Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5.cer
File:                     ab5b105c-8dbd-45f0-ac97-15de885200c5.cer (raw, json)
Hash identifier:          OYp8/4t1WZoULyKbWur8SJucbUECrOUbWrkVQuCrhvA=
Subject key identifier:   44:D3:F7:A3:DF:11:1F:5E:E6:F8:9F:17:2E:A9:27:30:30:E3:96:64
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848A202874F7738CC60CE146940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 22 Jan 2025 20:52:56 +0000
Certificate not after:    Tue 27 Apr 2027 19:52:56 +0000
Subordinate resources:    IP: 69.59.30.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:02:87:4f:77:38:cc:60:ce:14:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan 22 20:52:56 2025 GMT
            Not After : Apr 27 19:52:56 2027 GMT
        Subject: CN=ab5b105c-8dbd-45f0-ac97-15de885200c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2b:c3:dd:70:a1:b1:f7:6a:b6:8c:08:01:2f:
                    3a:43:49:f4:e6:66:2e:93:02:88:04:49:a7:f2:26:
                    e9:71:76:1a:45:f3:ee:e8:d5:c8:3b:a8:89:9d:5c:
                    c7:e5:72:b3:47:25:c2:8a:26:b4:67:e5:33:a8:e2:
                    b5:f5:6f:59:eb:00:e7:05:6c:93:57:b8:e3:b4:2d:
                    93:80:51:bb:11:0a:9c:94:71:c5:04:af:0f:46:f3:
                    8e:ec:d5:40:4d:eb:da:90:56:ff:08:54:d1:b4:db:
                    2a:c3:3d:a5:42:66:0b:7a:0a:46:f9:a9:5d:c1:c8:
                    37:fc:e6:81:80:12:9a:7c:b6:5c:20:4c:b5:53:4a:
                    07:d0:91:91:ed:a8:16:4a:04:6e:a3:3b:5b:7a:0d:
                    e6:64:21:b8:1d:14:d6:58:1a:b3:6c:fe:aa:96:5f:
                    9e:5e:5e:7a:0a:6c:c9:96:08:83:a8:86:6e:65:49:
                    6e:6a:e3:4b:6f:15:ac:ef:af:87:b8:62:51:e1:32:
                    1f:0a:7f:3c:44:b5:8a:89:ee:df:f2:fd:d3:60:ba:
                    1e:d6:f7:54:c5:d3:11:70:8a:0d:31:4f:e6:04:45:
                    6b:fb:6e:e1:fa:e6:c2:62:8c:4b:5b:9c:aa:21:b7:
                    59:0a:d3:ee:54:d5:70:da:05:14:1c:60:af:7c:d8:
                    fc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D3:F7:A3:DF:11:1F:5E:E6:F8:9F:17:2E:A9:27:30:30:E3:96:64
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:38:4f:d9:23:f9:8d:75:79:ad:75:13:45:e6:8b:de:77:ef:
         35:51:c7:f5:52:2b:72:95:54:60:a7:f7:67:d1:dc:6d:53:30:
         3e:44:2a:16:8d:aa:e5:12:c5:d2:ef:de:c8:fa:15:b4:4e:6d:
         05:49:54:a6:13:e6:d0:3c:11:a8:c6:5e:9d:1a:07:b3:51:13:
         79:c6:48:9a:b3:ac:c2:0f:43:e6:07:e7:14:ef:3d:e6:73:a8:
         06:75:cb:d6:2b:df:cc:de:a9:36:e1:3e:bb:a8:62:cb:b1:aa:
         65:ce:7c:92:f5:78:1c:5e:6b:d5:52:cf:89:b5:44:8c:a0:7c:
         4d:98:3f:c2:43:13:0c:66:bf:4c:84:f2:fa:41:f4:3c:5e:ea:
         10:6f:b8:18:0b:f8:91:79:2a:32:e5:83:fc:ed:23:56:9d:f1:
         a3:03:d5:11:14:c3:1f:89:dd:e5:17:f9:13:7a:4e:2b:0e:eb:
         9c:21:0a:97:5b:4f:91:bd:32:89:19:4d:2f:14:c3:d1:1f:1c:
         4c:4e:77:70:fc:b7:48:88:6e:17:0b:f7:eb:b3:5f:8f:f2:20:
         c5:43:9e:58:38:2c:25:b7:a7:d6:30:73:22:d8:14:7d:a9:7b:
         8a:be:d6:5a:0b:ad:91:ea:1f:40:63:d9:b1:c3:c9:f4:e3:cd:
         75:e2:6f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:42 2025 by rpki-client