Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707.cer
File:                     a7840f46-b135-4a45-8c47-daede4b0b707.cer (raw, json)
Hash identifier:          eZilr54YcIdQYslGlLfCQ9nJ5qAXrwqd6/2jrJu7nDg=
Subject key identifier:   91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F432858488393FF43E68C8108DC267FC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 11 Jan 2025 23:15:59 +0000
Certificate not after:    Fri 16 Apr 2027 22:15:59 +0000
Subordinate resources:    AS: 12213
                          AS: 398014
                          IP: 24.170.128.0/18
                          IP: 131.226.192.0/18
                          IP: 149.137.192.0/18
                          IP: 2604:7ac0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:83:93:ff:43:e6:8c:81:08:dc:26:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan 11 23:15:59 2025 GMT
            Not After : Apr 16 22:15:59 2027 GMT
        Subject: CN=a7840f46-b135-4a45-8c47-daede4b0b707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:cd:81:2c:ea:04:45:0f:c1:55:99:10:9f:
                    44:f9:ce:7e:82:15:89:73:42:6b:56:78:cc:69:61:
                    3f:66:d4:54:b7:70:8d:57:c9:e7:6b:10:54:51:f4:
                    c9:cc:ef:1a:41:b5:32:16:c7:00:ba:87:a0:cb:df:
                    f1:84:a7:c0:e7:9f:1a:e9:06:bd:d4:74:c8:e3:66:
                    d9:6b:e1:c1:56:cf:c3:23:d3:2d:16:ff:34:a3:5f:
                    7d:e8:01:5b:b8:9e:32:a6:8c:c8:d1:cf:a8:68:df:
                    b3:bd:ad:ec:ed:bd:49:89:14:04:ad:bb:c6:da:25:
                    bf:59:91:59:d0:a7:e5:81:a2:63:4b:39:a3:be:c7:
                    4b:fa:2d:9f:94:2c:15:fd:21:2f:ac:a7:32:88:33:
                    f2:c9:eb:a0:bd:bf:0f:7e:52:8f:c6:12:af:d4:28:
                    0e:72:13:82:03:21:59:34:33:6a:ff:13:5f:fa:93:
                    42:62:38:0b:22:00:4d:7c:f2:19:ee:85:4a:1b:62:
                    1c:c4:21:9a:da:92:69:11:40:01:4f:cd:6f:03:65:
                    89:e8:97:76:86:50:03:3b:cb:84:83:86:80:99:c2:
                    8b:26:bf:19:ee:1c:00:72:11:c4:6e:31:04:d5:79:
                    08:11:7a:f1:9f:31:22:f5:f5:85:c2:2a:6f:9e:b9:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7C:19:EA:56:6D:ED:DE:A0:7B:D9:31:E6:0D:2E:C3:5A:16:13:CE
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a7840f46-b135-4a45-8c47-daede4b0b707/a7840f46-b135-4a45-8c47-daede4b0b707.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.170.128.0/18
                  131.226.192.0/18
                  149.137.192.0/18
                IPv6:
                  2604:7ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12213
                  398014

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:8f:9d:c6:b0:bd:96:7a:62:c7:aa:bf:76:e8:74:91:aa:16:
         a9:4f:e5:76:89:4c:09:26:82:1a:ab:39:79:6f:5c:51:f9:85:
         55:1d:e2:8c:30:e7:27:6c:bf:35:ca:36:5b:87:bf:e9:7f:09:
         c5:a8:7f:fb:69:ac:61:6f:b8:b2:ce:1c:e8:0c:38:2c:9d:fe:
         11:d5:e5:1a:b3:86:41:72:cd:12:e1:67:38:45:b7:54:86:20:
         08:e7:dd:d1:cc:46:e1:ae:32:28:82:c6:17:47:4e:76:9c:40:
         d8:12:06:eb:3f:3e:99:0b:bd:21:61:cf:f9:81:38:75:5b:23:
         9a:b0:05:49:06:78:d3:2c:20:f9:d0:7f:e2:fd:19:c4:97:80:
         7c:0d:ad:3a:09:ea:bf:73:16:5f:29:51:c9:c4:49:4a:8f:20:
         33:20:ad:c6:df:07:ee:7a:ec:03:2a:d8:c9:62:3c:26:a6:fc:
         7f:b3:f0:47:4a:6d:34:8d:4a:f4:63:6e:d7:a3:db:7f:ef:49:
         3d:d6:ba:ee:10:3f:67:1c:61:f8:05:1b:af:50:ec:51:dc:84:
         21:d4:13:bc:03:21:0d:f7:47:75:18:80:83:57:58:a5:2a:97:
         6e:80:25:77:3c:ed:29:88:39:78:95:2d:2f:4f:93:9f:4a:7d:
         ad:08:ae:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:15 2025 by rpki-client