Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101.cer
File:                     5deff3d1-d421-448c-9f01-4b862c33f101.cer (raw, json)
Hash identifier:          0KT3Bfl+VKT1+0CWUCISGlB6h2yvaHyIiYWvU92ZXz4=
Subject key identifier:   FC:E0:A2:44:24:B7:BD:CD:93:76:35:B7:ED:E9:FE:B6:81:37:25:CD
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285848F91EF7D9969FF3F300C3E900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/5deff3d1-d421-448c-9f01-4b862c33f101.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 23 Feb 2025 01:45:33 +0000
Certificate not after:    Sat 29 May 2027 00:45:33 +0000
Subordinate resources:    AS: 25657
                          IP: 204.62.114.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:1e:f7:d9:96:9f:f3:f3:00:c3:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Feb 23 01:45:33 2025 GMT
            Not After : May 29 00:45:33 2027 GMT
        Subject: CN=5deff3d1-d421-448c-9f01-4b862c33f101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:43:cb:91:48:16:de:16:4e:2b:a5:63:79:
                    b1:e8:9a:0a:37:81:5e:7a:7a:a1:fd:0c:23:db:52:
                    69:6d:8c:6b:a6:de:b8:ab:06:73:48:96:a3:9e:cd:
                    44:b7:52:18:31:f0:df:f3:16:be:f7:9d:1a:b3:92:
                    2a:08:4a:22:9a:00:21:05:ef:e6:39:d1:af:66:45:
                    3d:bb:01:ba:e5:15:b7:7c:8b:32:8d:ad:47:f7:f8:
                    86:c3:1a:8e:e7:12:59:5f:d1:b4:5a:d2:69:b1:b7:
                    c0:7b:9a:04:8c:f4:19:76:fb:3f:f0:c4:34:a2:a8:
                    99:c3:ac:c7:5f:df:3a:00:42:c4:b1:9c:ff:8b:43:
                    bf:a6:00:46:d5:af:b0:04:a6:6d:6e:d1:50:1e:79:
                    9f:bd:9c:f1:0b:11:29:49:d6:5f:4a:8a:f1:6a:ca:
                    11:00:83:b0:6c:7b:60:11:72:8e:ce:11:a3:3d:bf:
                    ca:a2:f8:7d:2b:23:17:ae:67:2d:a3:ec:38:e8:56:
                    7a:b5:6c:67:bb:a5:58:a2:26:be:37:8f:aa:d4:84:
                    c9:9b:98:0e:40:87:1e:55:81:8e:53:23:74:fa:52:
                    54:8b:c2:02:2c:dc:db:60:aa:74:c3:cd:57:a1:61:
                    23:3c:69:7a:50:97:62:59:84:5f:28:10:26:a7:4c:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E0:A2:44:24:B7:BD:CD:93:76:35:B7:ED:E9:FE:B6:81:37:25:CD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/5deff3d1-d421-448c-9f01-4b862c33f101.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.114.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25657

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:63:53:ae:af:90:30:38:3f:de:29:5d:af:d6:50:bc:0b:05:
         31:27:61:ad:2a:b1:17:1b:40:8e:a5:0d:05:7f:01:02:35:a4:
         84:4c:fc:8f:36:6f:83:ee:9e:d6:74:2d:93:3a:07:64:d3:35:
         41:b3:7e:b6:2b:ba:3c:98:98:09:24:3f:37:8c:4d:ba:97:f6:
         d6:46:0b:6e:62:06:29:fc:e3:1d:d8:c6:0c:fc:76:6e:1a:bf:
         a4:41:cc:af:38:a7:31:7b:ad:df:8c:82:cb:8b:53:9f:ee:43:
         66:0f:fc:cf:73:09:93:12:4d:86:c6:ad:99:f1:80:1b:ed:8a:
         5a:0c:70:eb:95:83:2b:1e:1b:07:1b:33:0b:f4:a1:74:32:71:
         22:33:f1:42:94:4a:2a:f5:09:9e:90:3a:59:b3:6d:d7:c0:07:
         f3:75:51:46:72:9f:39:95:13:92:8d:0d:af:ae:78:76:d7:21:
         ff:de:c6:ee:76:6c:61:af:71:52:2c:85:5f:c5:45:b6:ed:f7:
         b4:cd:40:3c:68:9f:89:f3:d7:3d:83:31:db:54:cc:67:32:8a:
         c9:b3:d9:54:4f:4b:2e:13:77:96:ad:73:b9:b6:ee:b5:b5:88:
         6e:e4:2a:ea:7c:d0:5d:8a:aa:9c:5a:69:98:44:c8:7c:de:78:
         83:6c:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:20 2025 by rpki-client