Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.cer
File:                     8205fc61-ee5e-4638-8ad1-a24d7b9c9474.cer (raw, json)
Hash identifier:          qk3MA2VuBKssFRDxUuBJKwfLaLYN1CLVrJMs+E3X40U=
Subject key identifier:   6C:05:B6:82:2D:55:D5:F2:29:8E:15:FC:50:02:3C:62:47:41:FD:12
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858492FFF8C453D38D85784513080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 14 Mar 2025 17:31:43 +0000
Certificate not after:    Thu 17 Jun 2027 17:31:43 +0000
Subordinate resources:    AS: 397253
                          IP: 209.178.201.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2f:ff:8c:45:3d:38:d8:57:84:51:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Mar 14 17:31:43 2025 GMT
            Not After : Jun 17 17:31:43 2027 GMT
        Subject: CN=8205fc61-ee5e-4638-8ad1-a24d7b9c9474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5d:ef:25:4c:bb:f2:01:a1:56:85:76:af:8d:
                    f4:cb:49:3f:76:10:1f:e3:94:45:63:79:df:56:26:
                    29:33:57:14:ae:a5:48:be:ad:24:8b:63:9c:bc:6f:
                    d3:e9:30:9f:b5:76:fa:6b:04:6d:63:bd:de:a1:bc:
                    cc:a9:80:3b:6d:ba:1d:1f:c9:67:a0:4a:db:2b:2e:
                    81:91:36:b6:71:72:22:c4:f9:01:5d:0b:be:2c:5a:
                    64:72:53:23:f2:27:a1:1f:12:13:32:17:b3:f3:44:
                    bf:7b:f4:f4:e2:09:70:1a:88:3e:69:a8:cf:ba:4a:
                    9f:28:bd:3a:d3:55:02:e1:de:2c:36:be:44:69:5a:
                    47:05:ce:ed:c9:da:ca:82:ec:5c:a5:8b:2d:7d:24:
                    6b:7a:08:24:2f:0d:0a:c6:af:8a:0e:23:39:9f:42:
                    54:ba:fa:24:cf:30:8f:db:28:66:39:0c:7a:7d:b3:
                    f8:df:7f:93:6f:cb:7d:d7:60:36:35:02:ab:35:49:
                    c3:65:da:cc:77:99:3b:cf:39:42:c9:31:a7:64:b6:
                    09:11:57:47:fb:c1:1b:18:b1:ea:c8:49:59:bf:83:
                    ec:3e:c0:1e:b7:05:5d:9b:9a:8c:59:c8:7b:db:be:
                    07:05:eb:73:c4:54:b8:2b:0a:84:4a:fd:7c:7c:c6:
                    e1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:05:B6:82:2D:55:D5:F2:29:8E:15:FC:50:02:3C:62:47:41:FD:12
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.201.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397253

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:75:e9:e0:6c:72:1d:2a:0d:be:fa:08:12:ce:e0:ae:f8:1a:
         05:e9:1e:28:f6:4b:02:f9:3a:89:f2:13:b2:19:a8:83:35:09:
         84:d8:c7:d4:ba:01:7f:e6:cf:5a:5d:0c:1d:cf:69:6c:b4:dd:
         d4:08:61:25:98:a1:f2:4e:58:64:a6:04:27:f1:cb:a6:af:c0:
         1c:ea:40:30:cb:9f:e4:2f:f1:95:2e:ec:92:a6:06:0e:6b:aa:
         b8:6d:a2:de:c5:3e:ac:83:1f:e3:a1:de:bd:d1:29:96:26:7c:
         30:05:08:dc:83:e0:8f:1f:a3:a6:5c:77:4f:ac:59:c5:78:0d:
         f5:53:39:d1:86:6e:2c:b8:02:6c:55:48:e9:a0:48:e4:cb:a7:
         a4:a6:b4:20:cf:70:e2:a4:e5:e3:a1:ee:41:b5:9b:44:ba:d4:
         2b:a9:97:fa:76:70:29:34:b7:d0:51:a4:82:79:21:68:82:cc:
         4c:ed:2d:a2:b5:76:42:b5:c7:ad:20:47:54:ca:cf:3d:7a:b0:
         44:4c:d4:83:87:33:7d:fb:0b:4e:75:00:44:a9:05:a7:72:9d:
         77:9a:d1:2f:a0:a9:d3:36:53:21:b5:97:9d:23:e4:c8:09:67:
         af:18:25:cb:fe:c5:69:2f:0b:f6:60:82:4a:d9:ea:e2:e3:7e:
         18:0d:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:21 2025 by rpki-client