Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665.cer
File:                     9caf23fc-9cbc-4f40-aea8-07653211f665.cer (raw, json)
Hash identifier:          bDXTVc+rOtn7cAaIPw3y/fbH4p0GaTZy2QZtfNITbo8=
Subject key identifier:   4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848EBA284E95D9CBB59B68E0200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 05:49:18 +0000
Certificate not after:    Mon 24 May 2027 04:49:18 +0000
Subordinate resources:    IP: 23.134.36.0/24
                          IP: 2602:f6fa::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:eb:a2:84:e9:5d:9c:bb:59:b6:8e:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Feb 18 05:49:18 2025 GMT
            Not After : May 24 04:49:18 2027 GMT
        Subject: CN=9caf23fc-9cbc-4f40-aea8-07653211f665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:d6:50:31:28:b7:9a:7c:ec:b2:a8:13:0d:
                    a1:9e:07:ce:13:10:31:eb:82:86:ec:70:94:95:0d:
                    75:d1:4a:be:3b:8b:9d:0a:87:b2:a6:8a:66:b2:57:
                    ef:b1:ac:4f:fc:5f:13:8c:2e:50:8f:77:1d:65:e4:
                    ee:49:c5:62:d0:0a:70:42:5c:bf:77:70:29:75:b2:
                    0f:5f:f7:db:3e:6b:03:25:61:d4:e1:e0:a4:51:d6:
                    90:8d:07:8d:14:c0:9f:85:42:7e:66:e7:89:7a:61:
                    99:95:c6:d6:22:4b:6b:23:27:0b:55:ee:2c:79:de:
                    b8:c9:74:de:7a:b2:9a:6f:f7:e9:5c:93:11:59:1a:
                    9b:b9:69:e4:08:47:9f:06:e6:78:90:89:c4:04:ac:
                    4b:67:79:3f:63:ef:df:58:fe:f7:e6:45:4e:ef:9b:
                    89:0c:68:24:79:95:bc:cb:16:d9:04:b5:6b:d7:12:
                    9f:65:cd:8e:5e:08:17:47:8b:d2:ea:54:2d:3f:a9:
                    f4:bc:d7:c9:8e:90:ca:36:db:d1:09:84:20:95:a5:
                    c6:74:40:68:80:b0:6f:61:79:b0:05:bc:c0:4f:4a:
                    3b:14:7f:b4:3d:00:b9:1e:f3:b5:56:8f:13:4b:05:
                    96:64:91:0c:ba:d6:41:42:c4:dc:83:d2:64:b2:9d:
                    e5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EC:93:B1:A1:8E:F5:C8:50:02:AE:57:40:98:F3:21:98:73:1D:CF
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9caf23fc-9cbc-4f40-aea8-07653211f665/9caf23fc-9cbc-4f40-aea8-07653211f665.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.36.0/24
                IPv6:
                  2602:f6fa::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:78:c4:3a:77:57:b0:49:f4:02:10:9c:02:f1:ba:47:79:33:
         ad:0d:45:11:8f:12:21:35:05:8b:b4:b4:98:47:ac:07:37:38:
         ab:60:70:e6:22:6d:f0:bd:e2:f3:5e:95:f9:59:ea:44:af:1b:
         79:f6:28:d9:ff:47:27:0c:e5:00:b7:9c:00:11:43:24:b2:6b:
         e8:13:19:93:3b:91:d0:ce:8d:96:0d:3d:2c:51:84:f5:73:88:
         37:e5:38:94:ed:3b:24:a9:f7:df:ed:85:10:41:f6:25:24:93:
         de:fd:7b:38:58:8f:f1:e5:da:b4:a5:d2:63:bd:99:46:30:7e:
         9a:e6:73:7c:0b:42:b6:fb:ec:44:04:86:ca:9c:9f:aa:c5:60:
         fd:ae:80:a0:b8:6b:c2:4f:a0:8c:6e:21:e9:c4:0f:4f:35:49:
         0b:51:37:f6:ab:d9:41:f8:2f:4a:52:eb:21:1e:51:61:97:bf:
         5d:b9:1b:1c:b4:d3:24:77:09:88:7a:78:35:87:98:13:50:d8:
         19:31:0a:dc:68:a1:a0:0f:a2:ef:6d:31:ef:05:89:b9:5b:64:
         a4:95:f5:ac:c2:e3:52:86:20:ef:2b:3f:f6:d9:89:d7:03:13:
         f6:08:f6:16:97:52:d2:aa:f9:29:e0:02:8a:f3:e7:73:fe:c9:
         32:1b:ac:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:26 2025 by rpki-client