Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a.cer
File:                     cfe58959-04ed-4c71-a14d-8066ccb1353a.cer (raw, json)
Hash identifier:          mf0QmYs9Lcd46g+m43yaPQ1i+BsjE609zZ5AZEMku5A=
Subject key identifier:   13:0F:7A:DD:DC:2F:69:9D:32:78:64:97:BD:79:BA:5B:45:CD:C5:EA
Authority key identifier: 50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24
Certificate issuer:       /CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
Certificate serial:       010D0C9F43285848EB298CEFA24A113A64EE7F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 01:45:34 +0000
Certificate not after:    Mon 24 May 2027 00:45:34 +0000
Subordinate resources:    AS: 400323
                          IP: 23.130.88.0/24
                          IP: 2620:a2:a000::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:eb:29:8c:ef:a2:4a:11:3a:64:ee:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a73420cb-b3cc-4b03-bda7-1be204933ae5
        Validity
            Not Before: Feb 18 01:45:34 2025 GMT
            Not After : May 24 00:45:34 2027 GMT
        Subject: CN=cfe58959-04ed-4c71-a14d-8066ccb1353a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:d2:61:1c:86:bc:79:74:7c:b0:fb:74:23:
                    96:40:52:6e:e0:35:6a:24:a8:97:e4:c8:92:57:e4:
                    fe:2b:34:c6:5d:80:57:b0:dc:03:ee:7d:65:0e:92:
                    1c:76:f9:50:14:a2:e2:cc:72:84:50:08:4f:6c:03:
                    19:08:e4:9f:54:4d:f1:22:04:ed:ac:d0:5c:c2:0c:
                    09:d8:60:f1:6d:a9:5a:ca:6c:7c:53:cc:a8:82:cd:
                    c4:b5:a0:c0:c9:a6:16:17:a7:d0:24:dc:8d:84:38:
                    3c:23:de:b7:0a:5e:29:56:19:27:69:94:09:00:09:
                    b6:1f:4e:9b:26:08:15:f8:d6:1e:f3:cb:b2:7d:10:
                    15:b0:ba:2c:6b:85:0d:e6:8e:40:96:98:f7:15:59:
                    18:50:d8:58:0c:b1:14:b9:64:05:c8:9d:4b:79:7a:
                    db:bd:f0:bc:75:30:76:f8:92:60:e2:1e:8e:08:76:
                    1d:43:0b:e9:9f:32:2e:8f:5c:3f:ba:15:34:e3:fc:
                    b1:49:a4:7f:db:d0:ff:48:db:f1:76:1a:a1:ea:61:
                    fb:24:fd:bd:88:3b:23:ca:b7:8a:d1:f9:44:ea:a0:
                    73:3e:7d:5c:e4:3c:ea:34:56:e1:0c:56:ed:bf:d0:
                    8b:cd:67:71:24:f2:91:dc:eb:28:b2:8a:75:7e:b7:
                    a9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0F:7A:DD:DC:2F:69:9D:32:78:64:97:BD:79:BA:5B:45:CD:C5:EA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfe58959-04ed-4c71-a14d-8066ccb1353a/cfe58959-04ed-4c71-a14d-8066ccb1353a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl

            X509v3 Authority Key Identifier:
                keyid:50:65:A7:F4:24:7E:D2:A1:3A:FB:67:E8:63:1F:8C:05:B6:BD:61:24

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.88.0/24
                IPv6:
                  2620:a2:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400323

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6a:3f:fc:97:11:cd:85:2e:74:35:15:78:44:cf:4f:74:9f:
         49:75:7e:a7:99:58:2f:f0:be:d2:80:7e:b9:5c:15:91:32:ae:
         eb:1d:d1:dc:73:c0:03:d4:c9:6a:7d:d7:92:5b:82:79:8a:af:
         d9:58:bf:b8:e2:ac:51:5a:d7:b6:06:89:c9:db:7c:d3:c0:ed:
         24:89:7e:a8:d7:71:04:6b:e4:2a:2c:03:75:e0:bd:0f:84:8d:
         96:09:c1:4f:c4:e5:94:43:f1:0f:b9:1b:e5:a1:7f:86:1b:89:
         33:44:4f:31:06:8f:6f:c3:a4:23:e3:a2:88:0b:df:17:02:69:
         b5:d6:ea:d6:03:b5:53:a0:03:a1:3c:a5:b3:8f:4b:29:20:44:
         ba:23:ec:3b:70:b0:fb:80:97:cc:1a:6a:03:68:c7:0b:01:84:
         e5:ef:be:0d:32:86:cd:17:a3:52:64:d9:08:3a:c6:e7:ff:0b:
         59:18:d5:d2:ed:4b:b3:f2:48:b7:a4:e0:f0:2e:71:c4:f2:d8:
         e1:37:1d:2a:af:ba:e6:e4:10:44:f2:14:1d:8f:8b:01:22:b4:
         f6:3f:14:6e:21:84:48:d0:0c:a7:eb:ca:be:a6:32:1d:a1:f1:
         48:32:21:06:9a:6b:2d:09:ec:af:55:79:a7:6f:35:9c:85:90:
         a0:f1:12:80
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:13:50 2025 by rpki-client