Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer
File:                     c966e577-4964-41bf-aced-835168bef4f1.cer (raw, json)
Hash identifier:          Avhm6Z7ILS2yCXzxVAlipCamNs+luFaHzzHwCwc5peg=
Subject key identifier:   2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848CB0EADC9D5841610EC1D9880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 06 Feb 2025 13:45:33 +0000
Certificate not after:    Wed 12 May 2027 12:45:33 +0000
Subordinate resources:    IP: 168.123.0.0/16
                          IP: 192.149.202.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:0e:ad:c9:d5:84:16:10:ec:1d:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb  6 13:45:33 2025 GMT
            Not After : May 12 12:45:33 2027 GMT
        Subject: CN=c966e577-4964-41bf-aced-835168bef4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7f:de:1d:26:1c:bd:09:92:57:e8:07:ea:93:
                    2c:6d:fc:90:7c:65:8b:33:aa:19:2b:24:06:7e:16:
                    a7:fe:0e:ba:a8:67:d2:a7:79:e2:1c:51:8b:ac:53:
                    2e:51:d6:37:b9:b5:9b:25:d3:58:74:b4:fa:67:7a:
                    a3:5e:39:f6:34:c8:79:a6:60:89:2f:53:db:62:01:
                    1e:06:85:36:8d:2d:c8:3e:51:26:96:ce:46:f0:c0:
                    f9:94:c4:1e:50:61:c5:f9:b5:fb:44:8f:c5:ce:ed:
                    a5:3c:fd:33:b0:57:94:5b:5e:23:c7:58:5d:07:b7:
                    32:56:39:7e:e2:5b:11:bb:78:0c:57:66:57:1a:48:
                    56:a3:66:84:45:55:ae:56:e4:33:cd:29:98:49:bc:
                    9d:f5:f6:ea:3f:7f:4a:b6:a6:a5:df:70:42:a2:76:
                    d6:36:f9:4a:09:f9:d2:82:7b:ae:13:63:5f:f1:ce:
                    97:83:9a:de:50:ee:8a:b1:f2:0d:6b:f5:33:f2:a4:
                    16:dd:95:e5:98:e0:e6:2e:87:8d:2f:c0:22:5b:12:
                    aa:7c:5b:61:e5:d9:ba:b2:cf:cf:55:bc:fa:49:1c:
                    64:9c:c5:54:01:8d:b3:93:6e:43:8f:59:85:cf:f7:
                    7a:fd:db:43:aa:55:b7:a8:21:41:8b:3d:af:28:de:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.123.0.0/16
                  192.149.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:82:27:ef:0a:e7:43:6f:55:cb:8e:ca:e0:f0:47:a0:a8:e2:
         ab:e0:b4:b0:15:bb:f0:76:de:cf:0c:11:2f:c2:15:d4:41:ce:
         dd:13:75:8e:ce:a3:10:e0:68:98:c3:ab:2a:d6:7a:9e:97:a2:
         03:1c:53:ad:cd:d4:2e:08:b7:21:21:95:72:48:53:56:90:4e:
         f1:9c:5c:33:dc:2b:b1:ac:fd:08:1c:e4:31:0d:e0:29:6a:06:
         a6:5d:6a:9d:fc:fa:a0:b3:c7:3f:58:62:fe:87:71:fa:62:27:
         53:33:c2:f7:97:c2:b9:77:b5:f6:44:07:10:b1:31:17:96:33:
         09:2c:ab:76:c1:e4:e9:fb:99:eb:5c:f5:27:aa:09:be:29:43:
         3d:3a:22:96:84:90:75:77:11:53:4e:fa:de:a9:a2:eb:20:f7:
         63:8f:ff:27:7a:98:0c:fb:20:95:23:53:c3:73:44:9d:6b:31:
         c8:3c:86:c9:58:3f:f9:cf:57:32:16:6c:f1:e0:9f:4c:a0:59:
         ba:a1:b5:6d:11:0d:c2:5a:f4:51:42:68:f2:90:1a:c7:78:5f:
         6e:8f:ad:48:6d:ce:f9:c2:53:6c:26:e6:26:83:1d:1f:37:0b:
         33:3e:0f:f2:a2:04:5d:dd:76:ac:bd:c0:51:8c:f0:29:b8:e0:
         4a:7d:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:50:26 2025 by rpki-client