Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
File:                     147f088f-ace0-45c8-9c73-f06e60d7debb.cer (raw, json)
Hash identifier:          r9HGUjIapDBa+7plyhVjiv4YVccp/fZjVkpqF0miTY4=
Subject key identifier:   A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F43285848F0BEEB40707787A54393E810
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 20 Feb 2025 01:45:34 +0000
Certificate not after:    Wed 26 May 2027 00:45:34 +0000
Subordinate resources:    AS: 26794
                          IP: 66.97.224.0/19
                          IP: 108.163.96.0/19
                          IP: 216.147.160.0/19
                          IP: 2607:fe40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f0:be:eb:40:70:77:87:a5:43:93:e8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb 20 01:45:34 2025 GMT
            Not After : May 26 00:45:34 2027 GMT
        Subject: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:94:0b:0f:1e:e5:d8:61:77:9f:65:41:ea:2e:
                    31:89:e8:01:08:08:85:62:ea:7e:05:26:17:a7:3b:
                    f2:83:65:70:f4:b1:3c:e4:e5:0b:13:e0:cb:e5:ea:
                    68:04:7e:54:d7:23:3d:e7:8f:f5:b7:bd:48:b5:84:
                    0b:ac:74:f1:9b:8c:47:ae:4d:e3:10:2e:12:73:63:
                    f3:bf:d7:0e:54:f3:ab:ad:75:83:48:46:9c:1d:27:
                    69:cb:42:d8:fb:0f:2f:1f:1d:1f:f1:d8:4f:78:7c:
                    57:eb:6f:f6:76:e5:cb:5a:52:42:39:49:97:8a:ea:
                    b0:97:96:fa:b6:d8:12:b4:9b:2d:68:e7:33:09:76:
                    57:5e:2b:59:f2:56:02:52:61:e1:b6:ef:de:73:ce:
                    bc:7c:36:36:37:7e:e5:d1:43:84:94:64:93:26:bc:
                    06:82:95:ed:49:f0:8e:ef:5b:3b:8d:4d:56:35:cb:
                    cd:c9:dd:ae:c3:65:cd:03:32:94:98:44:53:3e:df:
                    71:37:9a:ce:30:d1:c8:8c:4a:bf:0f:e0:c4:4b:b4:
                    07:4f:d2:ec:a5:4f:79:a7:20:96:c2:96:fa:f8:d9:
                    79:1b:e3:37:ee:6f:03:a6:6d:b4:c9:51:0a:95:05:
                    36:55:62:b3:2c:01:98:1c:20:fa:fd:cb:58:06:cb:
                    02:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.224.0/19
                  108.163.96.0/19
                  216.147.160.0/19
                IPv6:
                  2607:fe40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26794

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f9:d7:34:98:15:bc:34:c9:7e:bb:e0:a4:45:95:63:65:dc:
         1c:be:b1:10:1b:0d:d6:4b:da:2a:d2:89:c5:ec:09:81:50:52:
         b0:c1:30:ba:70:04:67:0e:55:b8:3b:03:5c:77:32:56:5b:39:
         8f:ca:66:ed:2c:67:0d:21:b0:d4:9c:ee:6c:d5:88:72:8e:f1:
         d2:03:e3:08:09:a5:9a:bd:34:9a:97:ca:87:1b:0c:42:fd:31:
         14:73:33:0b:3e:f5:8f:f0:a8:6d:89:ae:33:c1:49:da:db:72:
         de:f8:ae:3d:b8:c1:51:6f:28:2d:38:ff:25:52:a3:ee:cf:5a:
         df:ab:17:a4:25:f0:a8:4a:6a:c8:81:c4:73:44:6c:96:00:bf:
         ba:9f:d3:a4:dc:1f:64:c4:be:e6:36:56:88:57:91:c8:b2:b5:
         3c:4c:6c:4f:68:97:7f:ea:a2:80:2a:cd:f7:9d:70:46:36:99:
         a7:3a:3e:87:1a:7c:d3:ed:ce:56:53:01:81:e8:42:ab:5b:ef:
         00:ed:60:fa:c4:58:43:df:68:c4:dd:a3:74:cf:f5:70:9d:7a:
         7f:a6:19:f5:e1:c7:cc:af:b5:8c:2c:4c:4c:c8:05:fc:50:9e:
         77:a0:ca:d2:ac:49:03:49:2b:0f:f9:ae:8a:33:b0:62:32:af:
         2f:30:16:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:35:31 2025 by rpki-client