Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer
File:                     ab991ee4-f5ad-4c54-a01e-156f24bac9fb.cer (raw, json)
Hash identifier:          6mBithELoVUzNQ8dXl84mDCyXwvjV6l8mMJSgiDu8uY=
Subject key identifier:   E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57
Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C
Certificate issuer:       /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
Certificate serial:       010D0C9F43285848A7D2DE58F303D4CF42571D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 24 Jan 2025 22:51:45 +0000
Certificate not after:    Thu 29 Apr 2027 21:51:45 +0000
Subordinate resources:    AS: 396083
                          IP: 156.2.0.0/16
                          IP: 160.84.0.0/16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a7:d2:de:58:f3:03:d4:cf:42:57:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf
        Validity
            Not Before: Jan 24 22:51:45 2025 GMT
            Not After : Apr 29 21:51:45 2027 GMT
        Subject: CN=ab991ee4-f5ad-4c54-a01e-156f24bac9fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:c7:95:08:f3:cf:18:ae:38:d1:15:d0:6a:
                    ce:bb:d9:ae:f2:2c:1e:b4:70:16:22:e4:02:c9:23:
                    8b:75:5c:75:ba:a6:c1:00:5b:eb:84:78:c7:9f:1a:
                    89:c1:05:48:b7:bc:66:71:3e:cf:0c:76:52:13:35:
                    4d:bc:cf:da:2a:b0:4e:e4:77:37:25:3a:e0:73:cb:
                    47:a9:c3:0a:14:c1:83:92:10:73:f8:79:95:66:51:
                    d3:83:48:5f:f4:d7:25:dd:11:ce:b5:fb:43:31:6c:
                    81:49:fc:a3:d1:36:17:2b:cc:2a:fe:5c:d5:b7:13:
                    46:73:b3:d7:ec:9a:e8:80:65:19:87:44:32:fc:7b:
                    8e:c8:36:1f:35:fc:75:12:39:ae:84:dd:90:ab:17:
                    79:d5:63:b8:5a:34:2b:60:a3:9a:1d:64:87:0c:2e:
                    0b:17:31:3f:1f:ab:25:9d:81:65:46:14:9a:15:07:
                    7e:b1:24:e1:97:07:84:40:30:0e:59:d1:8e:af:4f:
                    6d:ad:5c:1f:02:0e:26:6c:18:e6:03:27:f9:83:6c:
                    60:b2:19:d1:51:93:e2:82:7b:f9:bf:1b:84:f9:cf:
                    ee:f6:c4:48:7e:b6:f3:0c:a7:75:4d:80:1e:e4:2e:
                    da:94:f6:d0:cf:58:76:fc:a7:e0:20:4a:76:ad:17:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0D:FE:CF:B8:01:76:80:41:B5:02:2C:01:CC:03:13:BF:00:2A:57
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab991ee4-f5ad-4c54-a01e-156f24bac9fb/ab991ee4-f5ad-4c54-a01e-156f24bac9fb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl

            X509v3 Authority Key Identifier:
                keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.2.0.0/16
                  160.84.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  396083

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:7a:07:91:d8:3a:31:57:2c:11:81:6a:ab:c5:96:d4:59:bc:
         d3:f0:e7:a8:a4:7b:72:cd:7b:18:f9:8b:2d:ab:f9:3d:b3:de:
         ae:f3:c3:78:9c:5e:73:28:3c:c5:98:dd:41:f2:6a:54:8b:97:
         97:c3:aa:29:35:0a:de:98:39:c3:ac:85:bc:e6:91:23:71:5b:
         45:e3:6b:55:44:cd:1e:5a:57:c2:53:5b:db:eb:c9:6f:44:34:
         5e:1e:5e:97:d6:1f:e0:1c:0b:93:3d:cb:e1:54:cf:b6:e8:4d:
         d5:9e:b1:a7:bd:48:59:90:43:2c:ca:6b:32:ac:f5:15:a0:5e:
         b9:ef:bb:2e:ab:fd:c1:5c:70:8f:d0:71:57:ff:62:d3:fb:b6:
         ce:38:f7:d6:6b:67:1e:24:26:83:3a:34:f3:3b:10:ba:7a:4e:
         9c:ba:73:11:e7:c5:52:97:58:46:65:07:dd:7c:2b:dc:6c:aa:
         6b:d9:e0:7d:cd:ab:59:47:39:4f:38:a6:47:43:23:06:b8:6e:
         b1:e4:52:9d:8c:bf:ea:11:d7:71:aa:8c:49:d7:81:75:e9:80:
         87:32:90:5d:1d:93:d9:4f:03:19:4e:7e:0a:16:34:8b:14:60:
         ab:09:1f:f7:d6:c9:1b:2c:44:ba:08:9b:4d:f2:9d:a4:37:a2:
         0b:e5:fc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:50 2025 by rpki-client