Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
File:                     8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer (raw, json)
Hash identifier:          PLevHYNmmRIrqQ7VROskaD2Xaz+69zmkLW4QIm2MznY=
Subject key identifier:   36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F4328584875E8D051205EEE330B2BEAC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 07 Jan 2025 01:45:33 +0000
Certificate not after:    Mon 12 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 5744
                          IP: 151.207.0.0/16
                          IP: 2602:810:d000::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:e8:d0:51:20:5e:ee:33:0b:2b:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan  7 01:45:33 2025 GMT
            Not After : Apr 12 00:45:33 2027 GMT
        Subject: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2c:be:99:24:5d:de:10:08:a2:b6:a2:4c:96:
                    61:5c:f5:d2:c1:e6:47:51:0d:44:1c:90:a7:73:d4:
                    ab:73:bd:a3:80:dc:3d:ef:80:83:b6:cb:15:57:2b:
                    a6:51:77:68:ce:51:6c:85:9c:ea:b8:a3:7a:13:8e:
                    1e:6e:c2:83:69:71:fa:62:5d:89:dd:c2:03:2f:be:
                    34:30:68:b9:36:bc:b9:ea:19:80:fa:a5:2d:d0:07:
                    2a:f4:b3:23:63:8f:a8:fd:e0:e9:a8:8b:28:e6:88:
                    1e:b0:b5:1d:b9:e5:b7:2b:21:46:2f:2b:87:e6:fb:
                    f0:73:11:d8:c1:62:25:03:97:99:1e:57:20:5f:a3:
                    a9:fc:67:5e:5a:31:7d:d1:9a:0d:e8:9f:8b:a2:c4:
                    04:ad:f8:eb:a1:75:a0:8a:59:4c:6e:f8:c9:de:6d:
                    34:51:9b:20:92:5d:e7:91:c3:b8:05:2d:eb:f2:0d:
                    8e:77:0f:1a:41:22:47:18:78:cd:c9:be:46:1a:e0:
                    22:cd:54:de:85:69:14:7b:51:b5:f4:48:16:ed:cf:
                    f7:87:fc:1b:9f:bd:97:f8:15:b1:33:20:ad:9d:d2:
                    8f:4f:a1:b5:eb:a6:ae:02:cf:7b:3f:88:a4:1b:d3:
                    f5:c6:3a:5b:0c:7e:93:5c:e8:d7:dc:cb:11:d9:a3:
                    13:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.0.0/16
                IPv6:
                  2602:810:d000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  5744

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:94:93:41:da:c7:91:9a:cc:3e:71:c4:77:d7:91:1d:d1:c7:
         49:98:78:95:80:b8:12:49:73:bd:c6:2d:65:63:e8:75:e9:be:
         fc:b7:2a:4b:cc:02:5f:c9:e9:3b:7b:1d:37:91:f1:0f:73:52:
         29:00:15:3c:e7:2e:29:97:aa:46:d9:7d:72:0e:24:70:01:e7:
         f0:9d:49:c9:96:31:8c:37:dc:94:37:28:54:11:51:8d:dc:a9:
         bd:f7:c1:98:67:8c:ee:42:c4:d2:ae:b4:01:20:86:b2:dc:47:
         72:26:04:a4:cd:28:03:1b:95:b6:89:b4:54:4d:f8:78:3a:47:
         bb:1c:7f:11:56:51:09:ee:e6:8d:dd:94:25:65:df:3a:52:53:
         f8:a0:ab:c1:e6:c6:7d:46:fc:1e:2f:87:80:36:fb:f1:87:86:
         27:c3:17:44:a8:a7:6a:4a:ae:88:93:27:b0:b4:b1:5a:59:b7:
         5e:c3:ce:65:83:58:bb:56:8d:c9:ad:ef:2b:46:93:12:7c:c2:
         26:d7:81:1c:62:2d:ad:92:df:ac:3f:5d:1c:82:ac:ae:b7:44:
         0a:54:c7:02:37:c1:ab:79:04:7b:42:da:32:85:dd:9f:85:c5:
         b9:be:59:cb:1e:ae:22:73:7b:42:09:86:01:43:7f:86:b9:36:
         03:ed:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:44:29 2025 by rpki-client