Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5.cer
File:                     2263e0ff-dbcf-4412-972c-090f783da4c5.cer (raw, json)
Hash identifier:          fuPIZGkY2tweMaFeaVcHfNCLtz3SpDc5F2pNf5viGEY=
Subject key identifier:   A8:25:7C:46:DC:91:C7:FE:2E:E2:7A:BF:2D:56:54:E3:7D:98:A4:16
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584886A8EB64B6CA19FF304F9960
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/2263e0ff-dbcf-4412-972c-090f783da4c5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 13 Jan 2025 01:45:33 +0000
Certificate not after:    Sun 18 Apr 2027 00:45:33 +0000
Subordinate resources:    IP: 205.236.42.0/24
                          IP: 2620:68:8000::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:a8:eb:64:b6:ca:19:ff:30:4f:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 13 01:45:33 2025 GMT
            Not After : Apr 18 00:45:33 2027 GMT
        Subject: CN=2263e0ff-dbcf-4412-972c-090f783da4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:9c:a0:4a:2f:1f:57:93:57:15:ee:58:14:
                    14:cf:92:08:f8:89:93:49:2d:e5:1c:ac:d8:39:8b:
                    5c:8e:43:2a:03:5c:e8:43:51:3e:67:57:69:5c:a7:
                    25:65:41:9c:78:26:d4:a3:6e:ad:27:98:cf:3c:5c:
                    62:4b:d4:9a:bd:3d:d5:c1:0c:c3:99:b0:48:38:27:
                    ef:c6:84:fc:45:1c:44:ef:1f:4c:c7:55:75:1d:91:
                    a2:51:aa:10:b7:d4:3d:72:03:29:a6:43:13:8a:86:
                    57:55:1b:5e:e4:c0:9b:61:22:9f:c2:a0:d2:ad:f7:
                    cb:e0:41:f0:f8:c0:41:69:ba:26:63:4b:c9:e9:f3:
                    b4:75:9d:9b:77:9c:be:eb:f1:8d:e2:f0:98:77:64:
                    df:0f:1f:e0:20:cf:f4:ac:25:95:a8:8c:69:e2:49:
                    ed:54:5f:f8:72:50:45:9d:f7:2a:3a:d1:cd:8b:87:
                    18:25:c8:40:84:9d:14:ad:08:9a:fe:96:2a:ea:c6:
                    bc:68:2f:01:80:00:4f:df:ba:bb:b6:fe:5e:34:e3:
                    8a:0e:df:2d:e6:b4:18:c7:b2:fe:29:d4:0b:da:e1:
                    81:03:a1:d2:92:06:f9:d3:b1:4d:f0:dd:80:a7:f5:
                    83:cb:d8:cf:a4:c3:ea:63:26:3b:a7:f1:17:d5:e1:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:25:7C:46:DC:91:C7:FE:2E:E2:7A:BF:2D:56:54:E3:7D:98:A4:16
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2263e0ff-dbcf-4412-972c-090f783da4c5/2263e0ff-dbcf-4412-972c-090f783da4c5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.42.0/24
                IPv6:
                  2620:68:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:67:79:eb:d5:de:77:4d:7f:10:0c:a1:5b:b1:63:21:5c:e5:
         04:59:d6:c2:a5:9a:9a:ab:76:3d:d9:c4:27:58:96:62:90:c6:
         d0:bc:e9:e0:18:98:ad:4a:1e:03:7c:c5:92:01:16:aa:23:55:
         d6:91:6b:b5:b2:63:62:fb:55:06:e4:b6:d0:88:a9:fd:8a:64:
         ca:3d:71:99:a4:86:2c:7b:17:ad:71:3d:f7:55:0d:43:2f:34:
         ab:85:ef:21:8c:40:0e:a1:4f:02:f1:c8:2a:09:81:29:d3:cb:
         76:fa:ae:89:f9:c2:dd:f6:55:82:65:3f:a1:ed:b0:35:99:0f:
         9b:86:50:c1:db:58:81:23:be:dd:bf:6a:24:84:b4:36:7b:17:
         ab:17:8d:01:ce:33:62:fe:6b:a9:e1:69:9a:1b:10:84:d2:e4:
         f1:f0:24:11:f1:cf:f2:40:a0:6e:67:54:14:cd:5f:61:a9:12:
         04:f0:75:d4:7e:10:66:eb:ab:34:fa:a6:75:da:0c:ff:ad:99:
         e5:14:58:7c:52:bd:48:c6:99:38:06:04:68:a3:61:cf:ed:9d:
         bd:61:af:07:ae:e4:5d:81:ca:68:70:f6:67:d2:e3:bb:93:ff:
         ea:50:61:35:ad:ae:b5:06:d5:f6:c7:01:b5:c0:ac:d8:d0:24:
         fe:95:75:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:40:11 2025 by rpki-client