Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa.cer
File:                     4eb5326f-ee03-4174-b355-9916b3e826aa.cer (raw, json)
Hash identifier:          sW9mE1d9/VDrkBsXV1BPgqcOfV1lbFjYLsV6/glfd4U=
Subject key identifier:   4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285848493DE0FAC7EBAFD856146A40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 22 Dec 2024 01:45:34 +0000
Certificate not after:    Sat 27 Mar 2027 00:45:34 +0000
Subordinate resources:    AS: 32076
                          AS: 400380
                          IP: 64.30.148.0/22
                          IP: 81.199.36.0/22
                          IP: 81.199.144.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:49:3d:e0:fa:c7:eb:af:d8:56:14:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 22 01:45:34 2024 GMT
            Not After : Mar 27 00:45:34 2027 GMT
        Subject: CN=4eb5326f-ee03-4174-b355-9916b3e826aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:69:7a:db:d5:26:e0:32:52:95:f5:bd:6d:
                    b0:9f:c6:61:ec:14:3e:ce:5b:eb:b1:e0:b8:dd:24:
                    78:7c:10:e1:75:ed:fc:69:32:9e:b3:9b:c3:a0:34:
                    61:6a:80:c2:d6:70:be:50:7b:00:7a:2c:f3:c0:cc:
                    a5:02:5c:a3:62:a1:bb:1f:6c:bf:d0:59:da:ee:10:
                    07:a5:ee:38:f1:2a:02:f0:04:0c:90:8e:8d:f6:bf:
                    7e:15:6d:66:a4:a9:8c:ba:f9:7f:d3:7b:ce:a6:73:
                    85:49:96:31:2c:8c:d9:ee:9d:ce:c7:0b:91:82:85:
                    bb:14:11:62:51:f7:3b:10:62:4a:81:25:ca:31:a2:
                    8b:7e:9b:0d:31:7b:54:bd:63:96:b7:e4:4b:83:b7:
                    f0:57:5b:22:cf:69:50:09:63:87:c9:f3:fc:65:c5:
                    a9:fa:fb:32:38:e0:d2:b4:27:3e:d9:01:5c:25:93:
                    e9:da:ed:72:71:77:3d:1c:d6:c9:8a:45:23:a3:e0:
                    76:66:b4:9e:40:b0:e8:d6:c6:11:8c:ce:d5:2e:33:
                    38:8f:d1:8b:d0:ec:af:7e:d3:2d:b3:e8:bf:3f:f3:
                    b3:19:a0:93:73:7e:7f:21:8c:4f:de:1f:84:48:b1:
                    14:d5:d1:1c:f5:42:8f:96:ac:1d:f4:af:74:65:2e:
                    76:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4E:2E:24:94:A1:C2:CB:38:23:6D:6E:68:47:24:1D:D2:41:DC:1F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4eb5326f-ee03-4174-b355-9916b3e826aa/4eb5326f-ee03-4174-b355-9916b3e826aa.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.30.148.0/22
                  81.199.36.0/22
                  81.199.144.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32076
                  400380

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:12:2f:d4:80:45:2a:50:04:43:18:a6:79:82:a6:1c:67:88:
         8c:f5:df:61:0f:12:15:1d:bb:26:6d:a6:a8:f4:d6:27:08:8c:
         00:04:b1:db:de:aa:69:5e:65:73:a2:80:30:02:a4:7d:a5:ec:
         ef:2c:98:88:6d:78:19:6b:ff:c3:10:ea:c9:86:a2:d5:0b:3b:
         97:43:46:40:d5:aa:6b:7e:bc:6b:0e:a1:34:4b:24:9e:2d:3b:
         f4:ab:8b:24:10:7a:27:10:1b:28:f1:d0:fb:89:bb:54:b1:43:
         39:b3:82:11:db:c8:59:b5:34:95:14:fa:2d:1f:f8:ce:6c:61:
         d7:a4:51:d6:fa:fb:86:95:68:0c:77:c5:88:91:7f:e9:a8:b6:
         19:b3:ad:4c:5f:87:8e:e3:87:f9:dc:f6:2e:79:6f:7e:89:f3:
         31:05:08:94:06:bd:a2:bb:6b:28:8f:3b:3c:bc:84:94:49:74:
         b4:c9:96:20:b7:8a:31:19:bc:bb:37:2d:59:c7:97:26:fd:f4:
         1e:b6:6c:8d:49:a5:22:d1:7e:75:33:81:40:f8:65:78:3e:69:
         a5:eb:16:48:88:ee:f9:b5:99:a3:41:3f:57:dd:b5:57:be:80:
         76:2e:b7:50:73:81:12:c2:68:30:c4:f0:c3:6e:ec:11:17:fc:
         98:bc:65:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:28:35 2025 by rpki-client