Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac.cer
File:                     5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac.cer (raw, json)
Hash identifier:          xrhh7n5J9l9nqEAc3Be/uOHGfWsHw5VQUWNZ3f0TQaU=
Subject key identifier:   55:71:3A:D6:9A:12:74:BF:85:C6:E5:F4:17:6C:10:2F:CC:91:5F:2C
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858487AAF913CA590B6BC6E686B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 08 Jan 2025 18:49:15 +0000
Certificate not after:    Tue 13 Apr 2027 17:49:15 +0000
Subordinate resources:    IP: 205.134.128.0/19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:af:91:3c:a5:90:b6:bc:6e:68:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan  8 18:49:15 2025 GMT
            Not After : Apr 13 17:49:15 2027 GMT
        Subject: CN=5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3b:9c:c9:54:2b:0d:44:34:db:ca:44:70:00:
                    71:65:5b:4f:72:c3:5c:5e:67:14:f5:c5:4f:8d:cc:
                    1f:b5:bf:ae:d3:78:e9:e8:ac:ac:82:b8:bd:2e:cd:
                    41:25:c0:67:19:9a:cc:6d:bc:e4:a5:01:a5:ad:4c:
                    d3:1d:be:74:c3:e3:20:6c:cf:2b:89:d8:fe:c0:05:
                    99:f6:ca:00:12:aa:87:bf:ca:e4:76:0d:7a:a7:de:
                    34:b8:f7:20:69:bf:ff:d4:74:bf:02:8f:62:39:84:
                    d8:a2:85:c3:1b:c6:bc:fc:a1:f3:ec:0a:cd:9d:86:
                    b8:3a:a1:28:f0:c2:a4:34:4a:f3:26:a7:e2:19:29:
                    24:52:58:7d:e5:4d:b1:58:9e:aa:16:39:8f:bd:19:
                    73:f5:47:dd:a2:eb:a1:a9:39:98:48:2c:1e:59:97:
                    cf:ea:4a:57:67:65:ef:48:4c:3a:ca:d1:42:9c:4f:
                    9a:25:31:b8:e5:65:16:8c:7a:f2:3c:b3:40:9c:14:
                    d3:5a:69:6e:15:e2:12:7d:82:47:ae:c8:08:8c:f6:
                    fe:1a:18:20:58:1e:e5:e7:01:d1:5e:7d:3f:d0:df:
                    37:ab:64:ce:a4:d6:2e:34:05:07:c1:cd:b7:2f:fa:
                    93:86:6d:1d:e9:38:dd:f4:74:d9:02:e1:0e:32:da:
                    9a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:71:3A:D6:9A:12:74:BF:85:C6:E5:F4:17:6C:10:2F:CC:91:5F:2C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac/5c384ffd-b67b-4a6d-9af7-b4ad8ed85eac.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:6a:1b:1e:ce:b0:24:e6:74:34:1f:63:7a:47:37:5e:8e:93:
         97:26:01:29:2f:84:8d:0d:f2:8d:ac:81:c1:f1:cf:0c:cc:f7:
         96:98:04:0f:13:5f:2e:a5:fc:1d:1c:05:45:76:1d:05:d5:54:
         74:e6:1c:24:62:3b:c7:24:ea:23:72:ec:b8:42:78:26:3f:23:
         b3:42:55:9b:9f:46:99:d1:d7:ed:7a:82:59:12:a4:1e:59:f2:
         17:4f:82:24:d0:93:14:ad:cf:ce:1a:6e:b5:ef:f6:4e:3f:49:
         15:e1:b4:e5:37:31:07:5f:14:31:13:f4:b4:66:43:3e:40:e5:
         7f:ef:2e:06:65:68:4e:bb:71:de:16:9a:35:bd:91:66:d9:a0:
         62:54:5c:eb:f5:a8:ab:0a:26:93:01:63:ae:c8:be:86:d3:90:
         1f:88:0b:53:7d:69:f1:8a:65:e7:e8:ed:cd:dd:74:2a:43:62:
         16:d2:88:59:e2:4a:82:b7:90:1a:25:b1:66:50:04:93:db:6e:
         af:d8:db:81:b0:22:ab:30:ca:05:07:dc:d1:71:3f:94:ec:3a:
         6d:4f:c7:7d:99:1d:e3:6c:81:e8:d6:59:76:71:c4:c3:4e:bd:
         ce:09:99:d7:d3:cd:a4:c9:25:30:aa:91:77:b2:1c:35:5b:9e:
         2e:fb:8c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:49 2025 by rpki-client