Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer
File:                     417c06d0-3203-44fd-b164-0aed50f5638b.cer (raw, json)
Hash identifier:          qzYshpcid/94jn5CswJG2Vb4Z8iwZQD4boeHiosXAlc=
Subject key identifier:   00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F432858490904239C15D183EC79BAAF40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 18:24:26 +0000
Certificate not after:    Tue 28 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 11728
                          IP: 69.7.79.0/24
                          IP: 2605:fc40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:04:23:9c:15:d1:83:ec:79:ba:af:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb 28 18:24:26 2025 GMT
            Not After : Jul 28 00:45:20 2026 GMT
        Subject: CN=417c06d0-3203-44fd-b164-0aed50f5638b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e8:b0:b6:ef:90:86:54:fa:f3:01:20:a4:fa:
                    2e:ef:2b:39:92:20:85:f8:98:bf:99:32:5c:95:47:
                    1e:d9:38:2d:96:84:d3:18:eb:f3:ca:b0:25:f3:e7:
                    f0:5c:35:47:ec:4c:6f:bf:0a:6a:b1:04:bd:fe:78:
                    18:f3:83:17:db:cd:79:c8:f2:d0:f6:a4:de:06:ee:
                    f4:d9:2c:b7:a0:66:27:6e:3b:f7:f4:1e:dc:26:4c:
                    d6:c8:99:ee:05:7e:cb:30:a3:71:e3:bd:11:a1:05:
                    5d:e8:2f:6f:a2:6b:b0:db:06:11:cc:75:56:bd:fb:
                    a1:58:b5:25:49:31:18:0a:1f:91:51:e1:4a:2f:47:
                    10:5c:e3:9b:4c:6c:15:51:02:76:39:cd:f0:43:e6:
                    0a:c4:2e:64:36:ef:4c:1f:56:5e:07:bc:0e:53:f4:
                    71:59:f1:d4:b0:59:d1:0e:f6:22:64:18:1e:cd:44:
                    61:2f:71:96:7a:cf:d4:7e:96:31:1f:dd:42:07:79:
                    77:db:ab:65:fd:a9:ba:a6:3f:d3:b9:fd:5e:a5:fd:
                    02:97:da:99:78:90:f7:f5:55:70:4b:4d:8d:73:bf:
                    fb:2d:b8:ba:8e:f9:7c:09:d6:69:81:9f:4a:58:bb:
                    5c:b9:94:10:88:3d:28:05:9b:cd:48:b8:bc:a2:ff:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.79.0/24
                IPv6:
                  2605:fc40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11728

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:88:32:a6:36:bc:68:f5:fd:9a:8f:66:e6:ff:55:c1:e4:05:
         73:3b:bf:d7:c0:bc:cb:53:6f:60:12:36:5d:39:f8:b0:d1:b1:
         df:5d:7c:30:ac:07:84:b0:aa:d9:3a:90:45:f4:ff:26:ca:a0:
         6d:05:3b:84:4c:b9:56:79:79:82:5f:a5:0f:52:4b:97:27:25:
         9f:95:92:4d:7b:f2:bc:e6:ec:60:a2:93:73:d1:be:91:aa:5f:
         09:ba:c2:de:b0:ee:78:50:a2:10:64:4c:62:c9:dc:c3:46:0e:
         e4:6c:3f:fc:46:24:1f:1b:d2:eb:1b:b5:57:46:31:c5:fc:4a:
         af:44:e9:46:1b:b0:ef:55:8f:f1:13:75:0c:32:2c:31:32:07:
         84:b4:7f:18:45:03:5a:d8:54:63:6f:7d:47:42:cc:f5:95:3d:
         84:08:9f:8c:3f:ee:1a:c8:78:86:c0:e3:2c:3e:d5:3e:72:8a:
         cc:c5:8b:38:72:7b:98:a0:22:0c:24:25:7e:70:24:1c:a5:a7:
         37:a6:f2:a6:e3:84:1e:08:87:4a:5a:e5:c0:de:44:70:3c:bf:
         05:b9:72:bf:c6:19:38:f5:4b:2f:a9:8e:a0:54:3b:b9:7e:ab:
         5a:4b:f8:52:af:36:06:d7:17:15:d8:51:63:d1:f0:16:e4:aa:
         48:cd:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:47 2025 by rpki-client