Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer
File:                     c4608cb8-a1d0-40aa-8b05-a597157bb1bf.cer (raw, json)
Hash identifier:          Uf7qqmpjI4GrSfcEt7YgPVgIrj7AmcwlFQqMBhIRRn0=
Subject key identifier:   67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3
Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52
Certificate issuer:       /CN=69fd0156-bb1f-48b6-bf32-c9492286f195
Certificate serial:       010D0C9F43285849280120EBC15E57A38D2A221D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 11 Mar 2025 20:48:26 +0000
Certificate not after:    Tue 12 Jan 2027 19:15:43 +0000
Subordinate resources:    AS: 54070
                          IP: 205.211.168.0/23
                          IP: 2620:dc:8000::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:01:20:eb:c1:5e:57:a3:8d:2a:22:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195
        Validity
            Not Before: Mar 11 20:48:26 2025 GMT
            Not After : Jan 12 19:15:43 2027 GMT
        Subject: CN=c4608cb8-a1d0-40aa-8b05-a597157bb1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:2f:d2:a0:a2:b4:fa:26:23:d9:ab:f3:39:
                    94:c9:3e:48:13:cb:d5:9c:ff:74:c4:d7:e6:14:b7:
                    73:76:20:b9:12:2a:b1:44:b5:5f:6c:22:fa:7e:14:
                    e9:99:6b:19:18:f8:0d:f8:b2:9b:9c:d6:8a:b9:9f:
                    7d:18:3b:83:a9:87:29:01:ab:04:44:52:9d:93:a3:
                    fe:9d:8a:54:fb:f4:c5:52:7a:c7:2b:47:39:63:a3:
                    4a:6e:b7:2d:0e:3c:cf:a3:9e:d1:c9:df:74:a5:9e:
                    21:56:11:f5:e4:54:ba:6d:10:cc:c6:fa:6d:c1:cd:
                    91:37:68:8b:e9:00:9c:3e:cc:9e:0f:32:9e:5c:89:
                    62:32:b6:54:cb:1d:26:ea:02:75:cb:a2:e9:18:ee:
                    a8:56:c3:be:60:7f:f5:f0:b1:ff:7d:33:55:2a:ad:
                    c2:5a:4c:97:7a:9b:ba:12:c3:d0:3f:69:03:4b:e6:
                    e9:89:6e:6d:db:c5:80:1a:85:8a:e3:14:a1:f0:38:
                    66:89:cf:2d:32:7f:86:ec:cb:0e:10:9b:49:63:2f:
                    d1:96:71:4c:f3:3f:cf:4c:1a:7c:2f:0a:0e:f1:bc:
                    3f:f4:2e:5d:96:76:63:10:d8:59:68:6a:1d:cc:8d:
                    b9:23:df:d2:47:d4:4a:42:78:1c:91:37:6d:ae:09:
                    36:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2A:E3:EB:9E:ED:46:3C:EE:76:FF:EE:C2:BB:86:EC:2A:A6:E2:D3
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c4608cb8-a1d0-40aa-8b05-a597157bb1bf/c4608cb8-a1d0-40aa-8b05-a597157bb1bf.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl

            X509v3 Authority Key Identifier:
                keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.168.0/23
                IPv6:
                  2620:dc:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54070

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:1b:34:e4:1d:d7:68:c1:74:d3:79:36:a3:e2:6d:f3:00:24:
         d4:4f:93:0b:60:6e:94:3b:65:91:9a:26:30:54:34:b8:2e:1c:
         f0:a5:a1:66:f0:d5:b9:bd:09:63:71:56:05:21:de:67:68:af:
         a1:1e:9b:e0:68:04:26:9c:a1:19:ab:13:64:b0:60:ae:3f:70:
         c9:2a:bb:cd:34:92:6d:77:09:96:a9:c6:a5:49:53:a2:94:a0:
         5e:88:c2:67:00:f6:c6:4a:50:b9:36:c0:32:ab:74:7b:7d:02:
         e7:ca:2d:c3:33:c0:ff:8d:bf:da:67:b6:90:94:0d:a7:19:81:
         b2:a2:26:d0:59:e9:5f:55:0e:74:e0:9f:32:ec:8b:67:e8:16:
         58:91:a9:30:f3:2e:86:4c:be:18:55:12:5c:27:5f:3b:14:ce:
         cd:8c:a3:b1:97:0f:53:a2:7b:82:d3:c5:da:48:97:46:f1:e4:
         53:04:ce:76:7e:7b:46:0b:97:20:48:4a:58:e7:91:03:2c:48:
         58:d6:07:40:8e:4e:a7:8a:16:ef:c7:56:58:9e:1c:c9:9e:25:
         ac:e6:e6:56:d2:48:24:4a:86:90:4e:cd:16:a6:e3:47:93:50:
         34:e9:5e:14:93:b0:e6:ea:f3:65:b4:1a:22:25:34:01:e0:cc:
         44:58:29:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:57:40 2025 by rpki-client