Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
File:                     9af44307-21f9-411b-ba04-dedf105fd206.cer (raw, json)
Hash identifier:          BtjUt/ziOQFJAPHDOU77QWcvaAStPt3llzZzt19oAU8=
Subject key identifier:   73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858492D373363CE19D075B0E901C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 13 Mar 2025 17:36:25 +0000
Certificate not after:    Wed 09 Jun 2027 21:10:12 +0000
Subordinate resources:    AS: 54365
                          IP: 23.135.228.0/24
                          IP: 2602:f6c6::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2d:37:33:63:ce:19:d0:75:b0:e9:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Mar 13 17:36:25 2025 GMT
            Not After : Jun  9 21:10:12 2027 GMT
        Subject: CN=9af44307-21f9-411b-ba04-dedf105fd206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0c:1e:3c:f5:32:8f:77:a1:a9:8c:40:f4:37:
                    a7:17:80:74:61:9e:39:dd:3e:43:e5:48:bc:c9:de:
                    07:48:2d:aa:f0:b8:6c:d2:c1:ca:dd:39:95:35:73:
                    de:1d:34:27:c0:28:27:8a:85:ab:b9:c3:a1:54:11:
                    45:1f:a1:33:2a:b7:67:ce:b4:59:99:17:48:c2:61:
                    2f:05:bb:5d:84:47:0b:12:f6:38:16:8a:be:47:7c:
                    d8:be:be:8c:7b:fc:5c:ce:d1:ad:1a:c4:85:40:86:
                    88:46:0c:3e:fc:a0:0d:fd:91:4a:66:20:d0:a3:e0:
                    b5:31:82:39:29:07:f1:96:75:9a:4b:ab:3d:be:ef:
                    d7:e0:f0:ba:74:7d:ae:7d:63:6e:cb:ae:82:e0:15:
                    c2:81:cc:61:59:fa:37:54:e7:51:55:1a:d3:96:57:
                    84:f0:ab:da:22:b5:fb:5f:b3:12:a0:ae:32:f2:cf:
                    c2:7e:93:87:17:07:f8:99:33:13:c3:74:da:10:48:
                    6e:19:78:fb:d7:12:62:99:7f:82:5b:1f:7e:c4:36:
                    68:6a:6e:21:94:cb:f1:3c:d5:bc:31:a8:d6:82:78:
                    41:78:93:c3:bf:bd:09:59:1a:4a:8e:bd:e7:d7:50:
                    42:bf:00:4c:49:7f:6c:ea:61:f5:77:e4:f4:17:0d:
                    b9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.228.0/24
                IPv6:
                  2602:f6c6::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54365

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b1:e2:4c:16:f5:76:40:38:9e:b4:ba:3a:4e:d0:d4:d8:f0:
         de:ca:30:8e:df:f1:a6:5f:74:b9:be:9e:23:37:31:6a:cc:fc:
         62:df:60:96:a1:9f:af:34:bc:ad:9b:a5:b9:c1:e0:f1:89:16:
         55:f1:7f:72:95:7c:03:5b:b5:61:13:41:aa:9f:aa:f4:59:11:
         83:f5:3e:1c:a0:a5:f4:83:af:14:32:f9:26:28:e3:93:b2:54:
         5e:4a:7d:6a:8c:78:37:06:e4:12:35:44:8c:dc:be:a3:01:d4:
         45:67:b1:e2:04:f2:ac:8a:27:8a:7e:34:ae:89:6f:c1:a6:a2:
         1e:06:09:4c:a8:7e:44:62:48:08:ef:0c:60:92:eb:e2:54:6d:
         6c:23:b2:46:f6:27:8c:42:9c:0a:ed:3b:e9:90:d7:da:15:a6:
         eb:5c:f7:f2:15:cb:5a:89:16:43:1c:d7:88:f5:e0:77:90:a2:
         de:55:c4:d8:ab:10:56:4a:46:fe:56:c8:d5:82:7a:7b:eb:80:
         57:f3:87:d2:f8:27:e8:ce:e3:ce:21:28:c6:78:96:5b:9b:7d:
         76:5a:0b:07:64:ae:34:8f:c5:0f:08:ac:a7:c2:cd:62:74:cb:
         5a:f2:16:7c:a8:1a:5e:51:f4:30:ec:26:48:6c:d6:1e:74:df:
         ff:4f:bc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:22:52 2025 by rpki-client