Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer
File:                     f40e4177-8831-4c30-83f0-fa2c74173aff.cer (raw, json)
Hash identifier:          Mx8v667BXRdz6oYTdjwfItILJL69edmB1t9Ga8Dd4Kw=
Subject key identifier:   19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848A7AEA75EE5BD3980478F1480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 24 Jan 2025 21:38:47 +0000
Certificate not after:    Thu 29 Apr 2027 20:38:47 +0000
Subordinate resources:    AS: 400860
                          IP: 207.166.129.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a7:ae:a7:5e:e5:bd:39:80:47:8f:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan 24 21:38:47 2025 GMT
            Not After : Apr 29 20:38:47 2027 GMT
        Subject: CN=f40e4177-8831-4c30-83f0-fa2c74173aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:ef:ed:08:d4:df:5d:43:ed:91:25:e8:78:
                    b5:d0:84:32:80:99:c9:a7:12:ce:f5:6a:84:5d:6f:
                    57:e7:29:cb:d6:db:c7:0a:ef:e4:f5:58:da:de:e5:
                    61:88:2a:80:c2:b9:e4:81:35:3a:08:2d:d0:3c:74:
                    27:64:71:25:13:d8:ba:eb:df:e0:58:fe:95:74:12:
                    4d:aa:75:74:35:d3:7e:17:c6:7c:cd:f7:da:c7:3e:
                    30:ec:7b:95:7a:68:15:41:66:ae:34:e6:4c:f2:21:
                    41:9b:ce:83:a1:c4:7d:4f:c0:b0:67:cc:5f:dc:72:
                    11:90:19:95:8f:8d:69:cf:b0:ac:69:18:20:c3:7e:
                    00:e5:3f:04:b4:6b:6b:83:72:5e:3b:8e:d5:41:6f:
                    2d:07:57:9b:74:15:3c:ad:6b:ef:1c:77:fd:52:1e:
                    8c:f2:dc:e8:34:ef:8b:79:b0:20:00:fe:2b:1d:c6:
                    9d:e3:db:2e:b8:f7:19:83:6b:03:cf:45:ab:0a:71:
                    61:f1:b3:64:8a:3b:f9:84:31:98:c0:26:52:67:a3:
                    26:2f:9a:cc:6c:ed:e0:f0:66:f9:d9:19:08:5b:a0:
                    34:10:ee:c6:56:c3:00:6c:65:cb:b7:ba:1a:ca:59:
                    a2:ca:23:18:de:6a:bd:5d:bc:85:ac:51:be:c8:96:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.166.129.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400860

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:20:26:93:f2:aa:c6:ec:ce:9b:dd:89:c6:f7:9f:1c:53:8c:
         c3:f6:04:b2:d8:07:d6:5f:97:52:53:6d:ff:0a:89:00:e4:ee:
         19:99:b9:b8:13:85:87:7b:57:36:ee:0d:01:78:2f:36:9e:87:
         05:d0:7f:72:4c:9e:8c:ca:1d:ef:c6:08:be:75:11:bc:82:d9:
         e2:f2:2e:e6:0c:18:f1:f7:a3:0f:0e:ca:0e:a0:6d:2a:e9:32:
         c9:60:cf:d4:94:54:b2:8d:f3:c9:59:88:63:f2:1b:bc:9e:cd:
         9e:1c:b6:7f:0c:b1:77:3a:f8:c0:69:74:ec:00:06:7e:f5:71:
         e5:71:be:b2:d2:e9:a9:2f:06:22:3d:ee:a2:9a:0a:d5:24:18:
         28:bc:82:f2:cf:7f:cd:57:a3:33:50:59:0b:08:82:67:c3:ac:
         7d:2d:e2:59:8f:00:b0:e6:dc:c2:c5:4c:7b:7f:fe:94:95:62:
         d1:7a:ac:15:02:fd:eb:76:f6:67:d7:1b:c1:eb:2e:29:f5:48:
         bc:24:3a:af:a0:6b:39:03:57:cf:ea:1b:2b:74:20:59:49:c0:
         b9:cd:de:c1:73:fb:7c:a5:37:42:f9:f5:32:9a:6b:be:30:2a:
         e5:6b:b9:c4:01:50:58:c4:06:2c:f0:ff:1f:3b:ee:4b:d3:9e:
         b9:a6:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:26 2025 by rpki-client