Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer
File:                     cdd649c3-69cc-4c17-ab23-18770e2b8be8.cer (raw, json)
Hash identifier:          LI9m8yIEGnGVODx/YguYqp1NtS09ozzvz7cEDkAfFZ4=
Subject key identifier:   26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848D79EC2E531F5AD7826D89F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 11 Feb 2025 01:45:34 +0000
Certificate not after:    Mon 17 May 2027 00:45:34 +0000
Subordinate resources:    AS: 36309
                          IP: 66.9.44.0/24
                          IP: 2620:9d:c000::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:9e:c2:e5:31:f5:ad:78:26:d8:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb 11 01:45:34 2025 GMT
            Not After : May 17 00:45:34 2027 GMT
        Subject: CN=cdd649c3-69cc-4c17-ab23-18770e2b8be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:ef:c0:70:2b:2e:64:96:7e:2b:bc:22:98:
                    4c:51:1f:41:f2:e5:86:78:a8:95:cc:7a:f6:32:7b:
                    23:4c:43:6f:c2:94:d3:69:ba:5f:bc:95:ab:0a:dc:
                    7c:c1:5a:8e:be:be:87:67:44:a7:0c:14:40:94:e0:
                    d5:72:c8:2c:3f:c5:07:ed:57:d3:e9:29:36:ea:90:
                    dd:2d:18:18:63:68:73:7e:0f:18:ca:cb:ac:7c:42:
                    90:1e:33:86:5a:ec:7b:f9:af:b8:52:04:4b:de:cc:
                    2b:7e:27:8d:38:14:99:77:10:6b:c5:65:ab:0d:3d:
                    d3:44:dd:ab:13:41:95:b3:82:a4:98:f4:2e:5e:d0:
                    cb:d0:89:f5:99:43:d1:71:6a:47:85:0d:1e:90:93:
                    14:0b:45:da:9d:40:4c:9a:d5:c1:2c:87:80:b5:be:
                    87:d0:fd:2d:76:59:6d:e8:1f:a1:bf:a1:67:62:05:
                    d3:b6:5b:d0:3a:11:b7:90:bf:e7:7f:75:56:bf:92:
                    f9:02:8c:be:5f:09:6d:9e:14:38:6a:db:7a:72:d1:
                    43:a7:ec:98:b9:2c:c4:e2:ca:61:f7:b9:14:6b:7d:
                    23:ef:c9:e6:e5:a6:55:31:cb:c3:95:9b:47:fb:db:
                    27:c3:ed:9d:77:40:c1:07:19:f3:48:37:a7:ac:e6:
                    35:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0E:C1:31:80:A9:07:AB:3B:51:A6:8E:ED:B7:15:A7:A1:7B:55:30
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cdd649c3-69cc-4c17-ab23-18770e2b8be8/cdd649c3-69cc-4c17-ab23-18770e2b8be8.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.9.44.0/24
                IPv6:
                  2620:9d:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  36309

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:05:bb:20:91:fe:7b:e0:30:0b:76:02:81:3e:f0:b7:99:
         d5:a2:52:f0:c8:7d:ba:7d:66:38:b9:6e:19:3d:c0:3f:29:1b:
         d1:21:b4:b1:32:e3:f0:3c:87:b1:46:72:2b:16:3c:0c:c7:50:
         52:34:14:19:a2:36:30:19:82:62:d0:33:33:32:ef:5c:23:f3:
         af:66:6c:65:a7:5a:5c:48:f4:4c:07:4e:bf:1d:77:72:19:03:
         30:9e:64:cf:d8:a4:4b:32:22:ad:a1:76:33:ff:ee:42:84:a5:
         c7:c4:15:02:aa:05:d3:e4:49:1e:a7:61:23:29:82:e4:69:d7:
         07:cf:46:0f:8d:89:d0:70:ad:04:bf:95:69:c3:a0:27:70:b4:
         2c:3d:3b:95:30:3e:f3:d3:7d:b6:0a:4a:c0:07:31:c7:b4:d9:
         de:34:f7:64:ce:e3:e6:33:57:6c:56:b4:b6:d2:03:37:aa:c1:
         50:57:7b:4d:ee:f1:21:4f:b0:4b:de:91:99:cb:67:0e:bf:03:
         9b:c5:3c:39:fe:d9:a4:74:5c:be:3c:42:8b:49:ac:e1:ac:f6:
         d6:11:f6:61:46:b5:eb:af:c3:97:29:a3:8c:65:36:49:b8:5b:
         61:96:1c:e5:0f:50:f7:b0:4a:0e:d6:c7:4c:25:7c:64:c7:06:
         84:69:10:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:52:51 2025 by rpki-client