Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3261a067-44eb-4452-83cc-ef373be9e521.cer
File:                     3261a067-44eb-4452-83cc-ef373be9e521.cer (raw, json)
Hash identifier:          l+UblTIDkyQjJvX5BYK9XaudRuGFJo7goxqyjIrlnoE=
Subject key identifier:   CD:27:D0:33:CA:11:0F:62:BD:7C:18:E6:61:27:D6:60:ED:DD:C3:D6
Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0
Certificate issuer:       /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
Certificate serial:       010D0C9F4328584951D2D670BE6660E001C31D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3261a067-44eb-4452-83cc-ef373be9e521/3261a067-44eb-4452-83cc-ef373be9e521.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3261a067-44eb-4452-83cc-ef373be9e521/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Mar 2025 20:19:07 +0000
Certificate not after:    Tue 29 Jun 2027 20:19:07 +0000
Subordinate resources:    AS: 32367
                          AS: 400676
                          IP: 74.122.112.0/22
                          IP: 158.120.126.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:51:d2:d6:70:be:66:60:e0:01:c3:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3
        Validity
            Not Before: Mar 26 20:19:07 2025 GMT
            Not After : Jun 29 20:19:07 2027 GMT
        Subject: CN=3261a067-44eb-4452-83cc-ef373be9e521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:9e:73:1a:5f:81:9a:86:81:35:3a:2e:b8:
                    f8:41:9c:03:de:4c:34:cd:20:92:16:fe:9e:a4:2a:
                    ff:73:4e:fb:92:ff:7e:11:33:d2:7a:fd:1a:95:2a:
                    98:fe:c5:36:64:01:51:0b:06:9e:85:b7:91:80:34:
                    5a:06:12:02:1c:96:55:9d:59:50:5b:43:bd:f3:f4:
                    8a:64:32:26:2e:c7:e5:3f:ad:27:9e:bd:ce:f1:5c:
                    8c:8c:fa:03:ea:44:75:d6:b6:fb:a9:0c:d5:7d:41:
                    6d:d5:6d:7b:9b:06:76:6c:2c:42:0c:19:94:bc:2f:
                    6f:93:88:e4:30:4d:d3:69:51:39:21:66:eb:71:8d:
                    a1:6b:d2:91:41:99:f7:6e:55:0f:da:dd:08:63:10:
                    2e:98:31:86:ce:aa:9f:fa:8f:15:da:c3:98:90:4b:
                    9f:56:40:87:fa:cc:d8:cd:4d:b7:9d:48:7b:6d:40:
                    7b:e6:7e:ac:ec:66:3c:6a:bd:4b:69:7f:be:88:cd:
                    4c:da:7a:ce:dd:d2:12:c5:85:5f:18:a5:f3:cc:0d:
                    70:00:89:83:d3:20:c7:16:26:52:d6:7a:ae:7b:38:
                    03:e3:b2:70:89:ff:72:ef:84:8b:aa:24:dc:c3:f6:
                    05:9a:e3:82:5a:a0:78:cf:91:9f:78:2c:81:16:51:
                    6a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:27:D0:33:CA:11:0F:62:BD:7C:18:E6:61:27:D6:60:ED:DD:C3:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3261a067-44eb-4452-83cc-ef373be9e521/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3261a067-44eb-4452-83cc-ef373be9e521/3261a067-44eb-4452-83cc-ef373be9e521.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.112.0/22
                  158.120.126.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32367
                  400676

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:df:5b:53:12:04:34:e3:2d:cd:ef:18:4d:d2:12:87:d7:64:
         78:87:ee:eb:78:00:d9:8c:d0:83:2d:5a:91:6d:98:cb:47:5c:
         86:61:9e:b4:92:e0:d2:83:86:2c:6b:30:a2:d2:1c:86:4f:60:
         fe:ce:d5:65:7c:b0:44:b6:8b:13:ac:a7:a1:1a:e2:01:e0:c8:
         52:22:a0:04:cc:63:01:40:16:62:7a:ae:1b:36:fd:7b:b7:fd:
         c5:c6:8a:6a:01:ef:a9:7a:39:3d:67:57:a1:67:99:37:98:dc:
         b9:c7:ff:76:5b:20:a5:a5:ff:f5:a3:1b:58:72:17:b9:10:e0:
         42:89:e6:a7:f4:72:f3:2d:a3:48:d3:13:f9:07:52:bc:ed:d8:
         0a:39:84:bd:02:f0:ec:24:b0:77:d2:e2:64:3f:73:bd:79:e7:
         0f:dc:5f:ad:da:c5:10:f7:5e:15:1d:bc:75:53:4a:8b:e9:c3:
         e7:17:6e:32:66:ee:b4:83:38:18:0e:f2:15:e9:e5:01:3a:00:
         5c:7f:3b:d2:94:4c:cd:13:d4:3f:8f:6e:61:b1:3a:b5:82:c7:
         b4:8b:59:7b:8b:d5:d8:81:67:81:59:85:50:ce:01:55:4e:4a:
         de:7f:40:f3:51:d5:59:be:74:0a:12:c9:cb:d5:31:64:8d:4f:
         53:f0:cf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:26:11 2025 by rpki-client