Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer
File:                     7ea21a7b-596c-45f8-899e-6879815f26b1.cer (raw, json)
Hash identifier:          kyjLuuJagPOXWRVwlou+cVPjw2bZxGG8Z0Xj7wHODoM=
Subject key identifier:   58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584843A87FFE5ED46E4C79254700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 20 Dec 2024 01:45:33 +0000
Certificate not after:    Thu 25 Mar 2027 00:45:33 +0000
Subordinate resources:    IP: 139.64.200.0/24
                          IP: 2620:85:a000::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:a8:7f:fe:5e:d4:6e:4c:79:25:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Dec 20 01:45:33 2024 GMT
            Not After : Mar 25 00:45:33 2027 GMT
        Subject: CN=7ea21a7b-596c-45f8-899e-6879815f26b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:9b:ee:aa:c6:20:3d:25:37:b1:8e:39:d6:
                    d1:b0:60:91:f0:bb:9f:c3:d5:8f:ca:c2:f1:b2:29:
                    e0:90:d4:81:b3:1e:2d:11:1d:60:18:a0:8a:e1:be:
                    0a:bc:18:96:f0:6f:61:3b:3d:98:69:ae:ce:2a:eb:
                    e4:88:f0:24:fb:ab:5d:1c:53:77:17:ef:54:58:75:
                    93:11:55:22:49:63:12:01:a3:03:7c:c8:fe:b1:63:
                    d4:b0:15:bf:c8:ad:cb:66:61:22:7f:ba:c0:cc:1e:
                    5e:33:eb:56:bf:7c:18:59:a1:3d:6b:f0:48:14:2d:
                    9c:b2:d4:ed:64:7d:dd:9c:44:9b:21:8e:17:cc:93:
                    51:3b:ba:c8:8f:df:e2:88:c8:68:54:28:8f:b7:3b:
                    3d:35:d2:ed:14:7a:ef:d4:06:89:78:3d:27:67:91:
                    38:70:07:9e:ef:5b:89:61:73:a9:89:23:0a:06:cc:
                    41:2f:fa:59:0e:e5:02:1d:c7:20:8f:cb:9c:9f:bf:
                    b0:6d:50:3b:ce:02:8b:02:1c:e3:21:50:d4:b1:e3:
                    3e:6d:7f:44:c9:8b:26:d0:24:b6:33:24:01:ea:25:
                    28:eb:a2:c8:81:d9:e5:01:76:a6:dd:11:79:c9:d6:
                    5e:70:df:67:bf:99:93:3d:a0:93:ca:8f:6f:2a:18:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.200.0/24
                IPv6:
                  2620:85:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:83:82:0e:19:b9:21:2d:40:de:d8:54:0a:9e:a4:e3:2c:82:
         69:f1:f9:a4:a6:be:c6:42:87:60:f4:85:f6:3e:d5:14:40:78:
         1b:78:54:d9:cc:ae:a4:df:e6:05:e6:6f:5a:5d:59:e8:97:45:
         9e:db:47:cb:4f:46:7f:92:11:89:47:f8:dc:b8:6f:dd:85:80:
         67:e4:ca:8e:79:98:06:64:d3:9e:6c:25:a2:f0:30:bc:d0:74:
         ee:17:c6:a8:30:f9:e8:2b:5e:90:33:71:0e:cf:c5:0a:80:cc:
         0e:3c:4e:15:c3:9d:cc:76:2a:e5:b1:6a:67:2c:d9:7b:06:46:
         12:f9:f6:9b:1d:38:c7:da:cf:d1:6f:3d:8a:bf:4b:6c:3b:09:
         d7:4a:98:07:d1:a2:98:d5:48:ea:0a:09:50:ba:9e:51:9a:7d:
         3b:49:e8:eb:48:fc:14:35:3a:26:22:66:70:7e:47:96:6c:b1:
         a6:8b:d2:62:91:43:95:27:3c:dc:73:c1:a3:f1:55:cf:a4:13:
         e2:fa:44:ea:ad:ec:7b:6c:a3:65:80:10:0c:17:fe:71:83:67:
         3b:de:23:00:54:0d:fb:ea:d8:02:57:f9:a8:64:3a:b9:e9:b0:
         0c:68:8c:4b:99:31:d1:09:75:ab:dc:38:4a:6d:b0:58:a3:e9:
         3b:90:96:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:31:38 2025 by rpki-client