Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03370ab-11db-4a38-8371-c601e2db16b4.cer
File:                     c03370ab-11db-4a38-8371-c601e2db16b4.cer (raw, json)
Hash identifier:          fK8tCAw7713wPGcfcGdqhPKkll1LoRTe13UiEu5TjdQ=
Subject key identifier:   89:34:88:44:99:32:C3:4B:76:D5:B3:EB:3F:59:F4:59:15:68:F2:48
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848854392E5A9D5A50D06D5E000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03370ab-11db-4a38-8371-c601e2db16b4/c03370ab-11db-4a38-8371-c601e2db16b4.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03370ab-11db-4a38-8371-c601e2db16b4/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 12 Jan 2025 13:45:33 +0000
Certificate not after:    Sat 17 Apr 2027 12:45:33 +0000
Subordinate resources:    AS: 22469
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:85:43:92:e5:a9:d5:a5:0d:06:d5:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 12 13:45:33 2025 GMT
            Not After : Apr 17 12:45:33 2027 GMT
        Subject: CN=c03370ab-11db-4a38-8371-c601e2db16b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d9:b9:4d:67:06:84:91:18:78:c2:a0:02:3c:
                    22:5a:c2:50:09:43:da:2c:19:34:45:be:fc:50:db:
                    93:8e:29:94:68:81:27:a1:40:28:86:63:20:e9:3c:
                    f9:f1:77:07:76:a1:66:af:32:dc:e7:ae:4e:1d:be:
                    12:ed:12:6a:75:56:09:20:6d:f6:20:24:9f:f9:17:
                    b0:19:55:4c:8d:40:e7:22:06:c8:f4:d1:67:42:8f:
                    c7:3b:f3:46:0c:25:0e:e4:ac:c4:32:4f:e8:08:c1:
                    c4:35:b2:9a:8b:50:00:33:8c:bb:a0:1c:f1:2a:eb:
                    61:c3:1e:42:b7:4f:28:3e:54:97:3f:eb:5d:49:6d:
                    f2:79:d0:ef:ca:7b:fb:f7:ac:c5:ec:e8:93:b9:3d:
                    88:ce:c9:29:5e:a8:85:77:f8:b6:5a:eb:b2:8c:0d:
                    11:63:a3:ff:8e:b7:7a:3b:96:a1:c0:49:5e:e4:aa:
                    f6:b0:1a:56:bd:21:3e:e7:03:95:10:91:a4:69:83:
                    f2:e1:f4:46:70:39:04:74:20:c5:11:6a:75:2b:29:
                    c3:b1:ad:f1:a3:0c:6d:84:62:64:05:07:07:99:92:
                    0d:56:83:76:0b:5c:a5:14:32:89:b4:cc:ec:9e:51:
                    8e:0c:b6:2c:af:56:41:6c:a2:8d:0c:0b:ad:0e:ed:
                    e4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:34:88:44:99:32:C3:4B:76:D5:B3:EB:3F:59:F4:59:15:68:F2:48
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03370ab-11db-4a38-8371-c601e2db16b4/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c03370ab-11db-4a38-8371-c601e2db16b4/c03370ab-11db-4a38-8371-c601e2db16b4.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22469

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:15:e1:4f:bb:e5:a5:6d:cf:63:ef:21:6a:75:54:c7:fe:16:
         05:36:62:8d:f6:2d:bd:34:6f:25:ab:eb:c4:f6:52:d1:41:15:
         5e:40:53:67:71:38:20:40:fd:2f:eb:52:3e:42:0d:d7:90:2d:
         37:e5:cb:c4:86:51:ae:6e:1e:b2:cd:a4:fa:82:9e:85:c3:4c:
         4f:c0:a2:35:14:47:79:fe:56:ac:eb:85:0e:4e:e7:48:07:8e:
         95:f4:33:89:22:8d:8c:6d:12:f9:71:8c:08:e7:da:93:17:92:
         71:81:f3:9f:76:16:ad:d3:32:8f:1e:4f:f3:b3:bc:fa:a2:31:
         07:fe:49:ba:2c:cb:29:18:36:f0:9a:82:0b:54:20:35:75:1f:
         69:e6:56:3c:07:1e:d7:5e:f5:1c:8d:e9:61:ec:70:2c:08:5c:
         28:98:4b:2a:f0:01:0b:af:90:19:a2:f4:de:77:a0:cb:9a:a3:
         57:95:07:68:ab:c4:ac:ce:b0:ae:d6:ff:71:da:37:9c:d7:e0:
         82:c7:8e:e3:7f:cb:3f:49:ee:e4:e1:a1:ab:4d:d3:c8:6c:b6:
         17:50:a8:e3:1f:fd:f3:d6:ea:5b:e5:67:f0:15:09:b9:ea:c2:
         d9:41:c7:8d:c8:9b:b7:71:87:a5:01:ad:af:c0:a9:36:a3:09:
         d4:80:44:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:40:12 2025 by rpki-client