Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer
File:                     a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer (raw, json)
Hash identifier:          0dNPFjQ74eWoCRqM5dXL2XadxPeMCBXutjnoAYPLzqo=
Subject key identifier:   8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858495739B533761FAAB41EC3DFC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Mar 2025 18:45:26 +0000
Certificate not after:    Tue 18 Aug 2026 15:02:41 +0000
Subordinate resources:    AS: 394019
                          IP: 23.139.248.0/24
                          IP: 172.96.162.0/24
                          IP: 199.79.156.0/24
                          IP: 2602:fb32::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:39:b5:33:76:1f:aa:b4:1e:c3:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Mar 28 18:45:26 2025 GMT
            Not After : Aug 18 15:02:41 2026 GMT
        Subject: CN=a9dc842a-d5cd-4c00-95d8-2542c58d42ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:cb:63:c0:ac:07:06:2a:40:88:f4:d4:76:
                    51:4a:17:44:89:85:82:1f:eb:62:00:7f:4e:18:36:
                    ba:62:c3:55:46:98:a1:8a:3c:c1:f0:e8:52:25:33:
                    b7:3b:7d:b9:4a:87:28:c7:64:24:2c:26:c0:44:e0:
                    4d:1c:e9:77:40:c4:17:82:66:74:9c:60:4c:7d:4d:
                    e5:32:60:c5:7f:6c:89:f1:e8:fc:94:69:40:e3:b4:
                    f8:80:16:62:ea:a7:b0:b3:2c:d4:27:76:e5:ad:97:
                    bc:e1:3f:cd:c5:a2:77:17:49:bc:91:ff:27:ac:e4:
                    94:d0:78:4d:4a:ae:5f:04:be:15:6e:e2:cd:2a:f9:
                    02:e0:0b:d9:7e:87:15:01:c2:e9:c0:6f:14:b9:85:
                    bb:3a:6b:95:35:f2:55:99:8f:73:cb:6f:00:4e:9e:
                    94:81:f1:9b:b5:0b:86:c5:f7:d4:00:e1:74:e5:98:
                    5f:ce:ef:e4:46:51:f7:ab:40:31:85:24:8c:61:34:
                    b7:09:c1:f5:b3:a1:39:1b:41:74:23:de:9f:ac:1c:
                    34:06:d8:fa:18:28:43:d2:87:f7:72:c2:14:81:f9:
                    3b:a6:45:99:3d:13:67:cd:ba:b2:c4:ed:5e:4e:d4:
                    87:44:d8:6e:06:a3:24:f0:a1:ed:b2:fc:c5:77:75:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.248.0/24
                  172.96.162.0/24
                  199.79.156.0/24
                IPv6:
                  2602:fb32::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  394019

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:3d:6e:6f:a3:92:e0:41:a3:d6:e9:60:6d:08:07:14:96:ab:
         ed:b0:7a:36:36:6a:d1:a9:71:8a:1e:35:a2:26:f1:53:48:2f:
         b9:ed:58:62:cd:bc:70:7c:32:19:98:11:99:7a:6d:00:0e:fe:
         9e:94:a8:e5:16:57:f1:3a:d2:8c:37:5f:21:a8:62:66:d8:07:
         56:e9:0a:58:8c:7b:58:4a:a2:4f:f7:42:77:9a:ea:0f:a0:56:
         90:3c:cc:d2:a7:96:a2:ff:6e:73:d4:94:56:6b:7d:37:6d:49:
         5d:99:4f:1c:66:07:fe:b9:9a:db:19:ea:b2:31:ba:11:48:4e:
         09:67:a5:c8:3d:e3:c7:c3:32:94:96:44:47:eb:7e:85:bc:f9:
         88:d6:c5:8b:ac:df:03:8f:84:5a:2d:22:45:56:09:57:f3:c9:
         ed:85:bc:c5:a4:1e:58:65:7d:87:26:99:e2:6f:bc:18:74:23:
         6a:c3:67:c8:7d:eb:2b:1d:cd:13:20:52:0e:88:03:c3:43:d3:
         37:ad:4b:14:1c:4d:07:ca:2f:c2:69:34:27:70:e5:8b:e5:eb:
         20:9a:90:da:2d:d4:a2:d5:16:f7:4e:8d:b8:b1:34:3c:e2:6d:
         8d:db:b3:74:6e:80:96:71:10:70:1c:44:de:7d:3c:1d:f7:0a:
         3b:10:a7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:40 2025 by rpki-client