:c1:33:31:c5:b6:b1:65:eb:79:
         be:45:50:2a:f5:23:06:9d:bd:c8:b9:bb:4f:69:42:a2:8d:69:
         15:6d:c5:76:30:63:55:0f:49:37:d8:b1:b8:5d:e9:bd:32:90:
         db:c5:d2:92:54:f2:52:f7:0d:4c:7f:d0:17:06:ea:4c:47:ee:
         3b:ca:de:02:06:a8:0b:ec:8e:0e:5f:5a:d9:d1:ed:5d:65:f1:
         26:6e:a7:c6:84:c9:37:8c:53:33:e0:c2:1e:37:1b:c4:c5:47:
         56:f9:71:28:68:ab:eb:a9:9f:74:2f:c0:71:b9:7d:6d:99:db:
         8a:30:b4:2f:2e:01:88:f9:f7:76:0d:2d:ff:7c:8c:5d:d5:b8:
         00:49:c3:36:41:7d:95:07:4e:f3:36:98:25:9e:ce:a3:0c:e0:
         34:14:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:11 2025 by rpki-client