Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer
File:                     161143c9-c030-4270-91a4-41e54bbb2357.cer (raw, json)
Hash identifier:          SKn7IrivlDRAyjP/ayCD1kpqrDYfZbxkbyUxylcbrH0=
Subject key identifier:   3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285848F38998F28BDC37D282087FC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 21 Feb 2025 01:45:33 +0000
Certificate not after:    Thu 27 May 2027 00:45:33 +0000
Subordinate resources:    IP: 198.245.245.0 -- 198.245.246.255
                          IP: 199.230.0.0 -- 199.230.9.255
                          IP: 205.174.0.0/20
                          IP: 206.209.64.0 -- 206.209.75.255
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f3:89:98:f2:8b:dc:37:d2:82:08:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb 21 01:45:33 2025 GMT
            Not After : May 27 00:45:33 2027 GMT
        Subject: CN=161143c9-c030-4270-91a4-41e54bbb2357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:a5:4e:25:2e:29:ab:b1:5d:7d:c1:76:0c:
                    7c:e3:27:9e:67:d1:c0:a6:0b:62:1b:a1:c6:c6:bd:
                    a6:ac:9a:39:73:fa:17:74:11:89:d6:3a:f8:11:bb:
                    7f:81:b9:c3:81:a0:ba:bf:1f:6e:47:36:78:2d:e4:
                    20:c0:11:88:12:f6:4f:c0:5a:9f:3d:a4:2a:e6:7a:
                    6f:0b:c1:2a:a5:57:f5:11:29:ae:e4:e2:82:18:f7:
                    71:db:8e:6f:ba:fe:e9:ac:f7:3b:34:82:77:ff:d2:
                    d3:f6:78:2a:72:2d:e4:a0:e6:56:9f:60:6f:0f:1e:
                    05:a7:7d:62:a8:9b:f4:0a:05:1b:99:fc:7d:a0:da:
                    3e:b7:28:f5:dd:45:f4:0c:10:b8:ca:68:e4:b0:cc:
                    85:57:50:81:f8:38:0c:28:56:6e:b2:8a:b7:57:0f:
                    1b:1c:f1:f9:30:ae:fb:01:1f:31:6b:44:84:cb:ad:
                    7c:ad:6b:d0:e8:3d:ad:1d:0d:f5:b4:47:a3:c2:67:
                    1f:89:a4:5c:a5:10:08:d4:be:3c:58:0e:d4:4b:fc:
                    eb:b1:71:c6:13:33:f7:5e:c2:6c:db:dc:b0:f8:1e:
                    f4:72:a4:45:4b:94:10:95:4d:2c:23:32:65:2b:14:
                    7a:07:30:4b:6c:6b:fa:27:1d:44:9a:d6:a6:c3:04:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.245.245.0-198.245.246.255
                  199.230.0.0-199.230.9.255
                  205.174.0.0/20
                  206.209.64.0-206.209.75.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:11:36:db:04:c2:c6:b8:1d:9e:8a:2e:37:84:67:c9:e3:fe:
         1f:23:99:6e:eb:51:b3:b8:12:6c:4a:f1:70:14:c5:65:f4:90:
         f5:a3:5c:ee:89:ef:62:61:f7:73:82:c7:76:1a:19:94:0e:11:
         0d:6a:64:ca:35:b7:a9:b5:1a:d2:39:81:ab:0e:56:b6:dc:83:
         29:b8:e4:1e:ec:6e:18:b4:e5:7e:6a:7e:1f:07:b1:31:a3:00:
         8f:1a:c4:f5:bb:59:9d:a3:f3:3b:1d:1c:e8:29:34:9c:a7:62:
         51:52:4d:01:3c:e2:e2:cf:b3:67:e8:de:1f:1a:40:91:6b:d9:
         ba:0a:18:4a:61:44:72:73:8c:31:d2:d1:6b:f3:0e:79:41:f2:
         92:f5:81:31:9a:a3:db:92:b5:57:cb:50:41:bd:ff:38:0e:35:
         ae:db:1b:29:e9:3c:f9:ee:cf:0f:5e:55:51:3b:45:da:bb:08:
         00:4d:03:a3:65:bd:7a:94:e6:e3:4d:7e:45:ee:38:88:e5:0d:
         c1:94:09:8a:25:a0:49:86:a4:05:68:80:f5:d1:5c:89:f0:82:
         5b:85:65:a5:aa:4b:54:c9:44:08:6c:5d:84:7a:53:87:6a:ae:
         82:37:bc:34:d4:ad:fc:ad:61:29:fa:2b:3e:62:83:6b:40:1e:
         e6:e8:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:23 2025 by rpki-client