Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer
File:                     c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer (raw, json)
Hash identifier:          esaawJGMlhx+GFuD4OaSZF+w4nRgltpoTZlHi35BHJY=
Subject key identifier:   D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848AF4916F6C5232AA2916512C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 27 Jan 2025 15:00:37 +0000
Certificate not after:    Sun 25 Apr 2027 08:48:32 +0000
Subordinate resources:    AS: 8143
                          IP: 23.132.140.0/24
                          IP: 2602:f732::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:49:16:f6:c5:23:2a:a2:91:65:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan 27 15:00:37 2025 GMT
            Not After : Apr 25 08:48:32 2027 GMT
        Subject: CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:67:73:a9:ef:3e:24:e2:97:b4:54:9e:2d:79:
                    8a:8e:a3:e2:f7:20:bd:4a:39:e0:a0:9d:22:3f:48:
                    bd:d0:70:5a:c9:ba:af:5b:7d:43:9d:64:63:27:a2:
                    8c:fc:23:ab:ee:c1:e3:b1:8a:b9:68:af:55:f9:57:
                    f0:d6:c7:0f:79:e2:97:3e:49:25:9b:87:51:14:b6:
                    c4:bd:de:6f:36:46:65:df:5a:d4:c7:7a:04:0c:cc:
                    c9:d2:3e:3b:51:ac:90:fe:75:8a:0c:2d:c5:73:49:
                    ee:ca:c0:df:2f:4f:0b:44:e3:31:80:83:90:86:ce:
                    e7:72:ef:03:74:c3:ef:94:e9:69:f1:8b:af:83:72:
                    f4:0c:da:f1:f4:b8:63:73:dd:b6:54:38:d7:bf:c6:
                    55:d0:dc:62:06:64:be:67:b6:84:3a:90:cf:69:28:
                    59:3c:6f:ff:cc:0d:15:5a:ed:65:e8:48:85:da:eb:
                    cf:6a:d7:e1:a2:fe:08:53:1f:b5:94:66:42:50:76:
                    dc:1d:d6:24:ff:3f:82:18:2a:a0:57:22:5b:1f:45:
                    65:57:80:b0:2c:06:11:29:ee:06:d7:6f:ee:4c:36:
                    60:59:50:a4:34:03:05:5b:88:84:a2:01:98:81:fb:
                    19:1e:51:05:14:86:5d:01:2e:a9:48:80:38:9a:c2:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.140.0/24
                IPv6:
                  2602:f732::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8143

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:25:18:76:dc:af:7e:39:0c:9a:59:79:82:b7:64:e3:71:e1:
         a4:3e:ca:33:06:8d:c0:54:22:ea:c4:4a:2c:5f:d7:ce:aa:36:
         d9:27:e8:08:5c:34:39:6d:ab:7f:25:0c:90:36:0c:2a:6e:90:
         70:e3:f3:71:13:ab:91:08:96:d9:c7:00:8e:4c:c8:84:cc:5a:
         28:d0:5a:1e:a9:61:99:0f:54:44:d2:ac:a8:89:96:69:fd:5e:
         94:05:31:f3:9c:32:3c:36:d6:3e:fa:3e:bc:e4:fe:30:23:8d:
         dd:fc:ba:1c:75:a6:4e:be:88:35:94:cb:6a:51:8f:8b:02:d1:
         13:34:39:53:8b:d4:fc:ef:a8:fa:c1:4a:b5:aa:dd:91:49:1d:
         5f:85:7b:88:12:5c:00:a6:66:31:99:2c:0a:4a:b7:66:ab:e5:
         d8:22:92:f7:62:1d:3b:6b:8e:57:d4:5d:e7:de:10:fd:38:b9:
         0d:f7:e8:81:3c:cb:22:8e:3b:df:f1:f7:cd:f9:28:c5:08:09:
         01:65:b8:2d:68:8c:36:2e:12:63:be:75:25:5e:1f:4c:fb:ad:
         71:e6:a1:0d:80:2e:7d:7f:c8:6f:8f:0a:85:a1:0d:31:07:e8:
         9c:9e:cf:52:32:6d:36:54:e7:50:c6:70:21:3d:71:aa:4a:40:
         0c:45:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:06 2025 by rpki-client