Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65.cer
File:                     f9441892-5f50-4eb3-a218-8dada1be8f65.cer (raw, json)
Hash identifier:          Kc4zbvc8BrfXGfImDETrucFvzKbQC/CqlWUrJftsE1c=
Subject key identifier:   5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F4328584913FD46D9577C43F1212DDAC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Mar 2025 16:44:30 +0000
Certificate not after:    Mon 07 Jun 2027 15:44:30 +0000
Subordinate resources:    AS: 62640
                          IP: 162.218.192.0/21
                          IP: 2605:540::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:fd:46:d9:57:7c:43:f1:21:2d:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Mar  4 16:44:30 2025 GMT
            Not After : Jun  7 15:44:30 2027 GMT
        Subject: CN=f9441892-5f50-4eb3-a218-8dada1be8f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6a:37:98:65:a8:2a:74:24:d7:dc:3a:2e:33:
                    fb:55:dc:96:cf:5d:07:08:25:0c:20:c4:bf:c2:a4:
                    a9:1e:cc:5c:8c:6e:77:c1:81:52:27:c4:32:97:0a:
                    9c:1f:48:38:d7:8e:ef:ed:f1:b4:1f:0b:cd:cd:e6:
                    f7:12:f2:11:38:64:46:86:74:1f:3c:f1:9d:70:dc:
                    bd:5f:8e:84:d2:a7:3d:60:36:dc:0a:ed:b1:f9:9c:
                    41:24:83:87:2a:c2:f4:3d:aa:39:c5:b4:b5:30:d6:
                    d6:ea:d5:1c:4e:77:c7:88:2f:23:ed:37:b5:c0:27:
                    7f:5c:57:ed:81:3e:26:99:14:c5:72:62:8a:75:7a:
                    c1:9c:81:76:78:80:ae:d7:f8:c5:e1:91:9b:b2:62:
                    8a:98:7b:50:0f:e7:96:b2:f4:c9:23:2e:47:77:1e:
                    57:0e:70:54:28:5f:43:31:36:dc:b1:82:1e:2d:0f:
                    ca:42:d6:e0:24:f8:16:12:f6:99:73:0d:93:04:17:
                    3f:8c:0e:be:d8:34:3b:ab:ed:db:34:f2:59:2d:dd:
                    58:9a:8f:38:3e:5b:b7:85:83:89:b2:91:f3:7a:a6:
                    9c:31:3b:7b:bd:79:cf:18:97:a6:30:f5:da:e3:f2:
                    9a:c0:db:32:35:ff:0b:68:5e:3f:99:0d:84:45:72:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:12:BF:4D:73:FD:98:40:60:30:56:D7:B6:3C:BC:9E:37:AA:B3:C9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f9441892-5f50-4eb3-a218-8dada1be8f65/f9441892-5f50-4eb3-a218-8dada1be8f65.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.192.0/21
                IPv6:
                  2605:540::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  62640

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d3:68:70:86:39:6b:df:1e:4b:19:24:7b:f9:d5:bd:a1:90:
         be:b3:77:d2:d3:30:c1:8f:33:ce:13:99:5b:06:9a:23:d9:07:
         55:10:32:9a:a3:d6:6f:9c:d9:8c:6e:b4:7e:db:8d:76:e8:35:
         c5:76:f8:6c:12:bc:a4:02:7b:b6:ee:d6:56:53:12:81:be:2f:
         86:83:e4:f9:ed:14:b7:73:7d:56:25:a3:60:4a:2c:b1:2c:78:
         83:40:ed:98:85:5f:28:5c:6f:88:65:7b:2c:12:43:af:d2:79:
         5b:0c:b5:c6:cf:58:b9:69:9c:69:e3:38:ee:5f:d5:66:05:ad:
         50:96:a3:ac:9b:b7:58:05:d7:d7:ea:71:4a:f3:2f:1b:40:ca:
         6a:9e:8d:c9:34:ac:e9:93:e2:dd:6e:be:b4:8f:19:42:da:6b:
         e8:30:15:a0:61:68:a3:90:fb:b1:32:49:cc:dc:55:13:31:ec:
         f4:1d:d1:72:32:ef:73:87:9f:8d:2f:c6:ff:23:b3:25:fa:a6:
         a1:7e:b8:bb:05:5d:1e:83:4a:32:7d:aa:9b:e0:26:a8:4e:b6:
         3e:ef:90:c2:0b:20:ad:c0:8b:42:5f:5a:b4:31:c1:cb:f2:51:
         44:af:b7:c9:60:1a:d9:6d:cd:b0:7a:df:dc:ab:cf:e9:a7:86:
         a2:8c:2a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:31:17 2025 by rpki-client