Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.cer
File:                     3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.cer (raw, json)
Hash identifier:          SwdORlwHp6sgH0YCfgxJdgcyC6Sw0mc7ml/dTGvyCw4=
Subject key identifier:   3D:8C:37:B7:27:7F:72:E3:F4:CA:AA:69:DC:30:B2:2A:2B:66:20:25
Authority key identifier: DE:AC:9A:97:2D:6E:09:98:C9:8D:CF:45:67:A8:89:FE:2B:31:8C:2C
Certificate issuer:       /CN=DEAC9A972D6E0998C98DCF4567A889FE2B318C2C
Certificate serial:       275AC47A4F385B8863E21A33D3A27668C30C70CE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.cer
Manifest:                 rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.mft
caRepository:             rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/
Notify URL:               https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before:   Fri 11 Apr 2025 12:04:12 +0000
Certificate not after:    Fri 10 Apr 2026 12:09:12 +0000
Subordinate resources:    IP: 2a0b:4e07::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5a:c4:7a:4f:38:5b:88:63:e2:1a:33:d3:a2:76:68:c3:0c:70:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAC9A972D6E0998C98DCF4567A889FE2B318C2C
        Validity
            Not Before: Apr 11 12:04:12 2025 GMT
            Not After : Apr 10 12:09:12 2026 GMT
        Subject: CN=3D8C37B7277F72E3F4CAAA69DC30B22A2B662025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:01:c1:a7:4c:78:89:f5:a6:3c:0a:90:b1:ca:
                    c4:bc:5e:96:83:1e:d0:6d:24:d2:2d:3d:90:8a:68:
                    33:fc:d9:03:9d:77:5f:5f:a7:52:a9:01:53:44:ad:
                    53:de:39:28:33:5e:01:e5:83:2e:9b:3a:81:08:8d:
                    5a:46:fb:df:59:e3:01:a2:9f:2c:1d:ad:fb:21:5b:
                    e7:87:44:d9:b0:39:51:b9:fa:0b:4c:fe:2c:53:15:
                    f4:ab:a4:ae:21:a7:f9:4f:3a:f5:46:9f:89:45:77:
                    e8:05:80:42:86:10:85:af:60:27:5b:0c:d4:ef:17:
                    95:86:de:0d:75:03:f6:00:31:64:1c:cd:ce:7e:3e:
                    43:51:0d:58:0f:7f:ae:98:ca:2b:1d:5e:d4:41:15:
                    dc:38:f6:ff:43:27:68:18:c7:fe:80:45:02:2a:a9:
                    75:9f:13:d5:2e:1e:02:95:ef:51:fa:81:ba:86:d7:
                    e1:d4:65:2e:d4:e0:21:f8:67:e8:64:27:f8:08:f8:
                    04:85:be:9f:8a:5a:a9:bd:5b:60:a3:1d:3d:7b:da:
                    d3:57:e4:7b:fa:84:9a:ff:5b:4c:65:db:f0:a1:3b:
                    9c:f9:a8:81:b8:3a:59:d2:f9:4a:42:7b:c1:7a:9b:
                    b9:5e:87:6d:fd:c1:ba:7d:d3:31:97:e2:88:e7:0c:
                    bc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:8C:37:B7:27:7F:72:E3:F4:CA:AA:69:DC:30:B2:2A:2B:66:20:25
            X509v3 Authority Key Identifier:
                keyid:DE:AC:9A:97:2D:6E:09:98:C9:8D:CF:45:67:A8:89:FE:2B:31:8C:2C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/DEAC9A972D6E0998C98DCF4567A889FE2B318C2C.cer

            Subject Information Access:
                CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/
                RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/c670d7c3-a7c3-4ac0-8b45-39449dd65ccf/0/3D8C37B7277F72E3F4CAAA69DC30B22A2B662025.mft
                RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:9e:65:dc:a6:50:ac:2e:f1:37:f9:85:da:22:3a:6c:f5:21:
         56:2f:0c:56:50:76:b5:bc:44:4b:15:da:b4:b7:34:e4:3a:0e:
         06:75:ed:fa:c5:2b:c6:10:67:95:4d:2c:8f:5d:09:a9:e5:5e:
         0e:8d:0d:5c:35:b0:11:09:1d:9b:03:ab:3e:a4:39:80:1f:e2:
         94:3e:ab:2a:2f:38:f3:e5:88:0c:c3:46:bc:5d:4d:e9:b8:c3:
         05:5f:7f:b8:dc:dc:0b:e4:29:de:e4:d0:77:10:80:a5:1f:87:
         82:26:6b:9f:43:c8:ed:60:1f:06:4c:e6:39:e7:6a:8c:4b:34:
         c2:c1:b0:9e:d9:9c:37:a8:55:98:e1:61:46:cc:2f:9f:17:25:
         57:e4:7c:a1:a9:e0:2f:93:2b:75:bc:dc:ca:9a:f1:a4:5b:97:
         7e:8f:48:5c:89:37:c3:d8:9a:cc:00:c7:9e:88:7f:bf:1b:57:
         44:42:77:ac:e3:8b:2a:fc:83:d1:07:cf:cb:3c:a9:f6:03:90:
         77:ae:9d:66:68:e9:40:ce:eb:55:69:ca:9c:b4:bb:18:56:c6:
         8f:65:dc:14:50:10:e9:48:d5:0a:b8:6c:dd:bc:52:17:02:c1:
         97:bc:47:d0:81:8a:05:e8:1e:e9:4c:75:f9:20:ce:8e:c8:e3:
         fb:31:1f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----