Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
File:                     a234649d-ab49-458b-a5e3-7765fe7a066c.cer (raw, json)
Hash identifier:          F8kn80yjxVZroyU/6qWgAq8OeJG8wzwtcDIsM5A/EKs=
Subject key identifier:   9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848C5794DD67CD990EF5ACC1B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Feb 2025 13:45:33 +0000
Certificate not after:    Mon 10 May 2027 12:45:33 +0000
Subordinate resources:    AS: 27010
                          IP: 23.165.184.0/24
                          IP: 2602:f9f6::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:79:4d:d6:7c:d9:90:ef:5a:cc:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb  4 13:45:33 2025 GMT
            Not After : May 10 12:45:33 2027 GMT
        Subject: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d9:fe:91:f8:86:6a:db:bb:41:a0:84:33:ce:
                    e3:0c:1e:37:dc:10:d1:6c:75:74:27:e1:2a:06:2b:
                    c4:23:1d:64:26:c1:93:03:1c:bf:cc:63:83:83:82:
                    28:f5:78:4f:97:a3:01:f8:17:71:1b:ae:d2:09:c1:
                    3e:07:f9:8c:a3:32:ae:ab:d6:a5:0d:90:5b:ae:81:
                    48:b4:37:51:95:c3:c1:2e:d2:4e:dc:31:21:3c:7a:
                    eb:53:45:1a:8b:12:b9:12:51:17:e3:73:79:91:59:
                    c3:d3:07:09:a7:44:c4:a4:90:c3:b5:8a:5b:80:ef:
                    34:f6:c8:f2:13:0a:57:4b:83:20:8e:8b:a4:f9:03:
                    c9:bd:80:ab:ae:88:55:97:ea:34:f6:89:15:1e:19:
                    de:1a:fd:13:40:0f:ef:db:d8:09:f5:19:b3:b2:f0:
                    72:2b:f0:2b:1b:b5:89:be:e0:0e:36:51:8b:f1:a2:
                    32:b1:34:83:11:4b:32:13:92:d5:26:6a:e0:1e:b1:
                    19:bd:26:c0:bc:78:ca:7a:d6:3f:1d:91:cb:2a:13:
                    9a:01:b2:bf:1d:10:de:53:15:94:8b:72:b7:b2:14:
                    a5:b3:a3:be:a3:62:71:f9:76:e2:0e:71:e0:e7:32:
                    da:af:d4:5e:14:f5:f3:5d:f3:1b:2e:bf:cc:70:d8:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.184.0/24
                IPv6:
                  2602:f9f6::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27010

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:82:3b:20:ec:d1:cf:61:72:70:e6:37:95:fe:f1:16:0a:
         ec:c0:cd:05:87:a4:2f:2a:9d:a4:a5:7f:36:1c:c4:21:36:b5:
         06:82:e4:36:5d:d5:54:46:78:8b:c7:ce:d0:ef:22:c2:dd:95:
         19:1c:41:0d:60:cb:56:0e:c2:e5:b0:7e:1d:9f:b8:03:90:06:
         1b:9c:07:f7:22:c4:7c:e9:95:99:8b:87:fd:2c:88:e4:8b:45:
         89:b3:2a:fc:78:49:b6:d6:22:65:f1:23:a4:7c:a4:d7:71:f6:
         de:fd:3b:0c:39:e4:33:74:d0:16:ec:b3:41:af:f0:72:74:94:
         9d:5f:33:e6:82:69:78:c6:75:10:c6:33:01:0f:7d:1e:c9:fa:
         1d:b5:5f:77:02:cb:59:c3:18:94:c6:71:44:bd:e7:61:45:89:
         bd:2e:0b:8b:87:f8:67:2c:45:32:c1:73:05:46:9e:12:91:43:
         93:76:b7:54:39:45:e0:98:50:bc:b7:b4:2e:ae:94:ef:3d:0e:
         ec:60:e9:d3:98:28:f7:5b:82:8e:d0:14:18:52:6e:94:ac:3e:
         e8:15:87:dd:65:5f:b1:4a:05:12:e9:2d:00:74:e9:9c:31:39:
         f2:9e:9b:23:33:f8:a2:d3:47:52:21:25:01:65:ab:e8:c3:1b:
         e5:62:be:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:49:42 2025 by rpki-client