Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c.cer
File:                     20326331-2c67-41aa-8ed3-7667815d240c.cer (raw, json)
Hash identifier:          ROvzC6fLb+rGVEmt1QqUC9u6geLj5lnY2cG4AoYux44=
Subject key identifier:   CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285848A8291F8C34869DDC1ED13080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 25 Jan 2025 01:45:33 +0000
Certificate not after:    Fri 30 Apr 2027 00:45:33 +0000
Subordinate resources:    AS: 30145
                          AS: 46856
                          IP: 69.56.0.0/18
                          IP: 74.214.200.0/21
                          IP: 96.46.128.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:29:1f:8c:34:86:9d:dc:1e:d1:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jan 25 01:45:33 2025 GMT
            Not After : Apr 30 00:45:33 2027 GMT
        Subject: CN=20326331-2c67-41aa-8ed3-7667815d240c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:51:21:df:c9:b3:3f:a1:33:d6:bb:97:d9:ad:
                    4a:fb:8e:50:2c:8a:3a:4b:2e:e2:5e:dd:9e:5e:b7:
                    7c:62:c7:b1:86:31:ee:2a:b5:c4:1c:ad:00:67:6f:
                    48:c1:f1:b7:25:83:0e:30:e4:c2:9a:f7:7c:37:44:
                    5c:6a:8a:04:90:52:7c:05:06:68:3d:cc:82:6c:3b:
                    11:10:a6:4c:d4:4d:6e:8b:a4:a9:ee:1a:f2:e6:f6:
                    52:24:3d:71:6a:a7:f4:b1:40:88:cb:85:35:2e:0c:
                    f3:22:7e:1e:b9:ac:9b:ab:e6:c7:a8:29:9b:6d:29:
                    8f:f9:4b:34:2e:17:08:86:00:55:18:94:3e:9e:8e:
                    9c:be:a4:1e:d5:29:46:7e:09:57:8d:d0:d5:d4:ce:
                    ac:87:87:ab:4b:5d:67:de:1f:27:58:64:d8:eb:51:
                    51:6f:6b:9f:9d:0d:5f:fd:6e:93:2e:c8:ec:20:9d:
                    bd:df:71:b6:8f:d0:cb:42:7e:94:c2:da:e4:e9:75:
                    f9:15:f2:3c:04:ab:af:96:83:21:aa:bd:ad:23:3b:
                    79:cf:a2:4a:ac:c9:89:4a:ca:aa:ab:6a:c5:e0:4a:
                    de:85:e0:4d:6c:2d:f5:c7:f5:f7:7d:87:df:70:b6:
                    c9:3c:bd:b4:62:ab:47:0a:5f:80:9f:03:02:14:12:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D8:F6:6D:3D:1C:5B:00:63:BC:BD:38:04:8F:8C:87:F5:CF:80:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/20326331-2c67-41aa-8ed3-7667815d240c/20326331-2c67-41aa-8ed3-7667815d240c.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.56.0.0/18
                  74.214.200.0/21
                  96.46.128.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30145
                  46856

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:6e:93:24:3c:0a:2a:fc:fa:8f:cf:72:26:4c:63:65:db:bd:
         4b:cb:86:6e:56:b9:58:f2:af:44:39:3f:3f:f2:4f:cd:c6:eb:
         1e:a4:5c:79:e9:72:59:a6:0f:4a:c3:14:e3:17:9f:2a:83:5c:
         fc:99:a5:c6:08:6f:fb:fc:81:da:dd:43:2e:d3:69:ea:6a:4d:
         b5:40:f1:88:c4:02:7f:2d:05:07:90:06:d4:79:70:2a:1e:69:
         6e:22:ee:49:4d:60:0e:75:cf:55:e1:7e:1c:b4:31:dc:2c:9c:
         1c:6c:ce:82:f8:89:ce:33:c3:c1:b6:e5:ab:03:a2:36:18:69:
         bb:bf:6b:8d:68:32:8b:1f:c7:44:7c:ef:79:fc:e2:79:84:ab:
         ab:2c:59:98:67:67:85:24:bc:87:ce:d3:d2:8a:44:47:2d:d9:
         8d:6e:ca:9c:7f:ee:72:2e:33:a8:69:66:e4:5f:13:94:1d:6f:
         33:48:67:8c:7b:ff:05:a2:09:5a:58:08:a9:3f:04:16:ed:5a:
         1c:05:53:5b:2a:e2:16:01:d7:81:f4:06:95:86:cb:45:51:84:
         d0:61:fb:bb:0b:24:b6:3a:e9:10:b5:ef:ec:59:94:e6:bf:51:
         e0:6c:8d:dc:aa:94:59:c6:8c:b9:d5:e3:fd:20:05:bd:9e:42:
         92:cc:db:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:03 2025 by rpki-client