Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer
File:                     5161da6e-b7c6-48c9-a8c0-935b5c591083.cer (raw, json)
Hash identifier:          GVa4JOZXL4yG7ahfM5z4gUZlKtNejHv0+rr1byYo1+I=
Subject key identifier:   8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03
Authority key identifier: 7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A
Certificate issuer:       /CN=0357272c-a79a-45bf-9586-92dd49ef3223
Certificate serial:       010D0C9F43285849123F2019BBED05B828DF3000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Mar 2025 01:45:33 +0000
Certificate not after:    Mon 07 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 11626
                          AS: 11702
                          IP: 208.71.176.0/22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:3f:20:19:bb:ed:05:b8:28:df:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0357272c-a79a-45bf-9586-92dd49ef3223
        Validity
            Not Before: Mar  4 01:45:33 2025 GMT
            Not After : Jun  7 00:45:33 2027 GMT
        Subject: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:10:d5:98:88:e7:12:b8:97:b0:f5:3a:9e:
                    f6:7e:95:13:d7:90:e6:69:55:85:aa:c0:11:fb:87:
                    f5:ae:09:ea:cd:7c:96:df:94:ef:7e:c8:27:a3:31:
                    08:75:27:81:c5:ae:9a:9e:d9:f9:ff:dc:56:f6:e7:
                    9a:40:e8:ea:6c:63:37:b0:94:69:5e:1e:4c:3a:8c:
                    e0:05:02:a8:40:32:88:aa:0b:7f:28:ab:65:34:fe:
                    23:e6:7f:45:ae:87:6f:fd:97:a7:91:69:2b:69:6a:
                    4e:85:57:86:f9:aa:a9:7e:ca:c9:49:41:b0:36:de:
                    99:f3:ae:fe:53:d9:ac:d0:08:fc:a2:66:d1:a6:60:
                    d4:43:dc:c1:ba:fe:cf:75:ee:1c:bd:fa:d3:51:12:
                    e2:96:dd:97:6d:00:c1:84:ca:62:da:eb:c1:35:5c:
                    2c:89:ff:b7:29:ba:8c:82:18:58:3c:60:67:68:d6:
                    52:12:93:a3:d3:de:91:64:58:53:98:8f:41:d1:88:
                    fa:f7:8e:2f:05:6d:99:aa:15:51:a5:8a:70:35:bb:
                    98:f5:0c:44:de:90:6f:d4:d8:7d:6f:61:3d:a4:4a:
                    e1:2b:02:3b:4c:08:1f:55:5d:94:24:1f:a5:71:6f:
                    1b:ce:5b:c6:e0:25:c5:f1:d0:bc:92:78:6c:47:16:
                    eb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl

            X509v3 Authority Key Identifier:
                keyid:7C:7A:F7:9C:7A:DF:7C:4B:E8:CE:A8:54:6D:F3:AA:66:20:35:DA:3A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.176.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11626
                  11702

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3a:72:b6:2f:cf:dd:a4:83:13:19:09:e1:76:a9:d5:e3:51:
         a7:a9:16:65:31:8c:c8:8d:76:12:cb:f9:0a:4f:60:b3:31:a8:
         fd:15:85:5b:2d:96:15:13:38:2b:b8:1d:f4:00:8f:fc:86:af:
         aa:b6:f5:2b:69:46:a5:99:97:43:c3:60:0a:d4:e2:ef:0e:52:
         4e:7e:14:e6:a3:17:89:ac:93:40:17:f6:f5:1d:95:e6:f5:14:
         dd:91:57:07:4f:1a:93:90:33:5c:77:c1:06:35:36:87:d5:15:
         7d:35:8f:82:d9:a0:c5:67:94:f8:ba:74:39:d2:90:9c:2b:07:
         2b:75:5a:89:e9:ca:03:a7:65:ad:56:26:73:25:5e:27:a6:9f:
         d3:02:f8:3a:16:2d:92:79:ff:a3:17:20:f4:12:23:8b:e5:07:
         c9:98:1a:77:aa:c6:60:95:f2:e2:fb:67:2f:bf:75:f4:96:be:
         b6:61:2e:6a:cd:8e:43:83:2b:99:b0:6e:a8:58:7d:c8:05:4f:
         1d:3f:6b:c1:49:25:91:ce:d6:69:f1:55:ed:5a:9c:76:60:a6:
         e4:e3:7f:bc:cf:aa:dd:a8:c7:0f:8e:21:d3:1b:0a:4f:9b:24:
         19:38:c3:67:97:27:6e:b9:8a:61:d6:bd:af:ee:c9:d0:83:4b:
         ff:49:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:07:42 2025 by rpki-client