Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer
File:                     8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer (raw, json)
Hash identifier:          G4VCoBhoyXOQfTQKjvGkW8xJcA668OXsKQZ35rabOVA=
Subject key identifier:   32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584890B4261EB46F7B65398E5900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 16 Jan 2025 16:06:16 +0000
Certificate not after:    Wed 21 Apr 2027 15:06:16 +0000
Subordinate resources:    AS: 30011
                          IP: 162.118.16.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:b4:26:1e:b4:6f:7b:65:39:8e:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan 16 16:06:16 2025 GMT
            Not After : Apr 21 15:06:16 2027 GMT
        Subject: CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:5b:83:c4:04:7d:36:90:1d:5e:bc:a6:fb:
                    b6:50:90:ab:fb:50:35:fd:17:54:51:f9:48:97:46:
                    72:92:0f:ae:95:ed:0d:bf:a8:5a:88:c4:31:5c:df:
                    1d:b7:e3:0c:7a:25:e9:2e:b4:4b:e9:6a:47:1b:b9:
                    22:92:58:11:32:89:74:6c:50:e0:bf:22:ca:47:9d:
                    d8:0d:5d:1e:7f:cf:12:ec:a6:4a:21:f6:35:ac:51:
                    52:b5:95:77:7b:09:ca:a9:d4:4a:b9:3d:2a:84:0e:
                    0d:13:48:c5:a6:f4:3c:ea:27:77:09:c9:e1:1c:fe:
                    d0:82:96:ee:fd:56:f6:1d:67:04:8e:10:d2:26:00:
                    74:2b:3e:ef:58:e7:16:69:94:b3:95:39:72:e4:8d:
                    9a:29:21:33:41:4b:bd:61:b8:a8:d3:45:0b:11:73:
                    16:1c:01:1d:75:f6:3e:53:11:98:3f:1d:1e:d8:8e:
                    fb:b4:9a:c7:97:c3:4f:96:58:59:ae:e7:80:ea:cd:
                    27:dc:de:a9:63:85:31:af:42:35:aa:a1:ae:15:38:
                    31:96:31:b5:ae:2d:e5:ee:c6:cd:3e:9c:06:14:d6:
                    0c:16:6a:cf:d2:56:c6:17:ce:d7:f8:a1:3a:ef:5e:
                    3a:a6:64:43:d5:1b:42:bf:73:7b:c1:29:3d:23:58:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.16.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30011

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:fd:ba:7b:c0:e5:be:50:3b:8c:1d:4b:02:a8:05:18:2c:88:
         26:43:67:4e:59:db:67:b3:56:3b:8b:ca:b9:e9:bd:a9:97:1f:
         88:e2:b7:7e:0a:01:42:b0:93:79:a1:54:39:32:fc:30:64:4e:
         2c:f5:b3:12:ff:37:d4:5c:d4:44:48:03:5c:91:ca:64:d1:61:
         bb:8b:c5:b0:c9:1f:f2:73:a0:84:4f:ce:8a:2b:61:a4:e3:40:
         12:8a:69:9f:dc:24:04:3f:7e:56:65:7e:ec:83:7e:27:b0:2f:
         ce:bb:cf:79:a0:c7:1e:67:eb:20:7e:da:40:42:cb:13:70:56:
         28:49:c4:2a:4a:88:3a:87:1a:ee:0c:c4:32:8f:4f:1e:93:16:
         3f:f1:7e:21:eb:77:57:06:44:d7:34:84:6a:d6:11:23:15:43:
         63:f1:e5:05:f8:54:d1:4e:35:d3:0b:ad:73:b4:31:46:45:ed:
         c7:f4:c8:93:f7:b5:1a:20:2b:8d:ae:a3:fa:7a:4b:2e:4b:78:
         0d:1a:2e:50:fe:de:c9:fe:8c:21:5f:1f:55:6b:af:2a:1e:c3:
         41:0b:f3:7f:8c:31:6e:3c:5d:7e:13:a1:1a:d7:48:55:f8:3c:
         81:7b:b4:68:38:53:ab:7e:98:a6:90:d6:60:f1:82:6f:9c:28:
         92:13:bc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:34 2025 by rpki-client