Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer
File:                     10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer (raw, json)
Hash identifier:          ruFuqtWZ5dQ44Q/n4ndAEo7YDH7t+RWHJKJQK3PFcXI=
Subject key identifier:   77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285847FB12B6AF34E82117C76AA880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 24 Nov 2024 01:45:33 +0000
Certificate not after:    Sat 27 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 20119
                          IP: 23.151.96.0/24
                          IP: 142.202.12.0/22
                          IP: 144.208.88.0/24
                          IP: 172.83.127.0/24
                          IP: 2602:fe3a::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:fb:12:b6:af:34:e8:21:17:c7:6a:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Nov 24 01:45:33 2024 GMT
            Not After : Feb 27 01:45:33 2027 GMT
        Subject: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:ce:85:4b:9a:d7:78:b5:49:1f:b9:72:68:
                    94:67:86:af:aa:2d:d1:44:0e:43:9a:93:d6:fd:df:
                    30:39:95:10:15:05:f7:82:f3:35:63:de:96:b7:a7:
                    c1:28:f2:a7:db:df:63:e4:13:a2:e4:40:f5:9c:4b:
                    6d:da:6e:04:71:51:64:a5:89:83:bb:a5:e4:0c:f7:
                    2b:61:07:ac:74:24:7c:47:67:40:2c:85:3e:98:0f:
                    5b:29:e9:97:4f:d8:6b:e5:2d:7c:1d:77:ca:09:1b:
                    69:5d:79:e8:d2:c1:ff:ab:30:dc:60:b8:70:4c:87:
                    64:06:67:66:7e:83:b7:cf:8a:b3:e6:a9:95:82:ae:
                    47:18:28:44:52:a2:1e:3c:64:0f:97:42:b4:6d:b1:
                    8e:c2:54:a3:29:9a:4a:9a:8b:64:bb:12:f3:58:76:
                    81:e0:d2:6f:d3:ad:16:32:4e:24:13:01:d4:b5:26:
                    7e:0f:9e:97:2d:da:92:2b:46:f4:3c:7b:b0:d1:55:
                    d5:31:d4:28:0f:4d:cc:a8:3d:ef:4b:05:63:15:a4:
                    dd:fa:30:e6:70:be:fa:bc:36:9c:e2:a7:18:47:f7:
                    1d:a2:75:8d:bf:4c:36:28:6c:6d:c9:88:59:df:3b:
                    0a:0d:3c:a2:da:91:3e:46:c2:7d:ee:04:e4:7b:a0:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.96.0/24
                  142.202.12.0/22
                  144.208.88.0/24
                  172.83.127.0/24
                IPv6:
                  2602:fe3a::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20119

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5c:08:38:35:fb:79:f3:6e:4c:a6:79:c4:29:54:b7:d6:55:
         02:54:10:b0:9c:05:fc:de:9c:60:e7:e4:5b:9c:3f:73:88:99:
         36:17:02:9f:d3:98:3e:df:e3:f9:32:8b:54:4e:03:c6:1b:26:
         9b:cd:55:3d:75:29:ec:8d:3b:11:ad:e5:46:74:4d:78:6f:03:
         c7:01:37:28:63:29:d4:d2:45:f1:f6:7c:bc:ac:90:e3:c5:d7:
         3b:bc:87:af:f8:04:d4:eb:0d:9a:a4:3e:35:f9:cd:28:58:5a:
         32:52:6f:d6:a3:cf:09:7a:66:97:a5:f4:d2:d2:6b:59:ac:8d:
         56:2e:c8:89:3f:f1:60:5a:3f:e4:e0:16:2c:fb:28:2c:e9:70:
         79:e1:93:df:4b:02:75:37:c3:2e:26:45:8b:88:ff:ca:2b:5e:
         99:5a:09:5a:d0:ca:ff:b6:01:f5:21:f3:8b:39:91:1f:27:c6:
         d9:28:85:75:9e:a3:30:79:69:36:ef:46:d9:01:9b:16:07:2b:
         3f:78:c8:86:1f:60:19:ee:10:15:77:b9:56:0d:31:fe:d1:58:
         79:d0:70:10:e2:74:d1:84:c3:cd:d2:61:fc:bb:d2:5b:7c:34:
         73:a0:35:99:8d:81:38:eb:ac:3b:e6:da:48:05:33:bb:db:4d:
         db:76:d3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:13 2025 by rpki-client