Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219.cer
File:                     bfe6b5ce-b18b-4608-80c9-5651cde85219.cer (raw, json)
Hash identifier:          KB/Sr5M/ll1K9OdPryzy6Am22HkK8039whluj3vm9ig=
Subject key identifier:   E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848A98E7683E0D7AA1CB0C49200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 25 Jan 2025 13:45:33 +0000
Certificate not after:    Fri 30 Apr 2027 12:45:33 +0000
Subordinate resources:    AS: 396100
                          IP: 23.164.168.0/24
                          IP: 141.193.0.0/23
                          IP: 2607:7540::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:8e:76:83:e0:d7:aa:1c:b0:c4:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 25 13:45:33 2025 GMT
            Not After : Apr 30 12:45:33 2027 GMT
        Subject: CN=bfe6b5ce-b18b-4608-80c9-5651cde85219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a8:be:72:a8:26:af:48:70:b4:18:82:58:7d:
                    8a:f4:2a:d1:66:dd:ce:1f:b2:89:b3:8b:e8:a1:03:
                    e4:a8:80:c1:34:6d:9b:98:78:71:e0:ce:09:de:66:
                    0c:07:f5:29:b7:f6:d4:44:f3:6a:46:63:ef:b5:7e:
                    ca:b4:39:0c:64:d4:0d:2a:18:98:9f:cf:53:01:ef:
                    e8:f0:a4:8d:37:3e:1a:53:ab:02:af:8d:f3:58:08:
                    88:a0:ca:59:c8:73:fb:44:72:f9:bb:a4:5b:0d:c9:
                    13:13:60:77:ae:20:64:bb:3f:c0:1d:38:d0:03:74:
                    98:40:1e:94:9e:e4:29:a7:b3:87:bc:04:68:8c:06:
                    62:94:16:56:ef:b2:d0:34:50:99:b5:d5:0a:d9:d6:
                    33:18:d7:48:63:f4:09:ab:6d:fc:d6:1f:aa:96:d7:
                    0b:83:f9:cc:8b:e6:31:dc:70:91:30:28:6b:af:5b:
                    1f:fd:f1:cc:90:0a:8f:7e:c1:41:0c:cd:7d:d5:b9:
                    cc:06:3c:8a:bf:a1:c6:83:77:fb:a0:78:d8:0d:3d:
                    e4:bc:af:1e:07:a1:f2:15:4a:17:dc:4d:c6:b7:c5:
                    97:fd:9b:44:bb:b0:6d:e2:f1:65:64:3d:c2:d0:9f:
                    b9:d9:33:4b:4d:79:f6:e0:ee:a9:70:26:40:f0:54:
                    3d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:04:D5:E7:E4:5B:19:CC:9C:7D:61:A3:AA:A4:1C:99:8B:48:B5:A7
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bfe6b5ce-b18b-4608-80c9-5651cde85219/bfe6b5ce-b18b-4608-80c9-5651cde85219.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.168.0/24
                  141.193.0.0/23
                IPv6:
                  2607:7540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396100

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:11:6a:c4:fa:5f:43:25:a8:02:23:99:ef:c1:54:21:09:ae:
         e1:22:25:bb:10:a0:d6:54:0e:a2:63:a4:8f:7a:48:66:70:6a:
         e4:9e:6a:74:86:28:35:b7:56:e3:74:44:4f:09:0c:ec:84:a0:
         a8:d0:43:5f:06:e2:68:94:4c:a2:25:6a:a6:cf:d6:8a:b4:00:
         9e:b1:e1:e9:ab:dc:86:55:ca:35:98:6e:4c:b6:2a:94:e0:b1:
         ed:d1:01:31:c3:6a:e8:8e:36:b5:60:ae:a1:91:c8:72:81:b8:
         8f:e1:55:74:45:84:a7:e2:5d:b7:d4:56:85:89:e9:29:7c:b1:
         07:1c:89:13:e0:02:dc:f2:85:c7:bc:c9:ce:33:bf:6d:ae:23:
         7f:a9:85:5b:e5:09:66:3b:9d:cd:0b:54:17:84:57:9f:44:96:
         67:38:1c:cd:64:30:12:10:16:46:11:39:35:2c:3e:11:2e:dc:
         45:eb:54:a6:79:4b:34:68:84:cc:bd:53:07:41:42:fa:67:64:
         d3:c6:69:4f:6e:18:0f:16:df:d7:be:72:9a:c7:e5:97:b7:35:
         a0:6e:37:3e:07:c6:60:87:74:5b:cb:a5:44:24:89:9a:7b:e3:
         e1:c6:23:5e:24:4a:d0:dd:2f:9b:4d:79:0f:74:f5:9e:ef:52:
         dd:d3:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:48:08 2025 by rpki-client