Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer
File:                     0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93.cer (raw, json)
Hash identifier:          gtz4jc+yCkS5uYLTIxId/KlMMwRW1dm7JO64sLOWSDY=
Subject key identifier:   8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34
Authority key identifier: 40:C6:1F:78:BA:FB:5C:52:54:40:32:7C:32:08:B5:69:FF:2D:3F:BF
Certificate issuer:       /CN=9bf63dd0-7fcf-4028-967a-e4759c9edf1e
Certificate serial:       010D0C9F432858488543936D33DDA987F2371800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.cer
Manifest:                 rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.mft
caRepository:             rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/
Notify URL:               https://rrdp-rps.arin.net/notification.xml
Certificate not before:   Sun 12 Jan 2025 13:45:33 +0000
Certificate not after:    Sat 17 Apr 2027 12:45:33 +0000
Subordinate resources:    AS: 400850
                          IP: 66.205.246.0/24
                          IP: 2620:5f:e000::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:43:93:6d:33:dd:a9:87:f2:37:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bf63dd0-7fcf-4028-967a-e4759c9edf1e
        Validity
            Not Before: Jan 12 13:45:33 2025 GMT
            Not After : Apr 17 12:45:33 2027 GMT
        Subject: CN=0ac5f821d6e6b1eb7fb04b13656a4398262c58fc0f0d66af93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:7a:8d:e2:02:4d:b0:0b:d2:27:c4:88:e7:
                    f7:70:7e:98:6c:2a:6d:19:8d:1a:0f:1f:01:51:cb:
                    8c:f6:31:13:61:6d:d3:28:e7:f4:67:43:3e:2b:15:
                    07:75:0a:8f:f6:70:98:93:f9:a9:9f:79:ec:9b:91:
                    ca:c0:d2:55:04:07:19:84:ee:30:35:ed:fc:fe:d9:
                    59:5a:66:d3:90:e1:5a:5f:be:80:8d:48:21:90:e2:
                    09:01:fa:ec:33:7a:69:e0:9c:3c:e4:98:a5:d1:63:
                    28:7a:15:68:e1:54:75:09:da:bd:8e:8c:b9:38:15:
                    d5:af:b9:ed:d3:06:b8:f6:8a:87:51:d3:e3:46:b4:
                    b5:9a:88:5c:e6:ce:32:d7:b7:c8:49:eb:58:2e:a3:
                    42:35:7a:b9:43:57:70:38:29:f3:80:7f:db:86:9c:
                    38:f9:a7:5e:e2:b9:6f:5c:f8:6a:03:6e:05:46:7c:
                    ea:d5:08:17:20:7f:f6:a3:5a:2f:62:d0:fc:3f:67:
                    00:67:af:09:37:61:64:b2:77:46:c3:54:78:99:7f:
                    36:b8:33:18:41:fb:89:4c:bd:82:dd:64:e8:e9:b7:
                    5f:d0:40:d9:74:08:2f:8a:d0:54:af:db:73:c8:a3:
                    c0:7a:3d:b0:2c:5f:43:70:77:fb:65:bd:b3:45:7f:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:80:1F:31:4B:EE:A8:0A:D5:97:7C:43:1F:1B:1C:77:37:66:EF:34
            Subject Information Access:
                CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/
                RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848adf8b1588e6018b1876004b01f1/0/8A801F314BEEA80AD5977C431F1B1C773766EF34.mft
                RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.crl

            X509v3 Authority Key Identifier:
                keyid:40:C6:1F:78:BA:FB:5C:52:54:40:32:7C:32:08:B5:69:FF:2D:3F:BF

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9bf63dd0-7fcf-4028-967a-e4759c9edf1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.205.246.0/24
                IPv6:
                  2620:5f:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400850

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:9a:c7:0a:6c:60:54:18:8b:29:69:02:ec:1b:da:30:78:82:
         29:bd:c5:c0:54:9d:2b:45:1d:59:63:99:f8:8f:37:87:66:1d:
         36:30:54:28:4a:40:ae:08:bf:d7:c8:60:db:3a:2c:c8:bf:ab:
         ef:b5:20:7f:f2:5c:cc:5e:bd:47:b9:82:20:34:22:bb:3c:f3:
         38:64:b3:c5:33:2b:d7:e0:55:20:66:02:ac:56:10:45:de:36:
         5e:c9:00:04:39:e6:14:43:ee:11:6f:b2:81:31:b1:a3:4e:2b:
         ef:f2:b2:fe:6d:a5:cc:15:03:f5:90:3d:dd:7f:79:d2:ec:c6:
         23:66:37:5f:f3:5a:0b:07:8d:44:33:5c:3e:6d:6b:7d:c6:1b:
         d6:5b:a3:b6:f3:04:60:1b:7a:77:ca:75:c0:6a:96:6c:8b:7f:
         0a:13:30:2c:07:3a:b6:a6:19:e9:e4:7b:9e:46:e4:ea:fd:e2:
         9f:bb:53:a6:ff:95:e8:63:f8:c3:85:0e:e1:ec:ff:9f:81:a9:
         40:e0:ab:d5:68:c1:d6:5e:d6:b0:de:e9:6d:be:7b:fe:11:42:
         ba:f0:fa:1c:8a:ef:6e:bf:1b:69:1e:8d:d3:50:60:a3:da:f1:
         04:4e:85:a0:5f:48:03:0b:5c:6b:bf:8f:47:ff:7a:e3:75:39:
         ca:1e:12:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:57 2025 by rpki-client