Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963.cer
File:                     cc39a973-cf2e-44b1-984a-6596dc0b6963.cer (raw, json)
Hash identifier:          mpF8APFAojYqKPwdCmbnnIaDwqe1QvY6HNltAZ1Tgys=
Subject key identifier:   45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848A293C52C31D2BC07D2F3F0C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 23 Jan 2025 01:45:34 +0000
Certificate not after:    Wed 28 Apr 2027 00:45:34 +0000
Subordinate resources:    IP: 142.232.0.0/16
                          IP: 192.68.67.0 -- 192.68.74.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:93:c5:2c:31:d2:bc:07:d2:f3:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 23 01:45:34 2025 GMT
            Not After : Apr 28 00:45:34 2027 GMT
        Subject: CN=cc39a973-cf2e-44b1-984a-6596dc0b6963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:64:b9:3e:3d:57:e0:5b:1a:2f:da:5a:4f:
                    0d:48:c5:6b:d5:6f:74:7e:d2:ab:9b:95:ab:a7:9d:
                    4a:24:80:cf:74:f6:5e:92:ce:ab:82:fa:b3:f3:99:
                    30:36:86:4b:e0:4b:e0:bb:46:b0:7b:2c:21:44:b9:
                    74:21:e6:7f:1f:d1:ee:7d:92:52:6a:9b:6b:bd:25:
                    84:ae:c3:77:80:7c:01:d7:78:ff:5c:b1:c4:74:66:
                    ac:20:ea:38:08:15:9a:73:fa:9a:c2:fc:af:7f:ab:
                    d1:f3:f6:6a:7a:15:2d:7a:e2:30:06:84:96:0a:d5:
                    0a:57:d0:d2:ad:fe:0f:27:31:b5:55:98:54:bf:09:
                    29:80:96:c7:42:dd:46:15:46:ea:03:b7:dd:78:9d:
                    61:03:39:24:e2:0e:20:a6:2e:5d:c0:8a:08:e2:d6:
                    a8:55:4d:e3:11:28:60:b0:40:6f:b6:84:8f:fb:fa:
                    fc:d6:31:5e:ad:9d:e6:3c:7c:9d:68:90:3e:de:a5:
                    67:37:4c:63:cf:48:d2:d8:84:2e:c9:35:d4:51:78:
                    fd:fe:05:57:71:de:c3:0a:ad:fc:de:bc:92:cc:5e:
                    62:37:82:28:15:91:9a:10:45:a3:5e:a2:3b:2f:2f:
                    69:2a:fa:e8:ab:24:0f:8d:57:f4:a7:b8:6b:ed:94:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A1:9D:DA:ED:2E:AE:A2:88:CA:B1:C9:FA:BA:0D:C7:40:D2:D8:8F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cc39a973-cf2e-44b1-984a-6596dc0b6963/cc39a973-cf2e-44b1-984a-6596dc0b6963.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.232.0.0/16
                  192.68.67.0-192.68.74.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a4:74:6e:70:ed:43:5a:31:f8:c2:c1:6d:5e:db:53:94:bd:
         ec:93:f4:ce:1a:1e:90:a5:4b:dd:1e:28:2d:a4:74:4f:70:95:
         dc:72:87:b3:9a:a6:69:94:41:3a:66:4d:04:48:fd:6d:7c:86:
         45:b6:9f:17:e1:ec:f0:33:f0:01:c0:d4:90:1e:68:2e:5e:d0:
         ac:ee:9d:00:87:d9:fa:b4:7a:8f:01:e5:f9:3e:89:13:c8:bb:
         4d:60:dd:ba:f0:d9:25:d6:ce:53:32:e7:ac:98:74:b9:ba:99:
         6f:53:d2:57:84:30:75:5e:f9:9e:b3:6e:90:d0:b7:eb:ee:e7:
         42:a8:30:7d:7b:82:8b:f2:7a:78:7f:c8:a1:d9:37:ea:c6:17:
         7f:25:e6:28:59:a1:e5:86:56:89:8b:99:80:a5:97:93:8e:78:
         c3:3f:13:38:9b:a9:4f:f8:0a:d1:62:57:62:ba:68:8a:82:c9:
         68:32:f9:ef:77:c0:87:7f:72:91:33:84:ad:d8:19:c5:d2:0d:
         c2:84:ef:46:4f:e9:15:02:fc:12:73:f2:11:a8:d5:1a:71:28:
         58:54:5b:95:53:0e:12:1e:c2:16:bb:1a:09:8c:fe:70:fe:88:
         72:7b:9b:cb:82:58:e4:7a:60:37:6b:96:33:ae:a2:48:d7:3d:
         6d:d4:86:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:46:04 2025 by rpki-client