Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
File:                     946cb195-9b9a-4836-9152-b97e9e831144.cer (raw, json)
Hash identifier:          wYVGlYOQyo8DkYubzig4Q1nlPd2OAzxby6Ov20gWmHc=
Subject key identifier:   D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C
Certificate issuer:       /CN=2a246947-2d62-4a6c-ba05-87187f0099b2
Certificate serial:       010D0C9F4328584925AC2039A7D2797F2495EF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 11 Mar 2025 00:45:32 +0000
Certificate not after:    Mon 14 Jun 2027 00:45:32 +0000
Subordinate resources:    AS: 21935
                          AS: 396292
                          IP: 142.54.0.0/21
                          IP: 142.54.16.0/23
                          IP: 142.54.32.0 -- 142.54.41.255
                          IP: 142.54.200.0/23
                          IP: 142.54.240.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:25:ac:20:39:a7:d2:79:7f:24:95:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2
        Validity
            Not Before: Mar 11 00:45:32 2025 GMT
            Not After : Jun 14 00:45:32 2027 GMT
        Subject: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:3d:72:2b:11:9f:e6:61:3e:68:1a:3c:9c:
                    5b:a1:60:95:0b:d1:fa:4b:8f:e5:3d:a9:c4:ba:d7:
                    35:6c:db:2e:a8:14:ea:ce:fe:f5:d0:f0:21:37:17:
                    2b:7d:35:23:50:e2:c5:10:7b:0c:40:7d:2f:e8:ff:
                    79:c5:68:bd:e1:0e:e3:d8:b6:24:8e:ba:28:a8:51:
                    18:80:cb:b8:2d:ba:a0:a2:23:ac:e3:5b:4e:81:54:
                    07:a1:50:ad:15:b2:dd:2e:a1:e9:dc:1b:6f:c2:51:
                    84:4e:31:08:52:cc:28:a8:48:df:f8:5b:32:51:dd:
                    3f:8d:b6:72:24:69:83:6b:93:f3:4a:2c:78:fb:a0:
                    f0:56:aa:81:43:f8:4c:b7:fc:8f:56:38:1c:0b:94:
                    f2:ba:c4:67:1f:78:73:f7:6e:56:56:7a:34:ca:6a:
                    0c:e2:ec:7b:2d:07:ee:b4:31:60:dc:37:69:9c:6d:
                    f6:a2:1b:aa:fe:25:bb:7f:c6:6d:96:49:2c:39:42:
                    28:78:1d:33:1b:a6:e0:be:29:a0:d7:ec:f5:88:d7:
                    e1:17:9e:86:28:32:55:c4:db:d7:a0:c5:3f:50:8e:
                    5f:fc:34:f9:e9:60:6d:b8:34:40:b8:7b:f3:b9:93:
                    a9:37:78:8d:8e:03:79:3f:18:24:13:5e:f9:eb:f4:
                    00:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl

            X509v3 Authority Key Identifier:
                keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.0.0/21
                  142.54.16.0/23
                  142.54.32.0-142.54.41.255
                  142.54.200.0/23
                  142.54.240.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21935
                  396292

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:90:d0:25:57:a5:35:56:00:f8:d5:8c:df:33:e7:c2:67:4f:
         f3:fe:7e:42:93:c2:75:7b:dc:7c:14:0d:d7:ce:7c:f5:b9:aa:
         bf:66:ec:f0:c9:70:32:71:12:ff:72:46:55:e5:bd:df:5a:8d:
         6a:72:a9:6d:61:f8:51:38:bf:43:cb:60:e8:ca:07:7b:90:a4:
         3c:f7:0a:16:83:b0:e2:de:a6:49:b8:1e:a5:e5:61:1b:c8:2b:
         15:a6:81:0c:31:5e:f0:7f:7d:1f:f6:be:a0:d5:13:02:24:09:
         a4:a0:c3:2d:6d:0c:ab:59:85:76:0f:33:cc:5f:79:37:a8:25:
         39:ef:d4:cc:31:6c:5f:d5:fe:5e:43:9b:cc:b1:32:11:a6:db:
         7a:06:a3:cc:ad:6f:7d:df:44:50:15:9e:c4:33:df:83:db:80:
         c8:db:ef:3e:62:9f:8a:d9:eb:c7:78:36:95:8d:8f:e1:f9:41:
         ee:4e:49:2d:d5:f3:9b:34:3b:ea:10:e5:5f:86:ec:b7:fb:31:
         f7:28:12:c9:2c:fb:92:b2:5d:cb:14:2b:38:0b:57:93:d1:07:
         c6:2f:ae:6d:91:2f:4a:47:51:3a:26:5c:71:93:cb:ed:e3:29:
         fb:bc:f4:d0:73:79:ac:1a:f1:0f:66:e6:ec:16:3b:6d:39:d5:
         69:dd:ad:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:27:19 2025 by rpki-client