Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b.cer
File:                     4786912c-91d1-4981-a8a8-ab21be09e84b.cer (raw, json)
Hash identifier:          D07Fy/TSiNtvTZ5gJ67u5rx9zaXmMI/bZSsa5AQ62t8=
Subject key identifier:   01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858487053729D8409D98FFE935480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 05 Jan 2025 01:45:33 +0000
Certificate not after:    Sat 10 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 400530
                          IP: 198.190.197.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:70:53:72:9d:84:09:d9:8f:fe:93:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  5 01:45:33 2025 GMT
            Not After : Apr 10 00:45:33 2027 GMT
        Subject: CN=4786912c-91d1-4981-a8a8-ab21be09e84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:53:e7:a2:6e:fc:a3:2e:7a:85:e2:e0:c5:
                    85:bf:41:f7:36:ee:b4:65:1b:49:45:b5:e8:01:fb:
                    13:d2:6d:78:62:36:90:3e:de:76:f8:54:b9:15:b6:
                    ca:3f:f7:8c:6f:ef:bf:0b:22:18:31:8f:8a:78:75:
                    8f:4a:64:37:9e:5e:e2:d3:ac:53:1a:d3:4b:4c:4d:
                    9d:b3:4a:a5:2b:26:9f:84:4c:59:33:30:ec:b9:a6:
                    7b:87:ee:9b:b7:45:25:9b:5a:0c:4c:0f:fa:c5:f4:
                    89:89:30:2a:cf:ea:bf:cf:ed:96:62:65:a7:13:1d:
                    4e:fb:4a:b2:d5:db:72:0f:df:c1:aa:ca:7f:ae:b3:
                    ec:1f:06:52:85:8b:cd:16:28:cd:29:ec:93:ec:5f:
                    52:19:65:c0:98:64:74:41:9f:99:23:4e:df:b3:41:
                    0b:4e:dd:0e:05:21:f0:5e:6b:1d:05:8c:c5:be:e0:
                    83:00:e7:2f:d1:df:c3:6e:6e:7a:f3:09:8b:89:b1:
                    6c:bf:78:47:a9:be:df:1b:ec:4f:2c:60:ba:71:df:
                    85:6d:af:5c:83:71:53:a1:e7:fd:60:1a:84:93:5c:
                    98:c1:49:8c:ca:2e:df:03:b3:52:65:aa:10:ad:1b:
                    68:d8:25:8d:89:09:e4:12:e8:f1:fc:31:1c:d8:38:
                    dd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:89:77:61:B0:5F:45:2F:29:32:6D:9D:9F:03:58:CA:CC:ED:66:B9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4786912c-91d1-4981-a8a8-ab21be09e84b/4786912c-91d1-4981-a8a8-ab21be09e84b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.190.197.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400530

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:05:75:27:1a:3d:40:68:07:8b:8a:e0:2f:64:8f:b4:07:ff:
         fa:0d:29:b8:07:ad:df:82:35:21:25:64:c3:45:82:ce:32:eb:
         8e:87:2c:d2:f1:e8:ec:3a:86:84:9f:26:f0:18:e1:5f:27:45:
         5f:d1:d7:14:ab:c0:d5:dd:3f:d7:82:cd:86:43:6d:a4:0e:29:
         96:65:1e:28:8a:9a:1e:32:77:85:29:57:51:3a:b9:15:27:9c:
         ab:c7:c9:21:68:b4:bf:6d:3d:d9:f5:1f:10:db:9c:d1:d7:97:
         ff:ef:fe:b4:c3:c4:14:56:96:53:6c:e2:65:25:90:0d:e8:09:
         f2:88:26:28:a4:33:53:0e:d5:ee:b8:8b:31:08:8c:73:05:d5:
         30:6b:6e:21:b7:49:db:b0:f1:1e:67:b0:d8:8e:1e:2c:87:04:
         85:c4:16:82:c3:01:1d:74:7f:2b:22:d5:81:c8:e8:f3:dd:ac:
         67:d4:af:85:e7:d5:92:ee:9d:5d:09:ae:10:12:79:6f:aa:34:
         47:9f:42:e9:7d:cd:6d:db:80:0a:76:fc:4d:07:e5:3e:c7:95:
         96:d5:dd:a7:14:d7:14:3f:e4:5d:a3:ad:5c:5b:53:e7:3e:c5:
         a9:ed:c6:44:89:c8:4f:77:e9:0b:a5:a4:7b:89:19:a4:a7:66:
         d2:36:b5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:41:52 2025 by rpki-client