Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
File:                     1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer (raw, json)
Hash identifier:          vikyxlYwf/nJMR2jNpflaXICYVXUCVBIgHpTHLSHv1A=
Subject key identifier:   41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848E5942C1786E147D8510B5B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 16 Feb 2025 01:45:32 +0000
Certificate not after:    Sat 22 May 2027 00:45:32 +0000
Subordinate resources:    AS: 36466
                          IP: 199.180.216.0/22
                          IP: 208.71.92.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:94:2c:17:86:e1:47:d8:51:0b:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb 16 01:45:32 2025 GMT
            Not After : May 22 00:45:32 2027 GMT
        Subject: CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2b:21:12:6e:23:ab:f7:a5:ed:e2:87:85:80:
                    90:b8:a8:a3:71:66:bb:47:d0:12:ec:b3:f4:83:aa:
                    a8:4e:a6:e4:a4:73:ac:bb:5a:bc:66:ee:05:e9:cc:
                    30:c8:e6:c4:29:ec:1a:8c:c9:a8:1f:53:a2:ca:28:
                    7b:eb:ee:02:b3:1c:f6:25:26:39:ec:e9:28:65:4d:
                    11:8d:32:9e:d4:98:7f:18:17:28:d7:b6:a7:09:50:
                    80:e2:f3:15:fb:85:69:23:95:e7:53:89:3e:7b:09:
                    57:3d:5e:f4:9f:5b:04:0b:3c:cd:f9:d9:1d:69:cd:
                    47:63:62:71:bf:cb:2d:13:9e:01:a3:6f:df:b2:f3:
                    86:bf:57:ba:19:a7:d5:b2:1d:91:a6:54:87:ab:ce:
                    d1:e3:b9:6f:56:6b:a2:42:45:1f:28:50:cb:54:d7:
                    a9:1c:47:f7:c7:6f:b4:88:a2:82:08:47:59:3f:98:
                    ea:fa:7f:4a:80:b6:48:39:19:92:86:ec:91:25:4a:
                    61:64:5b:63:87:62:c5:6b:58:66:06:55:fe:9c:10:
                    be:f9:a2:e8:71:28:80:dd:d5:10:52:05:47:9c:72:
                    05:c0:7e:25:ac:2b:1d:73:85:00:b1:90:7f:f2:ea:
                    28:e5:38:89:ea:f3:78:59:1b:b3:bc:61:52:2e:97:
                    f8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.216.0/22
                  208.71.92.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36466

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:18:f2:c0:6b:61:37:89:7e:17:d6:44:bc:2e:9c:05:21:d5:
         64:36:01:5e:8a:25:7e:15:d2:98:e2:3d:e2:62:5c:ee:df:96:
         80:ef:2f:c5:5f:7f:d0:94:8d:ad:27:eb:e9:14:a4:52:8c:2c:
         0b:51:2c:71:59:c9:fa:be:82:a4:a1:a5:6e:a8:07:6a:6e:21:
         3b:c6:ba:77:98:68:56:3c:40:02:d8:cf:05:b3:7f:22:d2:c0:
         71:b2:14:73:7e:7b:41:69:9e:94:14:9f:5c:a6:54:e9:37:87:
         15:fa:17:cc:82:b8:89:86:ba:21:3a:4c:6e:6d:f0:3b:d4:c3:
         81:7b:e5:15:3a:40:35:2f:83:f5:97:47:75:ca:29:5b:f8:40:
         36:fe:09:c7:fc:a7:5b:c3:04:8d:28:a8:9c:e3:c3:69:99:ca:
         f3:44:61:22:14:dd:6d:85:15:86:89:53:9e:c9:3f:db:3b:2d:
         03:62:60:20:fb:35:d8:77:0b:8e:46:9e:dc:a9:24:4b:2d:f2:
         9f:e7:fd:7f:7d:9f:31:92:20:82:07:de:2e:d4:86:9f:1f:7e:
         f4:57:b4:2b:ba:6b:cc:05:b8:80:c4:3c:9d:4a:ec:8d:00:a0:
         8e:a5:ec:8f:e5:cc:86:26:47:ef:38:9b:93:98:03:85:09:b6:
         45:71:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:44:34 2025 by rpki-client