Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer
File:                     f01f7e0b-00cb-47a2-8e20-033b3567cc6d.cer (raw, json)
Hash identifier:          2dexe8vmHq9fgqZx//6ELQyJCWMCq9VeURN2LvMmjh0=
Subject key identifier:   C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848F91EF79B37C03FDC45FC3280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 23 Feb 2025 01:45:33 +0000
Certificate not after:    Sat 29 May 2027 00:45:33 +0000
Subordinate resources:    AS: 40924
                          IP: 23.165.24.0/24
                          IP: 2602:816:7000::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:1e:f7:9b:37:c0:3f:dc:45:fc:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb 23 01:45:33 2025 GMT
            Not After : May 29 00:45:33 2027 GMT
        Subject: CN=f01f7e0b-00cb-47a2-8e20-033b3567cc6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:03:fd:17:8e:ad:dd:f8:ef:0f:03:31:7f:
                    a0:59:3e:8b:c2:eb:d0:04:06:94:89:e8:0c:99:ae:
                    61:46:e2:28:33:31:c7:aa:45:f3:cf:35:4d:d5:5d:
                    17:9a:bf:d3:8c:ae:64:47:67:d2:56:da:56:94:e3:
                    e1:cb:08:2f:81:e3:70:d9:d3:e7:13:b9:1d:69:d9:
                    48:1b:bf:84:50:82:66:95:e4:81:47:40:20:93:b7:
                    35:a5:3c:a0:1a:a4:61:10:bd:46:95:8d:92:66:f9:
                    f8:9f:7a:0c:2f:ee:6c:5a:ab:03:10:eb:65:a1:32:
                    97:83:e1:29:26:ba:14:63:0c:55:a4:2d:93:d3:30:
                    a0:cb:a8:db:a7:97:37:7a:79:7b:d6:9b:0b:07:e8:
                    14:88:35:23:2b:0c:7b:0d:33:8c:42:1a:7f:58:3f:
                    08:a4:99:e0:9e:26:4a:b6:eb:7a:dd:27:1f:f0:24:
                    ed:cf:29:e3:99:3a:9e:5b:f3:b8:fa:6e:88:06:07:
                    a8:68:d8:55:b7:ad:4b:6a:17:23:91:96:a8:c8:7d:
                    60:8f:22:02:95:c8:d5:7b:33:38:d4:25:5d:aa:3f:
                    c7:4c:b6:86:21:ef:11:76:a9:a4:99:aa:bb:1f:a6:
                    fd:2e:cc:78:31:b0:4b:54:a9:52:2e:31:d9:d2:48:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:B0:CF:EE:CF:2D:6E:58:9D:E0:98:65:81:57:82:21:A4:28:40
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f01f7e0b-00cb-47a2-8e20-033b3567cc6d/f01f7e0b-00cb-47a2-8e20-033b3567cc6d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.24.0/24
                IPv6:
                  2602:816:7000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  40924

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:14:c4:8f:c8:70:2f:8a:71:ca:f3:4a:df:db:f0:9f:c5:09:
         ad:4d:f2:87:7b:be:86:45:cb:29:96:b7:7a:0c:4c:3b:c2:a3:
         bc:8a:69:09:f5:44:38:1d:ee:f3:96:46:10:22:93:75:dd:c7:
         05:03:45:08:62:26:01:ac:ea:50:1a:8f:d6:f4:36:dc:53:8b:
         a8:f6:7b:24:e7:3f:84:03:2d:b8:4d:6b:f8:5e:9d:a4:93:31:
         af:9d:0b:42:3e:02:6a:ec:24:91:51:17:d0:7a:ee:6e:69:93:
         31:7f:28:c2:6e:fc:64:79:76:c8:3e:2c:e3:2e:ad:6f:5b:4c:
         93:2c:6b:85:d8:ea:1b:1e:8f:22:85:79:41:56:e9:b3:e1:7d:
         c0:3f:3c:b1:b1:77:12:55:cf:51:24:d6:57:d7:8e:e8:b6:24:
         0f:32:7c:28:71:24:bc:98:87:14:ad:fd:56:c3:9e:45:96:9d:
         fc:4d:a4:92:91:86:09:9b:0b:71:e9:76:e5:c3:74:6c:ff:65:
         a8:a7:87:51:a5:b8:75:6c:2d:07:76:f7:cf:7c:53:30:73:9f:
         1b:63:ea:6b:72:0f:31:e4:dc:a0:84:10:19:77:06:db:c4:97:
         80:c7:4a:82:57:8f:bc:02:21:e2:94:2e:af:00:40:17:e6:26:
         93:1f:d1:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:45:14 2025 by rpki-client