Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619.cer
File:                     634613cd-882c-480b-9819-1d4c1787c619.cer (raw, json)
Hash identifier:          CWtwOvXJdRjDKCHYRoIhZ+4l6TU1YfI9hy3UczEyHRU=
Subject key identifier:   66:98:D7:09:5D:6C:78:8A:23:34:53:FC:0D:67:37:36:16:91:E5:2C
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285848C61417B75CE0F19CF6CE2F00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/634613cd-882c-480b-9819-1d4c1787c619.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Feb 2025 18:57:25 +0000
Certificate not after:    Sat 02 Jan 2027 01:45:26 +0000
Subordinate resources:    AS: 17060
                          AS: 22694
                          IP: 70.39.32.0/19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:14:17:b7:5c:e0:f1:9c:f6:ce:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Feb  4 18:57:25 2025 GMT
            Not After : Jan  2 01:45:26 2027 GMT
        Subject: CN=634613cd-882c-480b-9819-1d4c1787c619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:22:49:30:83:2c:1c:5e:77:09:59:17:8f:
                    c5:3b:b4:95:33:35:61:ed:d1:a5:4c:56:99:fb:c7:
                    e2:95:87:c2:96:5b:fc:0e:ac:06:2f:ca:4e:82:88:
                    5e:0d:95:c0:e3:29:8e:4b:07:38:96:08:e1:37:04:
                    d0:55:ae:ac:c7:c1:e2:d9:ef:48:00:4b:b6:40:44:
                    8a:6e:ce:51:0f:de:53:c6:48:53:c5:6f:5a:1d:81:
                    26:61:6a:6a:3d:22:1e:95:a1:b9:23:70:85:83:c4:
                    0e:c3:1e:36:6c:86:d3:a7:ac:99:f4:0b:17:9f:08:
                    35:df:50:3f:97:90:02:70:da:c5:5f:92:08:cb:61:
                    8b:88:fa:dc:c7:cf:bf:f3:31:9c:ce:5b:84:f7:e5:
                    3d:2b:f2:f1:62:ae:f7:a5:30:3a:50:f5:7b:39:1d:
                    4d:a9:c3:44:78:15:85:ad:4e:e3:94:31:f8:30:18:
                    76:f9:68:fe:a4:6f:ed:f3:80:19:a8:3f:97:bd:77:
                    64:52:94:97:49:55:38:82:cd:be:e3:f5:b9:65:27:
                    a9:2c:51:7c:da:ea:2f:d5:da:fc:b6:4d:c5:22:57:
                    a4:94:c0:89:e2:dc:31:98:ba:e4:20:8d:44:54:e9:
                    99:51:5d:08:f0:73:51:3b:27:bf:5a:86:44:0a:03:
                    2f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:98:D7:09:5D:6C:78:8A:23:34:53:FC:0D:67:37:36:16:91:E5:2C
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/634613cd-882c-480b-9819-1d4c1787c619.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.32.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17060
                  22694

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:02:af:a4:b3:e6:30:81:4b:5c:d8:a5:59:e1:d8:cc:09:54:
         22:f2:2f:23:61:d1:4a:0d:f6:12:eb:bc:d9:82:c0:39:4c:19:
         b2:ec:39:26:f5:ff:b8:a6:1d:f5:b7:1d:79:89:c4:68:61:3e:
         c0:b6:ba:01:c7:a1:38:7a:7e:3d:d1:b7:6c:39:71:0d:6d:97:
         2a:07:d7:2b:b3:60:20:be:d5:b8:0b:0e:cd:3c:09:e9:59:b3:
         be:78:d2:f1:46:8a:74:d2:91:6f:06:4a:a6:f1:60:7e:8e:c2:
         9c:aa:42:46:8e:2f:af:04:a9:e4:56:e3:5d:a9:8e:70:65:cf:
         e7:7c:b6:8f:d1:05:74:e0:98:88:6b:0e:7c:f1:45:b4:41:de:
         c9:72:15:a8:c3:e7:6f:1a:12:7c:56:15:8a:37:da:c6:56:f5:
         24:cf:42:37:5d:69:fc:78:b7:2c:85:90:2b:ec:ee:82:7e:f0:
         b9:0d:02:c6:74:47:a7:38:bd:de:35:ad:4f:1b:9d:ff:5f:94:
         9a:30:5e:ee:51:a0:f8:63:51:1e:79:25:54:63:b6:22:73:c2:
         40:36:07:24:4d:4f:03:7b:4a:c5:55:64:ac:75:17:ce:77:48:
         91:de:92:d7:6b:ad:cc:9f:24:ed:24:fd:c3:0e:08:63:85:19:
         79:83:13:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:14:55 2025 by rpki-client