Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer
File:                     e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.cer (raw, json)
Hash identifier:          7bqZrWrigAPD92e9AFrtsRoORGy5GPNeEY0T9yEomEM=
Subject key identifier:   B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848EB9E46D4C74664FABD6BD580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 18 Feb 2025 05:40:45 +0000
Certificate not after:    Mon 24 May 2027 04:40:45 +0000
Subordinate resources:    IP: 23.134.28.0/24
                          IP: 2602:f6f7::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:eb:9e:46:d4:c7:46:64:fa:bd:6b:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Feb 18 05:40:45 2025 GMT
            Not After : May 24 04:40:45 2027 GMT
        Subject: CN=e6a538ae-fa25-4a38-b1f1-320e2e9f16ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:20:02:ab:69:34:7d:0d:96:c6:e7:20:cd:f9:
                    1b:79:5c:73:5b:86:27:d8:d7:5f:65:c1:da:90:b5:
                    be:c5:7b:07:d2:81:62:10:4f:b9:c3:da:f6:37:cc:
                    cc:06:60:3c:27:f3:3b:21:97:da:40:ac:a3:7e:86:
                    24:a3:15:37:29:9e:e6:0c:a5:db:71:0a:5c:43:72:
                    80:f9:41:8d:8a:fb:49:59:72:d9:e4:15:41:5f:59:
                    18:58:4e:36:e2:51:68:1f:d7:52:a3:da:1e:8b:91:
                    7b:11:a1:28:3c:fd:60:2e:3b:84:a1:8e:84:55:83:
                    3c:90:46:73:46:1e:84:1e:c9:62:cc:2c:86:1a:7f:
                    a0:ac:34:26:07:ee:c1:b3:d3:38:f9:2a:a0:6a:d4:
                    6d:fa:90:f9:38:aa:a3:f3:ab:60:85:59:91:13:4b:
                    19:b9:bc:68:27:65:49:d4:d8:b8:84:52:c5:c2:2f:
                    65:15:64:ef:84:b2:6c:be:1a:99:0f:45:eb:72:9d:
                    64:1c:0a:f5:c5:f5:ee:b3:a7:63:54:bf:2d:2f:da:
                    57:b2:9e:69:0c:e0:9b:d5:34:6d:58:39:2b:f3:8a:
                    ff:64:e0:ca:a7:7e:5d:8b:96:bb:b1:54:a1:36:f5:
                    3f:25:ce:e5:4d:a7:29:27:e7:9d:46:df:65:80:b8:
                    72:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2C:8C:C8:9E:75:CE:D7:53:1E:6C:A5:91:EB:72:AB:81:2C:0A:BA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef/e6a538ae-fa25-4a38-b1f1-320e2e9f16ef.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.28.0/24
                IPv6:
                  2602:f6f7::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:43:2d:47:b0:5f:2d:57:55:e5:06:6a:5a:03:51:32:12:
         39:7e:42:79:f5:cf:e8:b0:27:a4:b9:58:17:f4:b4:c3:4d:45:
         67:c6:6b:be:4a:28:40:8f:17:fa:d0:5f:af:ef:93:ad:b2:06:
         89:a1:a0:e3:86:68:6e:98:f0:c7:89:e4:38:a1:0c:71:8c:5f:
         a9:a0:90:fd:d6:4c:dc:46:bc:49:f3:96:5c:0e:7d:a5:31:18:
         c9:d0:86:6c:ca:62:db:b8:01:a0:1d:56:44:62:81:95:6d:ac:
         83:a7:88:3d:57:e6:82:34:2a:9f:e3:f5:b2:c1:f3:ff:bd:f4:
         da:53:ac:3a:5c:5b:84:03:cf:ef:b7:20:89:9e:d4:c3:bf:e2:
         40:a0:d9:3f:66:74:3e:75:a2:b5:14:7e:52:d1:29:3f:8a:ce:
         7e:82:67:de:95:78:29:44:79:83:f6:32:63:3d:c6:ac:00:22:
         98:90:44:42:7c:a3:f8:62:0a:cf:19:6e:fe:7d:23:24:ec:6c:
         87:7b:d0:89:79:99:bf:fe:c5:e9:bc:cf:ca:a9:11:40:38:52:
         10:0f:be:33:54:53:4c:41:a8:bb:af:cf:2a:5a:5d:d7:b6:3b:
         99:da:a4:68:16:6c:7f:e5:d2:22:44:44:9f:69:03:55:a7:73:
         2b:cc:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:05 2025 by rpki-client