Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
File:                     09440a93-986f-41da-8723-7b67f81bdbce.cer (raw, json)
Hash identifier:          yv5Jfysl+OQD969vxW7geAHQer4EyRaUZKH2vWrubfw=
Subject key identifier:   48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F43285849572AD06131932DDB8552B800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Fri 28 Mar 2025 18:15:25 +0000
Certificate not after:    Wed 21 Oct 2026 20:30:29 +0000
Subordinate resources:    AS: 19901
                          AS: 36633
                          IP: 9.134.0.0/16
                          IP: 9.138.0.0/15
                          IP: 9.144.0.0/16
                          IP: 67.144.0.0/14
                          IP: 143.103.0.0/16
                          IP: 146.135.0.0/17
                          IP: 207.48.0.0 -- 207.50.127.255
                          IP: 207.50.160.0 -- 207.50.255.255
                          IP: 208.160.0.0/15
                          IP: 2601:1e00::/28
                          IP: 2607:6c40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:2a:d0:61:31:93:2d:db:85:52:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Mar 28 18:15:25 2025 GMT
            Not After : Oct 21 20:30:29 2026 GMT
        Subject: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a8:36:e6:c7:12:1b:6c:ab:2d:b8:cf:e2:81:
                    0c:a9:38:82:d0:cf:54:07:ec:a7:1f:48:89:52:4e:
                    6e:5a:88:7e:cd:69:1e:11:48:50:0a:6f:fa:16:03:
                    d9:1b:30:23:29:db:18:35:80:7d:e9:f5:ba:1d:27:
                    63:43:f5:40:af:91:dc:67:78:d5:24:a1:88:65:e0:
                    a7:93:30:86:0e:9c:22:87:9d:53:2c:b2:0c:27:f2:
                    63:c8:23:68:a8:95:69:f5:9c:2a:b1:c9:9d:c2:37:
                    33:c3:86:fc:08:e1:d6:d2:82:02:20:c5:c9:c2:fe:
                    b9:32:54:fa:df:f4:97:16:c9:e9:b3:9b:2a:f3:1d:
                    85:11:c2:34:fc:ae:5d:09:e7:b1:ee:2b:d1:a1:42:
                    ee:7e:6d:c5:01:40:37:78:35:ae:e5:73:40:d7:da:
                    ae:b6:09:65:52:83:35:bf:34:a9:7c:e8:36:5f:20:
                    fe:8e:17:c2:08:1b:3c:9a:94:49:7e:44:15:77:ae:
                    b8:66:69:7b:f7:59:9a:a1:d1:49:82:4e:cb:e3:df:
                    91:40:57:9d:9e:e3:b2:70:cf:d3:ad:66:4a:82:94:
                    90:09:56:cf:7a:4e:36:c7:db:c7:5c:eb:66:02:e6:
                    52:e6:8f:05:9f:95:a8:2c:aa:52:2c:00:40:c1:60:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.134.0.0/16
                  9.138.0.0/15
                  9.144.0.0/16
                  67.144.0.0/14
                  143.103.0.0/16
                  146.135.0.0/17
                  207.48.0.0-207.50.127.255
                  207.50.160.0-207.50.255.255
                  208.160.0.0/15
                IPv6:
                  2601:1e00::/28
                  2607:6c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19901
                  36633

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:2e:45:d3:0d:80:da:99:34:97:7f:a6:8a:d0:bd:e6:f5:
         b6:b7:e5:e2:bc:62:3b:cc:fa:4b:bb:fc:37:d5:3b:0a:9e:8e:
         26:f1:08:a0:8a:91:b6:d2:1f:d7:ab:45:d7:3e:e6:ff:95:c4:
         dd:bc:57:df:b4:70:88:8d:0f:49:32:2f:af:51:bc:22:a0:ff:
         e6:c9:2a:8b:68:2b:8d:87:cb:85:90:c2:87:9a:58:18:b1:ff:
         d6:36:0b:9a:5c:52:49:30:77:6d:4c:7b:bd:8f:a7:92:4d:af:
         7c:f9:82:b8:81:28:5d:b2:81:08:e5:9e:95:80:dc:db:c7:cc:
         6d:f1:2e:8d:2b:f4:cf:fe:ea:f4:c3:33:a3:7e:1a:49:aa:85:
         40:3b:10:8e:a9:18:05:02:97:c1:e1:3c:20:af:14:40:f2:98:
         10:91:8f:8d:14:71:5d:44:ab:47:24:21:5c:36:8c:9c:cd:2d:
         f1:dd:ea:4e:f7:8c:99:43:f7:71:4d:65:c2:98:e9:56:60:a8:
         de:64:22:7a:85:a4:3d:02:c8:fd:d2:e8:99:b7:89:06:ab:e1:
         62:27:8c:8c:d5:43:ee:6a:33:90:b5:ee:38:bc:ac:01:f9:f8:
         97:26:8d:90:f7:f0:e1:85:db:f1:20:6b:d4:99:3d:8a:b2:97:
         dc:9d:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:28:28 2025 by rpki-client