Certificate

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer
File:                     30a308e87166d573359027af9975a416d5a3f176e44f45c932.cer (raw, json)
Hash identifier:          OCClHrc3zb47NYQfgh8PjqWhZuXvPy9p5TlUpUNI5+o=
Subject key identifier:   0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0
Authority key identifier: F6:73:56:4C:FE:3F:1C:1E:74:CC:DF:6E:7D:A1:7F:9C:DE:EF:37:70
Certificate issuer:       /CN=482a4d06-ced8-4851-80b2-60d3da11fd6f
Certificate serial:       010D0C9F4328584F37459FDECA32FB6F09440430
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer
Manifest:                 rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
caRepository:             rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/
Notify URL:               https://rpki-repo.canops.org/rrdp/notification.xml
Certificate not before:   Fri 18 Sep 2026 12:45:11 +0000
Certificate not after:    Thu 21 Dec 2028 13:45:11 +0000
Subordinate resources:    AS: 32591
                          IP: 23.140.52.0/24
                          IP: 2602:f633::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:45:9f:de:ca:32:fb:6f:09:44:04:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482a4d06-ced8-4851-80b2-60d3da11fd6f
        Validity
            Not Before: Sep 18 12:45:11 2026 GMT
            Not After : Dec 21 13:45:11 2028 GMT
        Subject: CN=30a308e87166d573359027af9975a416d5a3f176e44f45c932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b5:72:ed:34:9a:34:b5:00:21:50:13:92:1f:
                    01:ba:a9:f5:71:5d:f2:dd:dc:ad:d1:69:f2:79:44:
                    d9:2d:37:50:2e:71:79:a4:f7:68:98:df:96:0f:a4:
                    77:65:fd:fb:89:6d:a9:f1:5e:03:cb:c2:ce:6a:bd:
                    31:a3:2c:31:b2:d2:a9:49:2d:16:04:89:94:71:44:
                    a9:8e:cb:4f:7d:e3:38:6c:96:f9:59:81:4e:14:14:
                    d6:d9:cd:96:2c:e5:bd:2f:ac:f1:5b:d5:90:48:df:
                    20:dd:f5:1f:b8:30:0e:71:de:0c:ae:d3:0f:8d:82:
                    07:10:5d:ad:a6:04:af:e8:02:14:a4:8d:6f:a2:80:
                    70:f6:5a:12:15:59:e0:81:3c:96:99:be:8e:e4:5c:
                    e8:01:60:cb:f7:df:31:15:b1:58:86:b7:aa:5d:92:
                    06:4d:67:65:5a:40:5a:f6:09:2b:5e:a6:43:b9:3c:
                    ba:66:f0:75:2f:a1:e0:78:2d:2c:e5:2f:6b:79:a5:
                    ef:bc:77:5c:02:ba:07:0b:1a:90:db:f8:ed:65:8a:
                    d6:a6:06:53:a7:5f:2b:7b:08:3f:42:47:ac:f3:21:
                    ae:6f:55:1a:76:42:a1:a8:39:e8:b8:c7:1e:47:91:
                    aa:56:6e:70:cb:79:85:8f:f3:b4:b7:57:49:f1:48:
                    ec:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:89:00:48:A3:A3:95:BC:1F:A4:96:5D:2D:D5:7E:DD:7D:91:E2:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/
                RPKI Manifest - URI:rsync://rpki-repo.canops.org/repo/CanOps-PASS/0/0B890048A3A395BC1FA4965D2DD57EDD7D91E2E0.mft
                RPKI Notify - URI:https://rpki-repo.canops.org/rrdp/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f/482a4d06-ced8-4851-80b2-60d3da11fd6f.crl

            X509v3 Authority Key Identifier:
                keyid:F6:73:56:4C:FE:3F:1C:1E:74:CC:DF:6E:7D:A1:7F:9C:DE:EF:37:70

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/482a4d06-ced8-4851-80b2-60d3da11fd6f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.52.0/24
                IPv6:
                  2602:f633::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32591

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:fe:fb:38:5c:79:d9:6c:df:58:2e:d8:d5:f3:3e:06:2e:
         fa:05:29:99:61:b2:9b:85:60:4c:56:f9:d4:3f:d5:07:82:c9:
         b7:85:9a:a5:8d:b5:81:2a:51:b0:14:cc:21:5e:36:ee:31:eb:
         7a:3b:48:43:2e:c2:11:38:5e:4e:3d:8d:6c:80:f9:27:66:ee:
         bd:86:87:a0:49:36:8a:35:14:6e:e1:45:3d:34:fa:78:e2:cd:
         45:8a:a6:82:29:dc:0f:1b:f8:de:c5:00:58:01:ff:ed:99:98:
         28:be:42:84:a1:9a:7e:57:82:ea:e5:4d:cb:62:b8:71:e5:51:
         2f:76:7d:0d:ef:0b:86:c1:92:36:d8:d7:39:de:10:29:d0:34:
         91:33:e3:42:7d:3f:ad:b1:36:a2:36:0f:b7:91:95:8d:21:d5:
         1e:43:b2:37:30:d8:7f:70:3a:a9:21:1d:bf:d2:3e:75:0a:3e:
         93:dd:29:17:c0:fb:24:5d:ff:83:fd:22:ec:f0:8c:b2:85:25:
         e1:75:2e:4c:a3:10:25:b7:ad:72:b3:6d:6f:34:39:74:c2:1b:
         54:e4:2c:6b:60:f4:56:05:01:d4:9d:9a:83:15:75:5b:36:ec:
         c5:a3:38:44:7f:5c:74:7b:46:2a:45:a6:39:43:b2:4d:7b:ac:
         95:e8:f8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----