Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
File:                     c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer (raw, json)
Hash identifier:          F3do3PuVuJ2Rqps5DgYa8wMiJQ44D136TPA1/NPdeJA=
Subject key identifier:   25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F4328584845465C2980707F93BF1E1480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 20 Dec 2024 15:39:26 +0000
Certificate not after:    Fri 26 Jun 2026 00:45:20 +0000
Subordinate resources:    IP: 23.151.40.0/24
                          IP: 199.188.196.0/22
                          IP: 2602:2c6::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:46:5c:29:80:70:7f:93:bf:1e:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Dec 20 15:39:26 2024 GMT
            Not After : Jun 26 00:45:20 2026 GMT
        Subject: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:15:52:9a:00:b5:4c:4b:b0:28:fa:07:c3:
                    c0:20:79:3c:bf:ea:d9:f8:c3:bd:03:75:33:38:36:
                    18:77:6e:4e:ce:0b:3a:2c:d0:88:26:59:d0:69:1a:
                    0b:4f:2a:2a:a3:46:b1:15:68:e5:de:0f:5f:83:ca:
                    2b:7e:da:5f:dd:d3:07:89:89:8b:b9:82:61:af:7a:
                    f9:00:d2:a4:5d:43:31:39:a6:fb:72:68:dc:34:a3:
                    e9:b6:cc:79:16:79:5e:7e:76:c1:85:0a:ba:a8:fd:
                    30:9a:3b:e7:eb:f4:a7:5c:88:e2:e6:b5:75:78:7a:
                    c8:1e:62:2e:2f:f3:34:03:cf:86:e7:6e:f8:65:fa:
                    fc:9b:9f:b5:cf:7f:d4:e8:ad:6e:dd:bd:70:d1:70:
                    53:7c:3d:04:9c:fc:56:32:09:86:3f:2a:b0:cd:6e:
                    43:da:07:64:2b:fc:4d:95:ee:12:b6:54:4e:50:b4:
                    99:c2:c0:fc:a7:36:d9:20:ee:01:ce:c9:8d:0e:45:
                    be:f9:a2:53:53:c3:d5:f2:b0:a7:0d:1b:e2:f9:cf:
                    45:23:eb:a8:70:74:89:61:30:3e:a4:61:60:39:93:
                    97:2d:8a:ba:64:81:66:48:cc:59:4c:67:b8:48:87:
                    e6:40:ee:7c:ca:fd:d1:53:a4:95:88:f7:46:18:f5:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.40.0/24
                  199.188.196.0/22
                IPv6:
                  2602:2c6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:49:00:bc:d1:24:b1:c4:27:d3:00:09:aa:44:31:3f:0d:c9:
         25:42:de:cd:2e:f0:83:34:db:76:7f:b5:e8:25:ce:3f:7f:f3:
         41:73:1a:58:a8:cc:fb:52:bc:24:46:9f:7d:9e:7d:05:ac:20:
         dd:5c:c9:3d:f1:49:b4:a2:ec:10:a6:37:75:c4:b2:2a:fb:43:
         d2:a3:8a:d1:eb:fd:b0:12:60:b6:8d:58:89:f3:24:06:a2:4a:
         97:5c:bb:e0:6f:c5:46:e7:6e:78:dc:28:9a:e2:11:fe:c6:3b:
         08:23:8b:d2:71:ef:b8:f1:be:9a:7c:4b:2b:b5:20:5e:5d:de:
         31:8b:79:e2:a3:97:72:54:3e:e4:0a:98:5d:42:22:90:39:60:
         06:67:fc:1a:d6:b7:57:02:ef:ab:f1:bf:14:de:f1:24:a8:c2:
         ca:2e:3d:57:28:f6:7e:c7:92:4a:1b:14:0e:fc:db:d7:9c:38:
         d2:04:00:5e:57:ca:00:a0:5b:ef:15:e1:4b:54:10:d5:6a:f2:
         ee:0c:16:ee:ff:fd:f7:65:4e:4a:5a:49:69:70:4a:29:0c:19:
         7a:97:69:79:97:72:ee:a2:7e:b3:60:4d:15:24:d2:57:76:c1:
         0a:f8:1d:b0:ee:f9:5c:51:5c:d9:2c:c9:18:a0:5e:bf:0b:ff:
         5d:cc:ac:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:29 2025 by rpki-client