Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer
File:                     14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer (raw, json)
Hash identifier:          tG3u4EqrsraU2m1CrBcPHfGH9ykCYs12/ggm8TqD34s=
Subject key identifier:   AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584913A4759CF89C069A008FDCC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Mar 2025 13:45:33 +0000
Certificate not after:    Mon 07 Jun 2027 12:45:33 +0000
Subordinate resources:    IP: 23.145.248.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:a4:75:9c:f8:9c:06:9a:00:8f:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Mar  4 13:45:33 2025 GMT
            Not After : Jun  7 12:45:33 2027 GMT
        Subject: CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:50:b2:4a:76:d3:62:2f:b7:0e:50:c7:8b:
                    06:df:2a:78:2d:4c:85:ba:16:93:62:05:f2:8c:c7:
                    2c:a1:fe:39:5d:0d:4e:20:a3:67:ac:13:df:80:05:
                    92:d0:06:b8:e2:e0:05:30:2e:ca:90:f4:1c:72:b0:
                    76:93:82:28:b3:e3:53:5e:98:68:43:d5:c9:43:d6:
                    71:df:8c:7e:04:25:8a:46:80:cd:ef:07:75:e3:03:
                    0c:95:cf:ef:78:de:87:68:88:c6:3f:67:3f:1d:f0:
                    dd:04:a9:5a:4b:49:15:ad:2e:e7:a2:b1:33:bc:91:
                    bb:3c:f9:c2:2d:eb:17:c1:fb:06:94:b9:dc:37:14:
                    73:d3:fc:1e:e0:4c:65:c4:f5:50:71:3b:2b:02:97:
                    37:a8:e4:04:0a:40:56:60:d7:fc:ae:2d:23:24:c3:
                    ff:a9:ea:2b:5c:ae:7f:5a:0a:71:13:d3:59:32:66:
                    4d:6e:8d:94:08:47:e6:db:5e:09:2f:3b:bd:81:0f:
                    2f:ce:a0:b5:ce:48:58:00:d2:df:dd:76:08:9f:01:
                    ec:2d:b9:c0:57:4a:98:b8:67:79:96:c3:07:5f:2a:
                    f8:9e:a3:70:15:ed:77:ec:5e:85:af:c0:a4:d6:15:
                    0f:7e:79:32:bf:a6:96:72:ef:4b:de:85:14:7a:52:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7d:9c:d7:0a:dc:04:03:97:64:7b:65:2a:5e:de:19:6d:7f:
         17:dc:45:c7:8b:77:1b:21:4a:aa:71:14:0c:21:d7:df:bb:5c:
         e4:4b:6a:8a:a5:99:32:1d:77:b0:72:d4:15:49:3c:02:dc:d7:
         62:9b:f1:38:77:59:85:0a:29:0a:4b:f9:c0:9a:f2:de:8f:9e:
         9c:ae:23:d2:46:25:78:cc:00:63:30:03:20:11:41:17:52:bd:
         99:02:94:1c:83:bb:aa:ba:28:c0:32:2c:1d:f6:36:47:35:e3:
         fc:71:c8:b7:35:a7:e4:df:cc:67:ce:3a:ac:3f:cd:8b:c2:39:
         68:e0:57:fa:bc:88:8b:f5:8d:e9:a4:85:ef:6d:a6:08:e9:0e:
         76:80:5c:1b:3b:6e:ed:94:6a:a1:9f:38:71:10:4a:86:b3:3e:
         60:68:92:b9:bb:10:34:80:7a:0b:1e:fd:c7:61:76:8f:95:c7:
         3d:0f:81:bf:83:66:59:78:bf:7c:7c:7b:74:64:0c:56:0a:16:
         72:fc:32:95:c5:98:13:59:23:6e:2b:2b:84:3e:9c:c6:5f:96:
         98:09:25:cc:05:22:32:9a:a9:eb:b9:60:79:cc:38:7f:49:bd:
         ce:d7:5e:1d:2f:b8:f2:c9:86:f6:88:6c:04:13:d2:b3:1f:9c:
         b8:f5:2a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:41:10 2025 by rpki-client