Certificate

$ rpki-client -vvvf rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/C2A29F890B4BA854C140D7922D924183BE3DEB07.cer
File:                     C2A29F890B4BA854C140D7922D924183BE3DEB07.cer (raw, json)
Hash identifier:          lg6uhHuq0Q7EIP+y3Fff3vdb+olqZ5GgKDeiPnxOyME=
Subject key identifier:   C2:A2:9F:89:0B:4B:A8:54:C1:40:D7:92:2D:92:41:83:BE:3D:EB:07
Authority key identifier: A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54
Certificate issuer:       /CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
Certificate serial:       6AC3D22EA12444B567E90B7EF423E0E12B9E8C41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
CRL Distribution Point:   rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl
Manifest:                 rsync://rsync.rpki.as205941.org/repo/AS205941/4/C2A29F890B4BA854C140D7922D924183BE3DEB07.mft
caRepository:             rsync://rsync.rpki.as205941.org/repo/AS205941/4/
Notify URL:               https://rsync.rpki.as205941.org/rrdp/notification.xml
Certificate not before:   Sun 08 Nov 2026 02:41:23 +0000
Certificate not after:    Sun 07 Nov 2027 02:46:23 +0000
Subordinate resources:    AS: 403201
                          IP: 142.249.174.0/24
                          IP: 2602:fa86:ffe::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c3:d2:2e:a1:24:44:b5:67:e9:0b:7e:f4:23:e0:e1:2b:9e:8c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
        Validity
            Not Before: Nov  8 02:41:23 2026 GMT
            Not After : Nov  7 02:46:23 2027 GMT
        Subject: CN=C2A29F890B4BA854C140D7922D924183BE3DEB07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:25:57:4a:73:5a:ea:51:20:69:90:22:a5:b2:
                    25:7c:e7:b2:53:db:9d:a7:09:0c:36:14:9a:98:5c:
                    2a:13:ff:67:02:9c:4e:21:11:09:e9:8f:7e:47:26:
                    bd:8e:fa:06:f4:e0:bb:41:b0:b5:9f:37:b9:30:a7:
                    c1:45:fc:17:ec:7f:5c:82:3b:48:a1:5c:db:45:27:
                    51:7c:0c:e3:47:6b:87:08:69:07:c4:7c:93:6d:f5:
                    1f:3f:13:a2:1c:3d:00:da:fb:7d:fe:ac:7e:d7:29:
                    b3:f2:21:ab:30:a6:da:16:e2:01:66:56:68:dd:c0:
                    c7:6f:0a:e2:ba:1b:49:92:33:5e:46:61:1b:dc:15:
                    cc:1c:a3:c7:85:bd:49:41:a6:92:c6:a6:86:63:42:
                    ce:a9:26:70:a0:ac:69:c3:87:4a:8a:79:01:a8:8e:
                    f0:77:75:2b:fa:27:b5:8c:57:d3:06:1b:63:87:25:
                    14:6a:ea:ee:93:46:b8:15:a0:00:3a:3a:e6:2d:c4:
                    f9:71:f5:67:8f:f4:ef:79:4a:80:a8:a0:5c:4f:fa:
                    d0:2f:93:bc:57:a8:c7:8b:97:98:d8:31:c5:9d:68:
                    c0:9a:24:e5:ad:3a:0c:57:fc:d6:1a:72:97:9e:9b:
                    3f:83:22:71:e3:73:d3:e7:63:30:46:7b:05:96:f0:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:A2:9F:89:0B:4B:A8:54:C1:40:D7:92:2D:92:41:83:BE:3D:EB:07
            X509v3 Authority Key Identifier:
                keyid:A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/4/
                RPKI Manifest - URI:rsync://rsync.rpki.as205941.org/repo/AS205941/4/C2A29F890B4BA854C140D7922D924183BE3DEB07.mft
                RPKI Notify - URI:https://rsync.rpki.as205941.org/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.174.0/24
                IPv6:
                  2602:fa86:ffe::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  403201

    Signature Algorithm: sha256WithRSAEncryption
         15:91:dd:53:20:74:c0:0f:ce:8a:50:d2:4d:49:dd:36:23:63:
         51:7d:1a:29:71:63:05:bd:fb:e8:6e:21:6a:32:a7:49:3f:96:
         98:7d:0b:72:75:fe:06:bf:4d:e6:a3:ff:aa:a2:31:8d:4a:f0:
         b9:3f:b6:77:28:6b:7c:d3:02:0c:42:ee:f1:61:77:00:72:20:
         32:2c:8d:9f:3e:e9:f1:f5:ac:49:d5:10:b0:71:cc:64:c6:f2:
         6f:18:fb:de:13:c6:ce:ea:03:49:97:43:31:52:0d:b8:d2:51:
         b8:97:2d:e5:98:f9:26:62:90:2d:11:60:32:d3:a0:b8:b7:f6:
         58:18:b5:74:8d:a1:36:d6:5d:52:20:5d:c0:84:26:b4:57:62:
         76:6c:65:26:8a:85:8f:d0:10:0c:09:52:6f:81:7d:1b:e2:89:
         cc:6a:5e:e6:c6:81:20:17:38:8f:4e:e9:6b:32:0b:26:35:28:
         af:fb:2e:f1:67:20:ba:70:27:e2:4a:29:f0:ac:69:82:ab:79:
         d2:89:0b:db:4d:0d:e3:15:62:59:a3:2c:1d:2f:7f:50:71:ad:
         84:6f:8e:aa:7e:21:57:50:d9:56:3e:bb:61:04:87:f7:30:f0:
         a2:ca:6f:eb:53:0e:f3:6e:0a:54:aa:66:2c:d7:97:32:1c:c6:
         96:fd:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----