Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer
File:                     124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.cer (raw, json)
Hash identifier:          9GSahvt8g+yypUU/P5KV5ML+ybg9lRnqcs3AQ/0jCbw=
Subject key identifier:   D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584883DE3878C08B343A69392100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 12 Jan 2025 01:45:31 +0000
Certificate not after:    Sat 17 Apr 2027 00:45:31 +0000
Subordinate resources:    AS: 11067
                          AS: 40011
                          IP: 65.79.192.0/19
                          IP: 67.219.160.0/20
                          IP: 216.251.0.0/19
                          IP: 2605:d800::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:83:de:38:78:c0:8b:34:3a:69:39:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 12 01:45:31 2025 GMT
            Not After : Apr 17 00:45:31 2027 GMT
        Subject: CN=124cb4c5-6c72-4e49-9358-49c1e3c2d6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:a8:6c:9e:38:8f:47:57:f8:d5:0a:b6:18:
                    0b:49:17:c5:15:1b:f4:bc:1e:77:83:56:74:04:8c:
                    91:20:88:75:26:b7:4e:00:13:60:ee:ca:f9:bf:da:
                    3c:0f:7b:b9:03:ee:33:c7:fa:37:20:02:3e:1b:c0:
                    ec:5c:3d:ca:d8:74:4c:48:3d:52:ed:34:90:bf:3c:
                    05:5f:a4:33:34:fc:f5:b5:ac:df:df:67:5b:a0:d8:
                    d9:5c:42:66:47:0f:32:0c:50:fc:cd:d1:f0:63:ce:
                    00:ba:50:d8:b3:e4:64:ba:cf:ed:b7:14:4a:5f:3f:
                    ef:ca:a8:1f:8a:fd:37:67:9e:00:a7:44:fb:5c:cf:
                    6b:37:c5:5a:5b:25:22:d4:91:a5:b8:ac:ac:40:1c:
                    e7:92:87:38:1e:ed:b0:a7:9f:14:95:e2:2c:b0:99:
                    ab:27:cb:6e:c9:0c:fd:30:5c:86:6e:f2:7f:b8:73:
                    c6:2c:d8:df:69:12:3e:02:1c:87:98:b9:05:bf:cf:
                    3e:cf:62:c8:5a:24:ed:57:e9:14:08:7e:52:9e:28:
                    b1:1c:e3:79:4d:ff:24:0a:7e:ae:ef:50:04:c0:94:
                    70:7e:5b:9b:db:20:95:b5:e6:75:af:b8:d3:5f:84:
                    55:dd:4a:88:16:71:b4:9e:a5:1a:de:bc:bd:84:10:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:70:F8:0A:EC:4D:8C:6B:4E:FD:1C:44:83:DE:C5:0F:B7:C0:AD:82
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1/124cb4c5-6c72-4e49-9358-49c1e3c2d6b1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.79.192.0/19
                  67.219.160.0/20
                  216.251.0.0/19
                IPv6:
                  2605:d800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11067
                  40011

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:59:d8:34:3f:40:9a:19:f5:93:a4:5e:75:c5:26:5c:13:38:
         a2:88:6e:6f:f2:69:85:b5:f7:d3:7d:d5:f8:5b:90:9d:95:4c:
         f8:df:e1:b3:3e:58:a9:3f:78:ba:03:35:fb:60:98:c4:0c:be:
         84:ef:e9:f4:4b:03:4b:9c:6a:7b:98:1c:88:b8:a4:07:69:58:
         cd:b0:d7:1d:8e:0f:a1:c9:85:7d:51:c3:f9:fd:09:39:5f:96:
         1d:09:d8:94:b1:34:50:5b:91:12:7e:47:fd:32:10:61:0f:03:
         0a:39:bf:f5:02:94:85:9b:dc:0d:04:67:09:bf:fd:64:bb:09:
         47:9a:e4:87:da:ed:ff:e6:35:bf:d2:a8:5a:6f:a2:28:14:66:
         f2:98:77:ab:98:19:c9:72:b5:9d:16:90:db:e5:f6:fc:68:9f:
         5b:74:92:42:ba:e1:5c:75:66:91:e1:d5:92:a4:8d:52:fe:2f:
         99:d3:39:67:7c:cb:ec:3b:4b:20:6f:10:e0:97:33:f3:f6:16:
         2b:a5:51:f0:03:7e:29:16:05:08:3b:fc:ee:32:61:03:e9:6a:
         c1:8d:b4:d0:9b:e8:d0:f6:cb:d5:cf:7c:2c:8a:bc:e0:4d:f7:
         cf:00:f4:27:52:54:f8:b5:0b:1a:60:83:e2:f6:52:d6:47:3d:
         7d:32:c0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:51:11 2025 by rpki-client