Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer
File:                     c266fc5e-8a05-4885-8e18-2330a83fc5f6.cer (raw, json)
Hash identifier:          22jY9pVlGw0I12j8kqEoF6jc/nnxpk4dw8m9/ucNEis=
Subject key identifier:   CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F432858488973992E29978E81E4D30080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 14 Jan 2025 01:45:33 +0000
Certificate not after:    Mon 19 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 393581
                          IP: 2620:1fe::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:89:73:99:2e:29:97:8e:81:e4:d3:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Jan 14 01:45:33 2025 GMT
            Not After : Apr 19 00:45:33 2027 GMT
        Subject: CN=c266fc5e-8a05-4885-8e18-2330a83fc5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:2e:20:5c:42:9a:29:1a:95:74:84:33:3c:
                    54:7d:af:fe:3b:25:1c:e9:a5:43:aa:6c:77:50:3d:
                    dd:a5:9f:59:63:53:81:b8:4d:85:b5:a5:ab:fc:7a:
                    2a:94:2b:5b:e8:f9:60:f0:82:e7:03:35:02:ca:2d:
                    e7:d7:1d:25:d3:29:16:1c:7d:3b:d8:0c:71:d6:a2:
                    18:9e:95:22:40:17:ac:f2:1b:f6:10:09:c9:4e:a0:
                    84:65:69:8b:65:66:54:32:ba:70:f7:dd:3c:cb:28:
                    02:09:c4:1d:7d:ad:54:1a:30:15:b1:a5:da:a2:35:
                    fe:10:06:09:f9:f6:22:bd:0c:89:9c:11:33:62:46:
                    bb:af:37:8f:ea:22:c4:15:70:62:2c:10:a8:50:1f:
                    6e:69:d1:f7:1c:79:08:90:35:b6:7d:1a:8c:3b:5d:
                    7e:85:27:72:37:c8:d2:ec:48:a4:13:f9:0c:13:87:
                    87:fe:77:57:1f:f3:98:c8:48:71:68:da:2e:20:7a:
                    b4:89:4b:14:10:64:fb:c4:51:11:43:4b:4e:69:55:
                    fa:93:7d:47:57:e0:36:ce:06:4f:16:29:4f:6a:98:
                    11:83:89:d5:67:24:cb:fd:8e:04:15:08:ab:c7:3d:
                    6c:e3:ab:5e:46:b5:60:6a:61:02:f7:40:6e:80:32:
                    34:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:16:19:DD:66:99:8A:39:E4:FC:4E:B1:24:2B:A2:C7:63:72:07:2A
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c266fc5e-8a05-4885-8e18-2330a83fc5f6/c266fc5e-8a05-4885-8e18-2330a83fc5f6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1fe::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  393581

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:6e:9b:1d:8c:14:0a:2d:28:e9:be:ea:d2:8f:24:18:b4:
         8e:dd:63:ad:45:e7:be:e3:7a:ca:42:34:5f:fa:bd:ec:bf:68:
         97:e4:14:0c:5d:33:dd:f8:ad:69:5b:7b:58:cd:29:6b:18:e3:
         9b:97:1a:9e:91:bd:8b:d8:8a:f9:45:f5:52:1b:19:8d:24:3c:
         f5:32:1f:e4:94:02:18:ea:71:37:80:0c:fb:89:d4:91:c7:d6:
         8d:64:81:da:91:ae:68:c1:36:66:b1:00:4e:01:22:66:3e:25:
         a7:09:67:47:33:0a:6d:60:7d:c6:f1:8a:27:4e:79:68:5b:0e:
         0c:62:b2:6f:e3:82:d1:eb:6a:24:ee:d3:de:f8:95:6f:ee:02:
         b8:ec:f1:1f:8c:5e:de:66:5b:3e:fe:8d:2e:ee:d3:c7:7c:28:
         fa:18:39:8a:a2:98:44:38:2e:c3:4b:ea:80:43:fb:90:6a:46:
         f3:73:fb:b1:a1:24:56:26:08:43:3a:7c:58:b5:b3:32:e5:a9:
         0a:65:29:fe:43:92:11:bc:29:bd:c5:26:7d:3b:04:8a:df:69:
         95:54:a3:f7:a7:70:11:02:02:13:09:c4:dd:f0:6b:aa:77:45:
         99:d5:83:11:a3:7b:32:ba:8b:d2:08:3c:6b:c4:7b:cd:6c:cb:
         c7:93:26:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:42 2025 by rpki-client