Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d027abf1-e88b-4e64-9ddd-7a8c9aafca36.cer
File:                     d027abf1-e88b-4e64-9ddd-7a8c9aafca36.cer (raw, json)
Hash identifier:          stpA6s26JijdTIhRHfH7cx34Qblb7Uk8MsGTWHIjngk=
Subject key identifier:   A1:BD:46:35:47:6D:BF:1B:88:5B:9F:18:E4:F9:95:55:BD:4E:1B:D6
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584943307EBE28E7232BF1DA6290
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d027abf1-e88b-4e64-9ddd-7a8c9aafca36/d027abf1-e88b-4e64-9ddd-7a8c9aafca36.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d027abf1-e88b-4e64-9ddd-7a8c9aafca36/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 21 Mar 2025 14:30:42 +0000
Certificate not after:    Thu 24 Jun 2027 14:30:42 +0000
Subordinate resources:    IP: 192.245.91.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:30:7e:be:28:e7:23:2b:f1:da:62:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Mar 21 14:30:42 2025 GMT
            Not After : Jun 24 14:30:42 2027 GMT
        Subject: CN=d027abf1-e88b-4e64-9ddd-7a8c9aafca36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:e7:aa:1e:29:2e:02:b1:93:22:c8:e2:b5:
                    c7:a9:86:9f:a2:5f:84:75:25:d5:32:78:41:11:19:
                    2e:e0:db:03:4f:db:b7:7d:77:b1:be:ee:21:6d:f1:
                    b7:dd:31:a3:a7:42:78:5b:7b:22:a7:ce:ae:2c:69:
                    e3:f7:ad:3c:a8:ca:7a:b0:08:1c:29:38:42:81:7c:
                    c4:7e:fe:e5:f6:d8:ff:9c:bc:a8:bf:0b:10:aa:d2:
                    59:89:c6:82:b2:17:0e:88:6f:c8:9d:5c:47:f3:0a:
                    89:f2:b1:f2:ec:60:3b:18:37:07:d1:0d:bd:7a:6e:
                    54:3a:b6:e9:8a:00:ad:04:a2:fe:cc:88:34:9b:9d:
                    53:14:81:cb:ae:b2:10:69:89:cb:f5:11:80:7c:ab:
                    64:cb:25:af:7c:1e:a4:b6:5e:93:a7:2f:30:64:ea:
                    62:1a:7a:28:e7:3f:a3:63:ba:5a:90:81:f7:86:1c:
                    cf:a1:c1:9a:00:61:09:6f:76:5c:46:c7:4c:8a:9f:
                    d3:93:7c:28:fa:88:5b:3d:7a:3b:71:d5:57:d9:56:
                    ea:77:c0:b9:35:58:90:60:3d:a7:f9:f1:ff:41:a4:
                    83:bd:f7:44:65:8c:f8:e3:6c:84:55:08:be:90:20:
                    bc:1e:fc:ad:6a:c9:7b:c5:69:8b:b0:16:4c:a4:48:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BD:46:35:47:6D:BF:1B:88:5B:9F:18:E4:F9:95:55:BD:4E:1B:D6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d027abf1-e88b-4e64-9ddd-7a8c9aafca36/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d027abf1-e88b-4e64-9ddd-7a8c9aafca36/d027abf1-e88b-4e64-9ddd-7a8c9aafca36.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:dc:9a:72:00:24:f8:12:66:ff:c4:4b:b5:7f:3b:53:ba:1e:
         bb:78:05:51:89:a0:88:28:ea:db:8b:8d:45:75:20:9d:a4:15:
         69:10:d1:15:c9:f4:af:e5:ff:b1:0e:92:b4:10:0d:dd:5b:f7:
         25:79:46:f0:48:64:95:36:a4:3b:cb:e7:a8:ed:80:3f:ee:45:
         a1:e2:ab:df:e9:9c:11:12:42:aa:7d:20:42:34:cc:be:30:92:
         66:c9:64:34:c4:d9:d7:20:24:02:0b:f4:e1:8c:0b:4a:42:f5:
         26:99:25:4c:5a:3a:ff:32:88:78:89:28:f7:02:3e:49:dc:c5:
         29:a3:fc:31:c8:3b:f5:a3:cf:63:73:95:00:85:d4:fa:ec:2d:
         a5:91:d3:d7:97:a0:5e:c7:b8:1e:f9:76:5f:97:8e:99:a0:96:
         c0:65:45:d7:81:aa:dd:cf:ee:23:26:48:15:b3:ec:f6:35:58:
         4c:91:38:94:08:af:9d:e3:a8:73:92:1b:05:27:9f:e5:1e:c2:
         41:d2:05:f8:fd:16:5c:96:5e:08:2b:31:5c:f5:20:10:5e:56:
         01:71:2d:1f:30:30:18:bd:e0:8c:2d:f5:c3:79:33:2e:0b:ed:
         9f:3b:49:b9:66:32:ce:a2:ae:8d:c9:9f:28:cc:e2:82:49:46:
         00:51:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:58 2025 by rpki-client