Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
File:                     618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer (raw, json)
Hash identifier:          +wXUJEeuqPKgwP+PEmRBAiFhXXQapGwwvYeh1oiW/T8=
Subject key identifier:   97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F43285849366C3BC62CFBD4037EF48000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 17 Mar 2025 00:45:33 +0000
Certificate not after:    Sun 20 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 11641
                          AS: 14436
                          AS: 20439
                          AS: 21894
                          AS: 30181
                          AS: 54802
                          AS: 393711
                          IP: 173.240.160.0/20
                          IP: 199.16.136.0/21
                          IP: 199.187.152.0/21
                          IP: 206.108.40.0/21
                          IP: 206.225.192.0/19
                          IP: 2601:5000::/24
                          IP: 2620:103:7000::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:36:6c:3b:c6:2c:fb:d4:03:7e:f4:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar 17 00:45:33 2025 GMT
            Not After : Jun 20 00:45:33 2027 GMT
        Subject: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:92:74:32:1b:f7:20:ef:36:ae:bc:2f:c2:
                    3a:6c:ae:80:03:6e:04:b2:fb:d7:d0:da:c0:c7:f9:
                    ff:86:41:7a:d9:21:51:44:38:92:71:69:0a:f2:62:
                    18:36:d0:1d:3f:fd:db:cc:27:d2:b2:5f:54:43:0c:
                    83:d0:4b:7b:e7:55:ba:2a:03:c3:3b:86:d5:27:f8:
                    de:26:c7:3e:81:1e:b9:60:77:2a:7a:c6:9b:59:c4:
                    ae:7c:38:dc:ce:c9:0e:3b:8b:1d:65:48:be:b3:35:
                    44:ee:30:13:56:65:1d:4e:3e:94:4b:4c:23:16:48:
                    fd:fe:1b:3f:18:77:27:1f:b5:8a:dc:93:52:fd:fe:
                    dd:05:ce:cc:ec:32:a5:78:a7:c9:7e:a3:87:6a:37:
                    f4:fd:3e:6c:36:73:d4:20:cf:72:e8:a0:71:35:25:
                    14:5d:86:82:18:f5:c9:94:3c:e7:d6:aa:79:bb:1b:
                    65:3b:4e:e6:5a:af:b3:68:c8:a1:4b:b2:eb:e0:a9:
                    be:59:27:1a:68:fd:ef:d0:c5:d4:57:69:27:40:3f:
                    89:bc:67:f2:dc:3c:ad:8f:c6:d4:dd:b5:82:1c:ce:
                    82:b7:78:05:68:f9:42:8d:ec:2b:04:de:12:30:d6:
                    21:6a:fe:e8:5a:13:ac:06:26:be:10:7c:fe:d2:ad:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.240.160.0/20
                  199.16.136.0/21
                  199.187.152.0/21
                  206.108.40.0/21
                  206.225.192.0/19
                IPv6:
                  2601:5000::/24
                  2620:103:7000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11641
                  14436
                  20439
                  21894
                  30181
                  54802
                  393711

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:10:e2:7d:2c:f1:5c:73:fa:1e:09:2b:ed:1b:85:0c:dd:a9:
         95:8f:57:1c:3c:cf:80:ad:91:6c:ff:57:73:85:fa:62:24:06:
         8a:14:3f:52:b9:3e:57:13:47:bd:e4:e5:41:20:c0:4e:ed:7a:
         08:8d:fb:ef:1f:f8:91:05:5f:75:ae:1d:0b:db:fc:5a:f2:f0:
         93:3c:54:6c:15:bd:2e:8d:5f:60:76:33:85:e8:c6:38:22:de:
         86:fd:d1:6f:83:12:8c:18:fd:d5:cf:35:4f:b3:ef:f8:c3:58:
         3a:0b:8e:47:bc:96:ab:86:4b:26:41:9d:a3:61:10:86:49:b0:
         ab:5e:4a:97:ba:6a:3c:ed:83:6c:35:dc:09:6f:12:05:2d:5e:
         1b:60:f2:46:84:e3:ac:09:4e:e8:b0:46:19:07:72:1d:78:ce:
         0d:86:21:90:73:a0:09:03:ca:a6:54:3e:5e:14:cc:60:b9:e0:
         a6:44:ab:81:9c:fb:41:ee:0a:4b:0d:26:9c:01:11:39:80:48:
         2e:e8:f9:a9:17:b8:02:ff:c6:fc:c0:c2:b6:01:28:af:77:1b:
         16:23:c3:89:89:ab:58:c6:78:ae:de:2a:6a:a9:23:d8:3a:45:
         e8:a6:05:8e:3f:a6:fa:0c:c6:2c:da:26:04:d5:c6:46:ec:69:
         92:ae:9a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:37 2025 by rpki-client