Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer
File:                     be429d79-b6e2-4677-a6d1-e38c9045ebb1.cer (raw, json)
Hash identifier:          t2TE83GE2buD4VD52syYwpQjqZK6jZyrNVeP9z3KPZY=
Subject key identifier:   41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848618159B42DB7C453F9EFC1C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 30 Dec 2024 18:20:55 +0000
Certificate not after:    Sun 04 Apr 2027 17:20:55 +0000
Subordinate resources:    AS: 33360
                          IP: 192.112.255.0/24
                          IP: 204.89.22.0/24
                          IP: 204.145.96.0/24
                          IP: 2602:fe78::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:61:81:59:b4:2d:b7:c4:53:f9:ef:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Dec 30 18:20:55 2024 GMT
            Not After : Apr  4 17:20:55 2027 GMT
        Subject: CN=be429d79-b6e2-4677-a6d1-e38c9045ebb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:c7:ea:64:7f:47:77:d1:74:a6:c9:86:88:
                    1b:aa:fc:cd:48:5f:93:80:4a:80:29:88:48:83:7b:
                    74:b3:ac:fb:e8:78:be:d3:f8:0b:5d:33:9e:a7:00:
                    71:b2:06:8f:b6:6c:d6:b9:05:da:ea:d1:09:82:ea:
                    38:85:df:19:37:f2:0c:7b:cc:72:8d:c8:56:1d:3d:
                    24:b1:92:d4:fe:82:42:02:fb:8f:02:3c:1d:97:16:
                    55:57:50:3d:d0:60:65:ba:58:55:77:28:17:92:fd:
                    80:fc:d3:b8:e2:ff:e6:73:0d:e8:0b:c4:f1:82:2e:
                    1f:db:f1:35:b8:77:7b:15:ee:6e:93:fb:25:79:df:
                    5e:9a:c8:a1:4a:28:0e:0f:a8:c4:f6:98:26:f4:a9:
                    f8:7d:15:7e:0e:5f:bd:cc:4d:9d:83:60:b0:6e:d6:
                    73:7d:df:01:5f:a2:80:b2:66:df:14:90:36:ba:7d:
                    47:d6:30:29:0e:fc:e3:c9:19:3c:d4:ce:d7:9e:b2:
                    35:18:b7:2e:fb:28:51:16:0e:d7:c4:62:02:c1:c4:
                    5a:d4:40:c7:bc:33:4f:28:74:c3:eb:e6:fd:e1:1e:
                    20:b8:54:59:97:ce:65:70:72:9f:e8:72:94:60:7b:
                    7f:8a:6c:7b:c7:9b:6a:80:72:3c:46:5b:c9:90:94:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7F:86:76:59:24:12:A0:8C:20:FA:C4:7E:98:2F:FD:B8:3F:E0:7D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/be429d79-b6e2-4677-a6d1-e38c9045ebb1/be429d79-b6e2-4677-a6d1-e38c9045ebb1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.255.0/24
                  204.89.22.0/24
                  204.145.96.0/24
                IPv6:
                  2602:fe78::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  33360

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f6:36:35:e8:9a:c4:e0:b8:7d:98:3b:77:d1:01:37:d4:2f:
         1f:17:94:fa:5e:e4:4f:f7:6c:a5:e1:34:5c:e8:fb:a9:5d:cc:
         79:2a:f3:32:33:21:ac:cb:32:0b:42:72:54:53:17:8d:35:4b:
         b5:42:e4:c6:a1:b3:b7:6b:8d:f8:e6:45:f7:37:3c:fd:78:b7:
         5d:a3:45:49:c3:12:ba:c7:c2:ab:2d:15:22:ee:6b:76:cf:f2:
         d2:f3:54:0d:4d:1b:7e:58:58:f9:42:8f:80:f5:2a:cf:e6:72:
         d2:4f:2f:8e:28:76:82:69:98:38:1e:92:1f:a8:ef:3a:a6:b8:
         f2:79:7c:f6:dd:41:26:10:cc:5a:f8:76:e9:90:0a:57:5a:80:
         52:90:4e:9b:ed:51:95:d8:9f:36:61:53:29:ba:09:c5:07:05:
         e2:e5:25:87:27:94:8e:97:fa:61:73:c1:04:4b:95:cf:23:9b:
         80:ad:05:6b:5d:d1:37:41:c1:9e:b1:51:2c:ec:cf:0f:f9:8b:
         af:35:e6:93:88:b5:4e:97:f1:82:9a:3e:88:58:57:a8:0f:4d:
         14:9b:6b:dd:cb:b3:04:e4:9b:1f:50:ce:b1:37:e2:72:7f:47:
         a0:f4:19:e5:69:34:41:b7:29:c6:fb:bb:f3:dd:8f:04:cf:56:
         ad:70:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:48 2025 by rpki-client