Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer
File:                     950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer (raw, json)
Hash identifier:          uu7kR4wMyFZxZ5z2z+6uEfcyZ8QkZsRHmODWxKsz6W0=
Subject key identifier:   E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858483B4870CEC5E1398CA8BE7D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 17 Dec 2024 01:45:32 +0000
Certificate not after:    Mon 22 Mar 2027 00:45:32 +0000
Subordinate resources:    AS: 400512
                          IP: 23.133.200.0/24
                          IP: 2602:fba6::/36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:48:70:ce:c5:e1:39:8c:a8:be:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec 17 01:45:32 2024 GMT
            Not After : Mar 22 00:45:32 2027 GMT
        Subject: CN=950eb4ff-cb65-4e8f-90a9-11392dacfad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:35:14:87:c7:31:a2:88:47:58:63:5e:55:
                    45:11:49:e9:62:30:a3:47:a3:ab:2b:94:58:74:ad:
                    be:8b:69:22:42:4f:c8:78:fa:ea:e2:aa:fa:46:70:
                    39:20:61:94:63:bf:2c:a7:1a:e2:ca:53:5b:27:ad:
                    55:e1:6e:b2:c1:e0:fa:2a:34:df:13:e0:9a:a2:84:
                    59:cd:d1:f5:d7:c9:3d:71:9b:c9:da:2e:2a:3b:e0:
                    89:7c:38:28:d0:3c:91:4c:c9:34:08:94:4e:3e:56:
                    68:a2:66:e3:e2:e2:56:48:9e:15:f8:c2:69:dd:25:
                    8a:fb:4a:b1:54:d1:97:7a:6c:1e:ce:b0:ad:90:9e:
                    23:02:ad:a8:3b:fc:9e:90:68:cd:7f:28:b1:6c:63:
                    c8:95:3d:8d:22:52:6c:df:f4:5e:e9:4e:4d:e1:80:
                    62:a1:22:39:bf:5e:df:fc:15:55:fb:47:50:27:3a:
                    58:59:36:d2:37:bd:1e:f8:7e:d0:86:f6:3b:9b:c4:
                    e0:0b:a0:45:64:85:a3:6b:df:bf:bb:55:fa:8e:ab:
                    a7:32:78:33:68:c3:df:db:9f:be:0f:1f:80:ce:ad:
                    3a:d2:04:8d:1a:9c:d9:3e:c2:0b:ce:bd:bf:83:ee:
                    96:a1:69:69:ef:b4:c5:81:bf:b8:a1:d1:86:03:bf:
                    c3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.200.0/24
                IPv6:
                  2602:fba6::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  400512

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:21:f3:88:2b:f5:ed:98:7f:7b:f9:a9:35:aa:b7:4c:7d:65:
         d8:f0:8e:0d:0c:e8:c7:03:81:e8:f4:a6:c7:2a:7f:16:81:59:
         61:8c:9e:cb:6f:5a:e5:7b:ff:65:ee:d2:13:e4:fb:37:40:ec:
         59:19:1d:fd:9a:68:d3:75:2b:dc:1d:ff:1c:70:8e:c0:08:f7:
         41:1a:49:64:79:19:90:75:1a:9a:a3:f4:5d:05:10:39:aa:bf:
         c0:2b:93:a9:0c:96:ce:95:f8:09:39:21:ba:0c:54:75:dc:92:
         d7:2a:5e:f6:7e:4f:75:dd:f1:72:23:39:d7:cf:58:75:f6:73:
         2f:d8:6f:50:e6:18:15:db:28:58:b8:15:58:45:4b:c8:44:44:
         c0:ec:b9:e0:cd:38:7e:e0:61:af:83:76:9b:4b:93:37:0a:78:
         cb:73:a1:64:83:ac:6b:f1:75:ef:0e:ab:a9:5c:4b:73:fe:76:
         21:ea:e1:1a:fd:24:f1:6c:e8:00:af:a0:31:a3:92:62:39:8a:
         ef:fc:8a:ff:48:45:5a:50:d9:7e:d0:46:db:fa:ed:44:0f:e5:
         c2:08:4a:9e:92:3b:33:0a:98:a8:ed:d3:37:06:b1:d5:09:17:
         c3:c4:25:a7:66:af:a6:d7:35:eb:a4:bd:5a:a0:8d:42:c0:20:
         ae:f4:e8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:27:46 2025 by rpki-client