Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341.cer
File:                     4884cca8-e13a-4d48-82af-7839862b6341.cer (raw, json)
Hash identifier:          gkzvIFC8Sx8zSPtD61pnff54sKWQ0YCM2rd+XZQFQxs=
Subject key identifier:   5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584929DC29236ED02479C3F67500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 12 Mar 2025 12:45:34 +0000
Certificate not after:    Tue 15 Jun 2027 12:45:34 +0000
Subordinate resources:    IP: 192.68.131.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:dc:29:23:6e:d0:24:79:c3:f6:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Mar 12 12:45:34 2025 GMT
            Not After : Jun 15 12:45:34 2027 GMT
        Subject: CN=4884cca8-e13a-4d48-82af-7839862b6341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:e7:51:c5:e8:62:b0:aa:de:03:c1:63:59:
                    e4:1b:dc:04:df:72:d4:3f:fc:10:be:b1:bc:e3:bf:
                    c7:05:53:63:2b:4d:52:88:4a:a0:c8:7a:0d:cd:55:
                    f0:45:66:f9:ef:92:0c:e7:15:a1:da:66:55:e8:a8:
                    67:55:2d:a1:bc:ce:b0:0a:4e:cf:ee:7e:a6:8e:10:
                    4d:c9:f2:18:4a:ea:de:5d:75:7d:29:72:05:8c:b4:
                    4d:61:36:82:59:68:c1:05:99:39:7c:df:8b:6a:2a:
                    97:95:f7:a3:36:eb:6e:13:c9:b6:7e:a8:e9:22:5c:
                    8c:21:bd:c0:2c:4c:ee:70:b7:d3:54:4f:a6:c2:9b:
                    4a:74:62:72:62:8a:2a:27:d1:60:bb:21:37:9b:e2:
                    64:3c:72:d2:e6:f6:78:b5:d6:04:09:b8:23:96:c6:
                    7e:66:42:4e:ad:51:fd:9b:95:6f:cd:db:06:f5:e5:
                    60:09:b5:9c:90:0a:ed:9d:b4:22:ef:be:21:2d:c5:
                    a4:cd:ed:61:2c:54:b8:27:26:0e:cb:c0:55:f7:a2:
                    a1:88:8a:37:cc:9b:54:c9:64:dc:c0:3b:6f:a5:0a:
                    f7:44:f7:32:bf:b8:c1:42:96:4f:30:79:12:0f:84:
                    0d:0d:a7:19:3a:4e:07:50:30:9c:cd:76:35:12:f3:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F4:C0:16:AB:A1:D4:53:82:E9:C7:B5:FE:F2:49:67:34:FA:F4:BA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4884cca8-e13a-4d48-82af-7839862b6341/4884cca8-e13a-4d48-82af-7839862b6341.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:88:6f:57:26:ec:b6:c8:97:aa:40:29:34:72:f9:e3:5b:79:
         eb:b5:68:b0:b5:5b:fa:39:cf:41:d8:39:59:df:9b:45:47:bf:
         81:59:28:4b:50:38:d8:e8:a2:30:b3:06:62:87:a9:6c:58:00:
         f0:0d:43:80:57:c5:2b:3c:c2:ff:0d:ce:40:aa:a4:75:a4:cc:
         a2:24:ad:64:e2:17:ba:ea:5d:0d:1c:f8:99:a1:7c:97:a4:f8:
         1b:c6:3a:08:63:d7:2d:b0:8e:da:4c:e4:4b:30:02:dc:d1:ad:
         d8:7c:bf:13:6e:d4:81:ce:76:69:36:eb:f6:e3:8b:8e:fa:92:
         cd:ec:cf:fc:8e:b2:17:4b:70:a3:a3:21:57:a5:dd:1e:32:12:
         40:e9:77:ba:e5:fe:07:36:79:43:cd:67:70:2a:d1:f1:b9:5d:
         53:de:a2:8c:f9:a7:6b:e0:0a:a3:23:5f:ed:72:ed:d4:21:f3:
         66:cb:dd:f3:da:e5:1a:1d:9c:89:b0:5b:37:2b:82:a7:70:fe:
         16:92:c8:01:ff:cd:04:79:9c:af:27:42:3f:9d:85:e2:88:54:
         e5:76:e5:da:9c:f0:64:a9:68:05:fd:74:09:3e:c9:68:aa:aa:
         f3:68:03:5c:09:6f:22:1e:90:24:c2:04:8d:1f:31:0b:0e:31:
         73:ae:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:59:39 2025 by rpki-client