Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer
File:                     b3f53674-93ef-439e-9019-e6308b1c1738.cer (raw, json)
Hash identifier:          sOeIU0Sww6ewi9MGHKGmkJxI/Z4+XMsuBQTWrNmFORY=
Subject key identifier:   16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6
Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7
Certificate issuer:       /CN=521eb33f-9672-4cd9-acce-137227e971ac
Certificate serial:       010D0C9F4328584909071DA03CBC4E360638F400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Feb 2025 18:30:26 +0000
Certificate not after:    Sun 05 Jul 2026 00:45:20 +0000
Subordinate resources:    AS: 397156
                          IP: 141.193.239.0/24
                          IP: 148.59.73.0/24
                          IP: 216.116.134.0/24
                          IP: 2602:fe24::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:09:07:1d:a0:3c:bc:4e:36:06:38:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac
        Validity
            Not Before: Feb 28 18:30:26 2025 GMT
            Not After : Jul  5 00:45:20 2026 GMT
        Subject: CN=b3f53674-93ef-439e-9019-e6308b1c1738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:6e:8e:78:34:0a:ee:0f:32:73:3b:a9:cc:
                    78:a4:77:77:e3:be:47:8a:32:34:df:0a:37:80:d8:
                    b9:31:e1:99:a5:13:40:ef:ea:71:b7:dc:ef:a8:f3:
                    69:5b:24:f0:5b:8c:2f:82:ba:6b:a3:55:49:9b:a6:
                    f8:d8:09:b9:0a:60:a5:25:61:93:dc:f1:0a:9d:c1:
                    ae:43:7c:cd:b9:d2:79:f9:ec:78:5a:b9:13:a0:00:
                    a3:c8:05:29:d0:a6:15:92:78:ff:6f:48:4b:32:7f:
                    b8:8b:25:43:85:7d:1f:df:32:da:0a:35:46:83:ed:
                    31:f9:cc:d3:4a:43:b2:31:20:14:7d:52:3a:c3:af:
                    30:65:ca:fa:e2:2f:8f:7d:57:92:f0:78:93:57:01:
                    81:6a:07:ce:73:8c:df:00:32:0d:41:1b:72:9f:47:
                    c2:a5:df:e0:51:1d:e7:0b:65:81:dd:b5:9e:ed:00:
                    3d:ae:88:33:95:37:b7:eb:8f:ac:53:e8:27:3e:84:
                    34:53:92:db:84:6d:13:c6:b7:8c:e4:36:61:85:6b:
                    37:98:0b:57:82:64:b9:0e:4b:c1:b0:54:0a:95:bc:
                    5b:74:55:94:a7:aa:86:59:3f:2a:97:82:ad:e3:fd:
                    7e:4a:88:2a:d0:a4:2e:ce:23:5a:2a:41:cf:1d:67:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl

            X509v3 Authority Key Identifier:
                keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.239.0/24
                  148.59.73.0/24
                  216.116.134.0/24
                IPv6:
                  2602:fe24::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  397156

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a3:65:0d:ae:44:f5:e4:d1:9a:28:5c:aa:01:b8:f1:2a:88:
         35:ce:39:6d:45:44:bd:a5:94:65:ac:9c:f8:31:f1:c5:d9:9c:
         7f:46:eb:06:a9:bd:06:71:14:f4:e2:d3:e7:63:41:24:ca:22:
         62:2f:f1:ba:e9:b6:73:89:24:80:73:e3:14:8a:b4:92:22:b4:
         48:cc:53:f9:0b:16:eb:40:33:20:d5:18:a0:ad:5d:c8:d6:44:
         56:77:1f:fe:36:bb:e9:bc:f6:65:90:19:89:0d:69:28:b4:f1:
         32:03:78:69:6d:86:4c:0e:7e:96:51:c0:bc:81:13:e5:0b:f3:
         25:bb:bd:98:d2:16:bd:8e:75:8a:f0:2d:1c:1d:d5:51:21:af:
         f4:8d:b3:a2:76:b6:4b:de:50:cd:1b:ad:8e:ed:5a:9b:6c:57:
         6b:c0:ba:5f:15:2d:ae:cd:de:b5:d6:36:5b:82:a5:8d:fd:78:
         3f:76:00:4f:b3:9b:a9:47:ff:35:72:6b:2c:2d:9b:1d:34:2a:
         4b:50:35:d1:5a:84:f9:ff:e7:dd:70:13:b5:90:fc:0d:d3:d6:
         03:67:58:c9:61:67:35:68:b8:7c:f7:72:17:40:c0:ef:4e:12:
         e6:10:48:96:b8:6a:19:fb:9f:e9:a3:6d:cb:63:b0:22:98:e1:
         70:8a:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:24:57 2025 by rpki-client