Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
File:                     09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer (raw, json)
Hash identifier:          VbfPhAurQAf9upfA8ORbp/rtQm4oMASCqY/8HunZb+0=
Subject key identifier:   EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848B61E8B6F860C1837AE4D1180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 30 Jan 2025 01:45:33 +0000
Certificate not after:    Wed 05 May 2027 00:45:33 +0000
Subordinate resources:    AS: 271
                          IP: 128.189.0.0/16
                          IP: 134.87.0.0/16
                          IP: 142.231.0.0/16
                          IP: 192.67.9.0/24
                          IP: 192.219.32.0/19
                          IP: 206.12.0.0/16
                          IP: 206.87.0.0/16
                          IP: 207.23.0.0/16
                          IP: 209.87.0.0/18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:1e:8b:6f:86:0c:18:37:ae:4d:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 30 01:45:33 2025 GMT
            Not After : May  5 00:45:33 2027 GMT
        Subject: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:2d:9e:f0:8b:a6:b7:88:bf:df:9e:6f:a3:
                    96:0f:0b:02:bf:ad:73:11:e3:d0:1a:5f:18:fe:01:
                    20:2a:a9:66:9f:2d:8f:7f:18:07:a3:71:91:18:cc:
                    28:be:3d:74:ec:ad:c6:2e:ba:cc:e6:a3:1d:f0:5d:
                    96:6e:fc:3c:93:c9:9e:85:10:2b:b4:87:59:85:35:
                    cd:ca:f3:b1:2f:c0:e7:f9:2c:cd:38:fe:35:76:9c:
                    be:72:4c:af:fe:ad:01:bb:d0:57:0b:8b:5a:48:9c:
                    3f:7c:50:25:a5:fb:5f:fc:5e:53:f4:e8:47:f4:cb:
                    2e:ae:0c:bc:a9:13:6c:ff:50:31:22:c5:fb:44:2f:
                    77:af:e7:9a:3d:38:86:95:dd:63:f4:d0:99:f1:8f:
                    5d:4b:51:80:35:2e:af:3f:a0:c2:fc:f6:19:39:18:
                    9e:54:37:ae:00:1e:a6:2d:7c:23:f8:1e:e8:57:f2:
                    9e:0b:b2:13:4d:4d:84:33:26:0a:a5:f3:57:81:01:
                    50:e7:da:73:0d:e1:93:7e:11:e4:b9:08:25:da:66:
                    be:08:21:ce:fc:13:15:90:49:0e:ca:ff:59:26:bb:
                    bc:ec:1e:47:96:5e:55:7d:06:7d:73:7d:f8:0a:d5:
                    a6:d6:56:a4:65:43:16:31:25:f2:98:ef:da:00:1c:
                    f9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.189.0.0/16
                  134.87.0.0/16
                  142.231.0.0/16
                  192.67.9.0/24
                  192.219.32.0/19
                  206.12.0.0/16
                  206.87.0.0/16
                  207.23.0.0/16
                  209.87.0.0/18

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:26:52:e6:5e:a0:78:85:97:02:eb:03:69:9b:4f:4e:d5:d1:
         9a:aa:af:e9:5a:47:67:61:54:16:71:01:d9:b4:5d:8a:a6:fd:
         51:98:50:9a:7f:1c:07:7f:b0:bb:5b:fe:bd:73:97:a3:1c:47:
         9a:8c:04:89:90:ac:ee:cb:38:f0:5c:25:e0:af:45:ee:c8:85:
         0b:8f:6b:48:ed:d8:31:e3:e1:53:06:30:ee:e0:c9:9d:6c:59:
         80:3c:13:5a:df:e2:84:f3:6e:89:68:99:5f:e6:0f:12:ed:af:
         cc:d7:76:cf:55:9c:b8:63:a1:26:46:cc:69:1b:0b:c7:12:08:
         6c:36:68:23:1f:6a:77:2a:da:46:f9:cc:40:12:8c:6b:25:b4:
         41:14:9d:27:3b:b4:06:20:db:2e:3f:d1:e0:08:58:d6:92:8d:
         28:5a:6c:5a:ad:80:90:fa:50:52:3f:0f:88:32:12:12:89:07:
         a1:20:96:af:6a:3b:fa:39:a9:34:04:ee:39:64:2a:74:c1:40:
         ac:a3:16:7b:17:17:c6:0d:0f:6f:ad:b7:b9:1f:82:de:52:0d:
         d4:c3:38:de:cd:ca:f9:d8:df:97:0c:37:3b:8b:79:6b:a6:ca:
         f7:ef:40:56:d2:34:b1:7b:98:9f:9a:49:fc:1b:27:f5:18:6e:
         b8:2e:3c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:38:45 2025 by rpki-client