Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad76ac54-2f3f-4538-a712-8d6d1a762b0f.cer
File:                     ad76ac54-2f3f-4538-a712-8d6d1a762b0f.cer (raw, json)
Hash identifier:          EXBqSy4gDGJeydt+0yrFf1cwWpZ+HRGkvcPrvfd1Sno=
Subject key identifier:   8A:0E:3C:77:E8:E5:E6:A4:A1:31:AC:5C:01:11:68:50:9E:BA:1F:48
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858492034896840ABA5243E231280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad76ac54-2f3f-4538-a712-8d6d1a762b0f/ad76ac54-2f3f-4538-a712-8d6d1a762b0f.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad76ac54-2f3f-4538-a712-8d6d1a762b0f/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 09 Mar 2025 01:45:32 +0000
Certificate not after:    Sat 12 Jun 2027 00:45:32 +0000
Subordinate resources:    AS: 398726
                          IP: 45.45.232.0/22
                          IP: 2606:e3c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:34:89:68:40:ab:a5:24:3e:23:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Mar  9 01:45:32 2025 GMT
            Not After : Jun 12 00:45:32 2027 GMT
        Subject: CN=ad76ac54-2f3f-4538-a712-8d6d1a762b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ff:e4:3d:2b:42:26:ce:64:93:9a:b7:35:13:
                    a2:d7:66:11:58:43:55:bc:b7:82:83:cd:55:05:81:
                    da:84:0e:2a:18:96:66:eb:6c:e6:25:9e:9d:8c:5c:
                    81:f1:51:6d:e0:52:3e:df:c9:d2:c7:e0:87:09:7f:
                    04:d6:33:85:1e:9b:a1:d5:58:cf:a0:25:87:2f:45:
                    4f:c4:d4:71:ef:c6:54:b6:60:33:7b:56:96:19:c1:
                    63:95:f8:f5:86:1d:11:0c:a0:15:ee:ab:7f:e4:30:
                    3e:99:3d:5c:e0:0f:79:e9:90:11:df:5b:9a:ec:cf:
                    62:20:25:da:3d:27:b7:6e:67:73:39:4c:ef:78:31:
                    e5:07:2a:1f:98:31:f2:1c:ec:85:69:e0:8b:cf:c2:
                    33:f6:ca:3d:e9:1e:a5:0b:9c:1d:ab:b0:c3:5a:64:
                    9b:86:5a:9c:33:a4:86:d3:c3:1f:0f:db:b9:73:2e:
                    b9:d3:8c:20:35:30:57:ec:74:bb:54:29:fb:bb:27:
                    7b:30:f5:c3:f8:2d:18:6c:d6:bd:0b:15:27:02:0e:
                    69:66:d0:75:58:3a:2d:76:2e:80:34:4a:d2:ad:b2:
                    e5:9a:d0:a6:a1:1b:24:d0:c9:86:d7:02:cf:0b:8a:
                    6a:b9:2a:09:55:11:66:0b:76:c1:73:45:e9:4d:33:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0E:3C:77:E8:E5:E6:A4:A1:31:AC:5C:01:11:68:50:9E:BA:1F:48
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad76ac54-2f3f-4538-a712-8d6d1a762b0f/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ad76ac54-2f3f-4538-a712-8d6d1a762b0f/ad76ac54-2f3f-4538-a712-8d6d1a762b0f.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.232.0/22
                IPv6:
                  2606:e3c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  398726

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:74:67:55:1b:18:48:aa:8a:4f:17:57:29:ac:fb:07:61:50:
         3c:dd:21:d6:3c:fb:25:6b:74:f1:06:dc:5e:b9:1a:eb:d4:a0:
         02:f0:3a:95:ef:7c:fe:d8:44:50:2c:35:dd:95:ed:d3:26:87:
         03:a9:cc:28:39:6e:30:4a:96:9a:69:6c:3e:0d:75:24:5c:62:
         30:a8:64:22:41:60:39:ec:22:8d:e6:5a:d6:c5:b0:1b:38:61:
         b9:75:4b:75:19:21:e4:e5:04:a5:5a:6e:8d:f0:aa:b6:65:5e:
         16:2e:42:96:ec:5b:08:91:2b:ed:48:eb:21:5d:6b:ac:17:e5:
         d8:29:95:85:11:b2:b4:b6:a9:2f:26:b9:1f:44:e2:34:ce:2f:
         d1:dc:ea:55:fa:05:3f:8a:4b:21:01:e3:36:c5:0b:c3:70:3a:
         37:a0:18:1b:d1:d9:53:22:cb:1b:96:9f:26:33:0a:88:d3:c4:
         2d:bd:b3:77:26:29:9b:6b:92:d3:d1:15:d6:63:80:e6:9d:71:
         7a:b9:48:8f:bd:0e:5d:8b:36:17:29:d3:0f:ab:b5:f2:f1:e0:
         32:ef:e6:59:50:85:fc:d2:11:4b:55:c0:f4:16:ba:5a:c2:2b:
         71:cd:16:f9:24:27:ce:26:33:de:85:95:9f:92:6d:09:70:e8:
         a4:25:ba:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:47:24 2025 by rpki-client