Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer
File:                     06f438d2-4717-42c0-bca5-9b3a2cdd09ed.cer (raw, json)
Hash identifier:          aLpXU6fH4c7tt85soXKx4AIXRjWBHBJf6sWFcgeqxpE=
Subject key identifier:   06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F4328584812CD84AD3C89E54E8F545A20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 02 Dec 2024 13:45:31 +0000
Certificate not after:    Sun 07 Mar 2027 13:45:31 +0000
Subordinate resources:    AS: 46109
                          IP: 23.156.248.0/23
                          IP: 2602:fa64::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:cd:84:ad:3c:89:e5:4e:8f:54:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec  2 13:45:31 2024 GMT
            Not After : Mar  7 13:45:31 2027 GMT
        Subject: CN=06f438d2-4717-42c0-bca5-9b3a2cdd09ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:ce:e3:01:13:27:c8:d1:3c:24:46:0a:f0:
                    49:66:3d:c4:f1:b0:8a:bb:71:5a:10:e9:06:9f:69:
                    de:ce:db:0b:d7:35:d2:3a:e3:a8:a5:b2:77:30:e6:
                    df:a4:41:59:be:15:bf:8d:5b:b5:7c:87:8e:44:49:
                    79:fc:30:22:96:01:a3:4e:0f:c8:c9:54:b6:88:78:
                    85:03:d5:d7:bc:7a:c0:14:c9:65:33:82:5c:03:59:
                    39:ac:a7:5b:80:75:ee:bc:05:95:5d:e6:01:85:6f:
                    d8:56:81:93:4c:6b:f0:0d:1a:ee:ea:bf:a3:df:90:
                    ad:d1:f2:23:6f:e6:a5:53:bc:3a:92:b0:3e:b5:29:
                    53:c5:69:bc:ef:7f:20:c4:74:5c:b2:be:38:01:4a:
                    f9:d5:c2:92:06:cb:87:2f:e1:5f:35:e7:98:2b:fe:
                    e8:32:09:4e:66:fc:6e:8b:f4:8f:f3:2e:e2:c4:b1:
                    1f:e0:03:5d:fa:0c:c1:cb:44:14:24:ec:36:73:13:
                    4d:5a:25:5d:4b:3a:8f:db:a0:7f:19:d8:45:0e:0a:
                    37:31:d3:b0:f9:24:d9:2c:ad:b1:82:0a:18:bb:10:
                    90:68:97:59:74:e6:b5:54:d9:26:29:a6:e0:ba:8c:
                    08:7e:04:c1:08:73:eb:66:1c:6a:09:d9:fb:b5:cc:
                    75:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AE:36:9B:A2:22:0C:57:05:36:3F:A0:BD:E0:E5:FD:F3:F0:68:DA
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/06f438d2-4717-42c0-bca5-9b3a2cdd09ed/06f438d2-4717-42c0-bca5-9b3a2cdd09ed.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.248.0/23
                IPv6:
                  2602:fa64::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  46109

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:82:63:17:35:a7:4f:a1:db:2e:96:58:58:15:f8:1f:80:09:
         d0:8b:2d:0f:33:bb:13:23:b6:0b:89:00:12:c5:c1:99:62:a0:
         52:48:5c:f5:65:4f:03:29:1a:a8:19:f1:0f:76:70:0d:50:33:
         71:e1:ea:26:26:5e:35:cf:74:13:11:de:0e:53:ed:b9:06:46:
         c0:d1:c0:2e:aa:03:b2:03:30:21:aa:f2:0c:15:87:9a:09:e6:
         f0:2d:70:77:95:90:b0:25:f5:c7:2d:66:b7:09:99:c9:d7:3d:
         26:b7:4f:85:14:3b:25:df:5f:ab:b3:41:28:5d:ad:b3:7d:e7:
         15:45:48:66:5b:3a:47:10:87:b3:b2:9b:7d:5f:86:f4:6a:31:
         26:54:75:b7:f6:01:01:7f:52:6b:e0:a7:93:4d:fa:3a:25:73:
         5e:d4:2c:0f:ee:27:43:a0:dc:7a:ac:0d:bd:b1:e3:af:fc:1f:
         dc:86:45:29:7b:67:67:55:58:10:ae:5a:40:79:4a:6b:d4:c5:
         dd:9d:c6:4f:11:bd:72:e3:c8:74:86:66:e5:a3:ef:67:9d:5d:
         12:ca:b8:d6:da:51:03:12:4e:9b:d6:bb:2c:46:a1:95:d8:9d:
         b4:25:3c:f4:f1:16:bd:72:c8:52:b5:7e:e8:97:8d:bc:b7:8f:
         10:94:41:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:49:27 2025 by rpki-client