Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533.cer
File:                     f1a0a79d-3ae8-4653-88b5-bb348a028533.cer (raw, json)
Hash identifier:          sw7ADjyQ4fKDqo0tut50eyTNAw/j1q5rXxqKu9vdSXs=
Subject key identifier:   AE:AA:99:C5:CC:54:FE:01:0C:8E:7A:C9:90:51:03:E9:8A:08:59:D2
Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A
Certificate issuer:       /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
Certificate serial:       010D0C9F432858480E9D819C3CAD5F049BAD5100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/f1a0a79d-3ae8-4653-88b5-bb348a028533.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 01 Dec 2024 01:45:33 +0000
Certificate not after:    Sat 06 Mar 2027 01:45:33 +0000
Subordinate resources:    AS: 7963
                          IP: 199.89.192.0/23
                          IP: 204.152.114.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:9d:81:9c:3c:ad:5f:04:9b:ad:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b
        Validity
            Not Before: Dec  1 01:45:33 2024 GMT
            Not After : Mar  6 01:45:33 2027 GMT
        Subject: CN=f1a0a79d-3ae8-4653-88b5-bb348a028533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:4a:a7:f8:92:9d:3f:66:ed:77:82:4c:b6:
                    ab:17:74:87:b5:6d:eb:54:52:ea:8f:20:e6:64:69:
                    5a:2b:a9:5a:51:af:7c:8a:aa:ed:86:66:40:bf:a6:
                    4c:f0:42:5e:9d:f0:ef:79:7d:17:a1:a6:ee:39:07:
                    24:29:86:13:a4:96:ed:1c:45:45:f5:62:af:53:eb:
                    0f:9d:5c:9e:ba:9f:b5:42:d0:1f:7e:45:34:3d:40:
                    19:4e:c6:83:a4:de:af:18:69:fd:15:62:8d:17:0d:
                    77:4e:be:c1:af:ad:ac:13:dd:f7:a8:ba:c7:44:d3:
                    1d:b8:8c:27:d8:37:6d:03:84:ac:fb:ad:c8:1c:ff:
                    99:3a:fa:57:ca:50:0d:b3:12:4e:a8:61:84:94:75:
                    5b:8c:ee:74:a8:8a:f6:3e:fe:55:d4:09:f5:3f:d3:
                    02:4d:d1:2e:bc:83:66:e6:21:8b:ac:33:a7:f3:e5:
                    da:c0:df:46:9c:d5:ca:9f:8e:40:7d:2e:3b:92:10:
                    d9:24:f4:da:dd:da:86:38:8b:dc:d2:59:21:d9:e8:
                    86:c4:5f:8b:42:9d:30:59:a0:7a:a7:51:f1:30:78:
                    67:68:4c:1b:32:69:bb:78:3d:19:bd:d3:fb:f8:be:
                    1d:c2:97:0d:6e:79:72:ed:01:bf:da:b5:ef:5e:e8:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AA:99:C5:CC:54:FE:01:0C:8E:7A:C9:90:51:03:E9:8A:08:59:D2
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f1a0a79d-3ae8-4653-88b5-bb348a028533/f1a0a79d-3ae8-4653-88b5-bb348a028533.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl

            X509v3 Authority Key Identifier:
                keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.89.192.0/23
                  204.152.114.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7963

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:9f:b3:7d:85:0c:51:26:37:6d:cf:09:ae:4a:a9:d3:44:aa:
         76:5e:81:33:31:6f:60:8f:62:73:af:99:47:94:82:95:89:15:
         c3:f6:14:ef:3b:3a:06:0b:be:d6:9a:6f:ba:d9:f2:a3:c6:be:
         09:2a:3a:24:5e:f3:5d:98:d7:58:b7:95:45:56:c0:14:53:56:
         cf:69:24:6f:3d:07:9d:0a:71:59:5b:e2:fb:94:c0:d5:3f:e6:
         3b:ff:aa:46:a7:45:2e:45:86:5c:c6:38:2b:8c:e5:21:e7:7f:
         bf:3f:b9:66:5e:b1:03:3c:c1:ef:cd:b9:66:6e:b4:73:de:6c:
         ab:fb:e4:82:2b:52:99:ea:71:4a:a9:d6:a2:83:cf:bc:96:98:
         f6:87:79:dc:13:83:ba:28:dc:4c:08:52:b8:1d:98:ef:a6:89:
         65:98:59:05:a2:30:04:33:cb:e8:d6:b5:0e:5b:2b:64:19:d1:
         3c:e9:e8:93:20:5b:90:28:ab:c8:db:66:fe:c0:06:d8:16:7c:
         aa:be:5b:68:6f:ae:a6:55:be:84:ca:11:03:6e:02:a3:9c:1b:
         ab:bd:33:c9:17:1a:5b:35:07:2e:ff:09:cd:7a:61:ba:99:4e:
         01:19:71:c0:5a:98:2d:40:cf:72:7b:44:05:d3:d7:c1:e0:75:
         95:73:3c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:46:33 2025 by rpki-client