Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a8396c32-f694-4a12-a5be-592b3fa5246c.cer
File:                     a8396c32-f694-4a12-a5be-592b3fa5246c.cer (raw, json)
Hash identifier:          NdwXELZjmjQc4lQQ07mLRz7Ze3rlFktwsELEtu7MR9A=
Subject key identifier:   47:C4:23:D1:6B:EC:9A:46:D6:60:01:CE:8D:99:4F:0C:13:62:B2:42
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858487FEC4EA2C10E30CD4A524114
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a8396c32-f694-4a12-a5be-592b3fa5246c/a8396c32-f694-4a12-a5be-592b3fa5246c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a8396c32-f694-4a12-a5be-592b3fa5246c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 10 Jan 2025 15:50:41 +0000
Certificate not after:    Thu 15 Apr 2027 14:50:41 +0000
Subordinate resources:    AS: 18476
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7f:ec:4e:a2:c1:0e:30:cd:4a:52:41:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan 10 15:50:41 2025 GMT
            Not After : Apr 15 14:50:41 2027 GMT
        Subject: CN=a8396c32-f694-4a12-a5be-592b3fa5246c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:77:c5:07:09:d6:0a:f0:82:e1:c0:c3:51:ad:
                    53:8e:e5:9f:46:6f:0c:94:dd:d0:74:a8:87:57:55:
                    df:17:bc:a0:5c:d9:e8:2d:02:cf:a2:35:63:3e:63:
                    d9:98:89:22:a9:e9:53:fb:80:e3:db:e1:5e:cd:7c:
                    9d:79:88:ab:58:f6:0b:7b:8b:5e:2e:fc:44:c7:d3:
                    5f:14:02:2b:6f:06:73:68:8b:55:36:53:4e:80:b9:
                    9c:ba:9d:fd:3e:34:ec:04:25:35:7d:4d:06:fc:7d:
                    33:d8:d7:7e:ea:66:04:8d:5d:73:bb:f3:98:d3:ba:
                    4c:1b:1e:93:ec:4e:0d:01:d2:5b:d6:0d:28:02:70:
                    59:32:3d:7c:b6:b2:b3:08:03:c2:01:b7:bc:9a:ad:
                    1c:5e:e6:c3:d4:68:23:4a:52:93:22:d6:3e:4f:42:
                    ad:c6:4d:d8:6a:a5:58:d8:81:9f:be:6f:87:87:7f:
                    39:5f:39:cc:63:87:ca:d8:b6:de:2c:eb:bd:fb:61:
                    d8:ca:25:5e:ee:5b:15:7f:44:fb:53:31:02:92:87:
                    72:a6:5a:75:36:17:65:c8:ff:24:6e:4c:a7:47:c8:
                    36:41:12:88:de:38:46:f3:4a:60:5e:59:1b:31:40:
                    c4:d4:07:7d:41:0b:29:dd:1d:f2:75:3d:ed:fb:90:
                    b7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C4:23:D1:6B:EC:9A:46:D6:60:01:CE:8D:99:4F:0C:13:62:B2:42
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a8396c32-f694-4a12-a5be-592b3fa5246c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a8396c32-f694-4a12-a5be-592b3fa5246c/a8396c32-f694-4a12-a5be-592b3fa5246c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18476

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:af:19:ff:bf:26:29:38:cc:66:73:41:60:a6:f7:36:09:f4:
         7d:8f:0a:18:94:81:cc:84:e9:11:14:85:8a:f4:d9:35:c9:24:
         7b:52:d8:99:91:4c:06:b3:fb:b6:63:47:f6:1b:e7:7c:48:a6:
         e1:26:c1:25:70:0e:ae:9c:51:35:6f:5d:d7:81:88:f9:43:96:
         b1:62:93:2a:e5:2d:28:56:28:8c:18:bd:0c:50:03:47:59:a8:
         f2:67:bd:b8:c0:f1:8e:06:76:db:04:d4:2f:b8:20:3b:85:ca:
         3d:b4:95:1a:dc:62:fa:0d:16:d5:7e:0f:6e:20:b9:e4:eb:c5:
         ae:9a:7b:ff:3c:6e:77:2b:c1:70:ea:1d:22:e8:34:ef:a8:75:
         4b:16:07:00:fc:00:1b:48:98:8f:a4:71:8d:4d:a5:c3:58:11:
         24:74:25:2f:dd:b0:dc:6f:96:b9:d2:42:e8:6a:e8:cb:d5:71:
         c4:c3:68:80:55:93:97:e7:44:9e:14:38:48:16:84:27:99:16:
         4e:b7:4a:3f:69:86:f3:12:93:8b:ac:03:03:b3:c7:d8:c9:5c:
         39:29:4c:8f:a6:54:12:b6:2f:8f:3a:45:29:ed:a9:b3:ba:5e:
         0d:f6:98:86:9d:93:b7:b2:27:cb:42:96:2b:a9:c4:b0:fc:c6:
         a6:41:d4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:22 2025 by rpki-client