Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe.cer
File:                     9281adc0-928e-432b-8a28-e77e9cddfcfe.cer (raw, json)
Hash identifier:          jOYCsMTy1fTYJv3HtjWtNR3A0DiL3/Q2VCO4o9vFico=
Subject key identifier:   B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285848E85EDBA1C70DD91149DC2B40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 17 Feb 2025 01:45:33 +0000
Certificate not after:    Sun 23 May 2027 00:45:33 +0000
Subordinate resources:    AS: 13543
                          IP: 162.253.96.0/22
                          IP: 2620:f4:c000::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:5e:db:a1:c7:0d:d9:11:49:dc:2b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 17 01:45:33 2025 GMT
            Not After : May 23 00:45:33 2027 GMT
        Subject: CN=9281adc0-928e-432b-8a28-e77e9cddfcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:f2:85:17:64:fe:6b:a2:14:a3:02:3b:94:
                    62:b1:e5:5d:f6:f5:e0:53:c9:eb:f4:98:6c:92:29:
                    ff:7b:ba:f3:fb:bc:43:4e:02:60:8d:c7:34:62:a9:
                    0b:66:d2:21:a2:88:f5:8a:90:2c:30:76:33:04:09:
                    8f:55:29:a1:ec:f3:e9:31:e4:da:4e:29:1c:c2:c4:
                    02:89:79:9e:e5:2b:d3:83:7c:f9:5a:e5:3e:03:0e:
                    95:88:c6:51:99:e7:98:8b:9a:51:40:9e:37:af:b0:
                    76:ee:51:54:83:16:1b:8c:21:dd:fd:3f:4c:1f:91:
                    48:28:3e:fa:93:e1:fa:e9:39:a7:a1:4f:46:91:18:
                    8b:b6:67:3f:9f:87:53:24:0d:9d:f6:86:ac:9a:44:
                    8b:db:ed:70:ce:23:09:20:09:29:15:6d:73:e1:36:
                    77:2a:7e:77:7e:1d:a3:61:8e:bf:02:8b:af:13:b4:
                    56:5b:c2:e9:99:47:9f:7c:2c:c6:3f:4e:f8:9d:34:
                    d9:74:f6:92:95:08:03:a3:5b:cc:f5:e4:35:d9:70:
                    a7:7d:18:03:a7:72:8b:6b:0d:c9:06:c5:6a:69:f5:
                    54:fb:45:b5:e2:10:2a:ac:ac:32:b3:e0:cf:03:82:
                    81:10:f3:65:e0:02:f6:db:6c:a5:99:53:7b:92:00:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:77:E6:CF:59:C6:E8:99:D4:E7:EB:1B:5B:A1:4C:8B:14:10:50:2B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9281adc0-928e-432b-8a28-e77e9cddfcfe/9281adc0-928e-432b-8a28-e77e9cddfcfe.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.96.0/22
                IPv6:
                  2620:f4:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13543

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:d4:f1:6b:c4:85:25:c8:55:f9:05:f7:c1:d4:54:62:c3:28:
         13:d2:9e:75:14:74:5c:69:56:15:ef:a6:fd:f6:0a:17:cf:9c:
         b5:e9:12:07:d4:9c:6d:df:17:91:4f:f9:58:a1:12:af:39:73:
         85:3c:09:22:cf:ea:91:47:11:fd:42:2e:b7:90:d8:68:34:9e:
         15:6a:36:6c:2c:43:aa:ec:39:0c:cc:c9:7c:a2:cf:fe:67:89:
         8e:d0:93:d0:9d:ec:05:d2:07:d1:0e:52:de:5d:51:cf:7e:80:
         f6:49:c3:8b:56:33:cd:0e:2b:af:6c:f5:d3:0a:5c:4d:10:92:
         16:ef:e4:09:5a:09:62:32:9c:c8:d3:0e:aa:33:c0:e2:06:8b:
         c9:2d:e6:26:5c:75:b8:02:dd:11:ea:8a:a7:f9:80:03:12:d2:
         69:32:a2:7e:b0:67:8d:77:a0:fa:e2:f9:4a:ab:98:51:6c:2c:
         ec:24:9f:58:b2:ab:09:b4:06:ab:1a:bc:e8:8f:0a:76:2b:33:
         b6:60:84:55:71:42:86:ba:83:b1:3d:a4:7f:26:d8:99:bb:67:
         e8:99:d9:63:4e:5c:3a:d7:32:6c:7d:a1:42:8b:d4:79:f3:62:
         af:15:51:d1:22:65:5b:00:1d:c4:e3:94:d1:92:d7:e3:b8:97:
         81:5c:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:16:18 2025 by rpki-client