Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
File:                     a7e64b66-84df-4665-a4fb-eb3b8add365e.cer (raw, json)
Hash identifier:          DIwEcyBp4qeIaBYmobvFYaEKp9fn5Y/1TrzxUP6KR9U=
Subject key identifier:   44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F432858489CFE66FD7CD7115A5DEB5120
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 21 Jan 2025 01:45:34 +0000
Certificate not after:    Mon 26 Apr 2027 00:45:34 +0000
Subordinate resources:    IP: 131.232.0.0/16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9c:fe:66:fd:7c:d7:11:5a:5d:eb:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Jan 21 01:45:34 2025 GMT
            Not After : Apr 26 00:45:34 2027 GMT
        Subject: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:3a:ec:cf:53:78:97:01:92:3a:67:b0:55:
                    11:31:c6:9d:f1:87:d2:ec:e1:a2:c3:1f:e0:43:61:
                    ba:aa:5e:e9:b1:e6:e4:7e:78:52:36:1e:0c:6d:55:
                    03:89:20:61:f0:44:0c:e7:f4:14:77:87:c7:e3:ee:
                    84:63:8b:f3:b9:e5:41:8d:d3:86:39:03:97:21:b4:
                    78:22:05:09:d8:e2:2e:f2:f9:03:1f:0e:79:34:ab:
                    95:2a:ff:ec:fd:96:07:96:d3:68:0c:b6:90:66:db:
                    21:10:68:30:a9:bf:09:27:06:cd:3b:87:7c:5e:40:
                    e8:81:ad:0d:aa:1c:9a:39:c4:69:30:25:b3:c2:10:
                    27:b4:7c:df:61:75:5b:f1:fe:f6:c1:43:0b:ba:4d:
                    22:5f:bc:47:66:bb:a2:35:b0:19:a2:38:6f:1e:e8:
                    ca:51:16:2e:57:be:d7:b4:a1:7a:59:55:86:b1:59:
                    88:aa:15:c1:bd:8b:6f:36:ab:30:53:d4:bd:a3:82:
                    1e:99:39:66:66:d0:3f:42:62:9b:5f:3e:83:e1:d4:
                    1d:9b:2e:50:3e:5f:e8:68:89:e9:9c:52:52:b3:8f:
                    72:4d:c6:51:20:3f:3d:18:7a:1e:70:5c:3c:68:62:
                    66:c2:b1:a6:96:6d:d8:8f:d4:46:c9:53:43:3c:29:
                    9d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ea:e3:e8:5e:6c:b6:08:cf:de:47:a9:5e:f2:68:b5:47:39:
         2d:a7:7d:ba:78:d1:4e:a4:00:4a:bd:95:33:0c:6c:d9:a3:8b:
         58:33:76:7d:da:5f:4f:a6:78:47:5e:fd:52:18:f2:33:cd:c6:
         dc:63:8c:55:bf:c9:aa:42:24:e0:34:2a:f1:d0:d9:51:f3:44:
         0b:08:ff:2b:51:62:d7:dd:b6:f1:e9:5e:3b:fc:37:f9:4e:fb:
         3a:7a:0d:ee:ad:72:38:06:71:f1:91:2a:69:5e:5e:da:0b:04:
         4e:56:29:8b:6d:6c:6f:2f:16:79:00:4e:bd:f8:db:76:2e:aa:
         7c:e4:61:e6:4d:f3:bd:d5:a5:3e:51:7e:2f:68:36:d1:41:f2:
         9f:4d:5d:60:e3:8e:84:12:79:68:47:15:a5:e1:6a:60:06:d6:
         e7:2d:04:d3:36:1f:ea:a1:62:00:c3:17:e3:ce:45:25:09:9c:
         e2:2e:23:8f:ce:07:d0:93:e0:71:48:96:94:e7:3f:bc:fe:f0:
         3c:e0:f0:ff:4d:31:95:0f:7b:31:b9:d3:9d:7c:bb:40:ed:bd:
         96:b9:f3:25:6d:31:70:fb:f7:45:f8:5d:10:d1:dc:87:ca:8e:
         11:aa:ef:22:2b:17:d4:19:6a:62:8e:e3:1d:58:5d:20:62:b0:
         55:d8:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:39 2025 by rpki-client