Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b9431be-8a17-4a88-8bf9-fc8ecce32eba.cer
File:                     2b9431be-8a17-4a88-8bf9-fc8ecce32eba.cer (raw, json)
Hash identifier:          isiZInHy+ca2nr0gx+Kx+62d9PNiOK8bc5tYdRqIIA0=
Subject key identifier:   B4:3A:56:4F:95:F4:32:94:D4:5B:91:01:2F:FA:FD:FC:D0:2E:EE:68
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F43285842E7A143AA2A485739EC51DBF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b9431be-8a17-4a88-8bf9-fc8ecce32eba/2b9431be-8a17-4a88-8bf9-fc8ecce32eba.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b9431be-8a17-4a88-8bf9-fc8ecce32eba/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 16 Aug 2023 14:41:55 +0000
Certificate not after:    Tue 18 Nov 2025 15:41:55 +0000
Subordinate resources:    AS: 26340
                          AS: 399970
                          IP: 149.112.152.0/22
                          IP: 205.196.98.0/24
                          IP: 2602:fc3b::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e7:a1:43:aa:2a:48:57:39:ec:51:db:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Aug 16 14:41:55 2023 GMT
            Not After : Nov 18 15:41:55 2025 GMT
        Subject: CN=2b9431be-8a17-4a88-8bf9-fc8ecce32eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:a9:53:f9:ed:f9:36:87:2d:c0:dc:be:4c:
                    f2:06:48:17:4e:13:1c:d5:a3:8e:28:19:96:96:31:
                    97:4d:4b:44:28:b6:69:93:b5:70:9e:18:08:30:3c:
                    27:99:3b:42:8c:6a:3e:ed:c3:0c:c7:09:c0:9d:48:
                    a7:61:87:79:8a:82:1d:f9:b1:f3:54:3e:0e:67:56:
                    8f:96:71:33:eb:82:eb:7d:5f:39:1d:fc:d7:01:49:
                    98:c7:7d:45:0e:2c:09:cb:81:b2:46:07:e0:ef:0d:
                    a9:96:bf:48:8b:ff:c8:7a:f0:31:e9:b7:79:ee:fd:
                    e5:b9:78:5a:da:44:91:3d:57:07:80:2c:55:bc:14:
                    e2:e7:cb:55:99:9d:a5:67:34:38:1e:e7:e7:0c:cd:
                    e2:54:12:d5:58:31:25:4f:21:1e:5e:62:5e:89:56:
                    d3:c1:cc:2b:3b:5b:62:bd:e8:89:c9:a8:58:36:98:
                    fa:25:b3:9a:85:ce:44:9b:5b:d2:06:12:40:09:80:
                    18:18:fd:0e:48:20:e2:1b:1f:37:41:61:be:34:51:
                    59:5c:4c:3c:45:49:bd:72:da:c5:49:46:bc:25:c3:
                    08:e5:68:85:5e:83:21:6d:75:d8:7a:8a:45:32:ca:
                    d1:96:84:23:26:61:c9:a7:b8:78:0e:55:e6:0b:e1:
                    c4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3A:56:4F:95:F4:32:94:D4:5B:91:01:2F:FA:FD:FC:D0:2E:EE:68
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b9431be-8a17-4a88-8bf9-fc8ecce32eba/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b9431be-8a17-4a88-8bf9-fc8ecce32eba/2b9431be-8a17-4a88-8bf9-fc8ecce32eba.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22
                  205.196.98.0/24
                IPv6:
                  2602:fc3b::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26340
                  399970

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:93:12:d1:18:50:c9:04:29:69:f8:7b:e0:4a:1b:b9:c1:dd:
         49:6d:19:f0:3c:e1:11:47:0a:fa:1d:c9:bc:3a:ea:1d:2e:3a:
         95:b3:e5:e1:6d:f5:41:b1:10:69:86:8c:9b:b3:34:52:ac:62:
         6f:57:13:b8:e2:5e:b0:5e:aa:a9:53:6d:c5:d5:2b:d8:3b:8a:
         26:cb:4d:22:ad:35:8b:66:1c:b7:ec:d6:b6:82:c4:fa:bd:ac:
         7a:7b:59:fb:aa:28:ad:21:96:97:cf:09:25:99:03:dc:35:91:
         b2:75:fa:04:c5:00:48:00:45:30:3c:4c:8a:46:07:43:c6:2a:
         35:ce:8d:9d:88:43:6a:39:78:90:b9:6f:0e:27:49:8a:6f:1c:
         a1:80:25:2a:89:e5:1b:98:d6:9c:ae:fa:21:80:8a:5d:ce:09:
         c3:22:24:e7:ff:cd:3b:60:6f:af:da:1e:4f:05:65:55:ed:d2:
         89:93:95:b3:2a:38:29:e7:e1:fb:5a:bd:43:61:26:37:d0:e2:
         42:97:d0:91:6f:4b:4c:0e:7a:03:bf:55:93:fc:16:62:bb:3f:
         44:74:8c:0a:b4:4e:e6:d5:32:45:9e:fa:19:0f:72:36:5d:e4:
         5c:8e:aa:9b:0a:fe:5a:b9:8d:99:a6:a4:04:97:4f:19:60:d2:
         8f:5f:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:16:16 2025 by rpki-client