Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77.cer
File:                     f421b0e5-f1f1-43bc-9512-cc17251b2b77.cer (raw, json)
Hash identifier:          iDNZMnapOhtWRTpn6aXJpuzKqFrSMfx+ZWjtfJe1xnI=
Subject key identifier:   79:03:83:2B:47:55:0B:DF:0A:B7:92:EF:9A:CE:93:13:F5:5D:21:A8
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F432858487E48DC9379DB1305C51C5CFD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 10 Jan 2025 01:45:33 +0000
Certificate not after:    Thu 15 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 14695
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:48:dc:93:79:db:13:05:c5:1c:5c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 10 01:45:33 2025 GMT
            Not After : Apr 15 00:45:33 2027 GMT
        Subject: CN=f421b0e5-f1f1-43bc-9512-cc17251b2b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:1a:9e:48:7f:26:7c:8e:ca:bd:96:35:52:
                    81:26:44:f8:6a:bc:b0:46:a0:08:72:7c:b3:c1:7c:
                    d0:40:4d:f4:71:8c:95:07:11:24:72:54:bc:c8:83:
                    a2:9d:14:66:3b:55:bd:25:c2:b2:52:6b:40:46:4c:
                    3e:50:d3:23:d1:8e:a0:b3:58:bc:39:16:ad:23:9a:
                    35:17:20:04:73:84:7a:fb:b9:ec:45:0f:f4:85:f0:
                    db:ee:15:4a:b0:f9:f7:48:b6:ce:44:b5:ba:83:54:
                    db:2d:8a:5c:a0:15:8d:bc:16:18:8b:e9:f4:49:79:
                    24:1c:6e:18:98:22:07:7d:b1:f4:2f:d8:97:d1:af:
                    d9:26:7b:34:15:85:7e:76:d0:de:e8:10:83:7a:ba:
                    fa:40:b7:0e:cb:53:f5:63:8c:e4:98:86:5d:f2:1e:
                    a1:7b:23:56:18:a7:03:57:13:4e:f1:ce:2f:99:67:
                    6e:75:24:05:af:a0:a2:a7:9b:08:2c:bb:98:31:78:
                    52:56:a0:1b:cb:5e:66:12:76:c9:e1:e8:f7:86:7b:
                    ee:fc:e6:d9:0c:80:e6:42:f8:8e:89:73:1e:e2:68:
                    69:af:84:53:91:5a:f5:c1:cf:2c:26:0c:2c:f2:b1:
                    42:89:81:eb:fe:cd:a1:6b:4f:2e:4e:4c:39:4e:38:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:03:83:2B:47:55:0B:DF:0A:B7:92:EF:9A:CE:93:13:F5:5D:21:A8
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f421b0e5-f1f1-43bc-9512-cc17251b2b77/f421b0e5-f1f1-43bc-9512-cc17251b2b77.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14695

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5c:4f:85:50:02:84:8a:44:21:0b:3e:e7:6a:a1:18:14:80:
         d4:81:f2:78:e2:3e:a6:b0:d2:15:02:e9:9d:ac:0e:1f:ce:7a:
         6a:35:a4:ce:18:20:ee:63:9d:65:5f:c3:3e:ea:01:74:74:7a:
         b5:2e:b9:aa:d5:fd:e3:89:41:8c:ca:06:c4:fe:20:72:37:5b:
         3a:3e:62:90:bc:c6:d3:c5:54:93:25:06:72:96:32:1f:fb:fb:
         29:51:94:ac:15:15:e2:81:13:01:cd:17:5a:c3:e7:0c:e4:65:
         11:9f:2f:d0:89:fe:11:3c:fe:da:b5:5f:e3:ee:6b:a1:bf:eb:
         6d:f4:1d:6f:84:58:60:e8:cf:72:62:33:c9:ad:48:79:9a:f1:
         1b:9c:87:09:bd:2f:67:2d:8f:96:5d:21:3c:64:c5:10:f6:c0:
         c3:90:42:d0:fe:e7:c6:5b:22:72:c8:26:cd:f8:6b:1b:d1:ad:
         c0:bb:cb:44:2d:d0:b9:06:df:6f:17:98:df:e1:f2:32:76:96:
         4d:03:2e:fa:1c:3b:41:1e:d7:45:7a:b4:6e:da:d1:43:29:e3:
         c6:2c:45:0e:62:a0:3d:d7:18:78:b2:8a:9f:06:57:70:39:48:
         f4:5e:0c:77:28:8f:9a:7c:db:0f:99:9c:9e:79:51:6f:5c:c0:
         46:4f:32:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:55:59 2025 by rpki-client