Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
File:                     af7885f2-5b14-4ded-b2dd-7befe215db07.cer (raw, json)
Hash identifier:          PuGW2LVk0BZ/UgrVpjSV5GqDGfeU6H5nFmhwy0vGYfM=
Subject key identifier:   BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2
Certificate issuer:       /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
Certificate serial:       010D0C9F432858481BF8A5E0EDADF6C279F1CE40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Thu 05 Dec 2024 20:34:42 +0000
Certificate not after:    Wed 10 Mar 2027 20:34:42 +0000
Subordinate resources:    AS: 20067
                          IP: 23.148.8.0/24
                          IP: 2602:811:c000::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:f8:a5:e0:ed:ad:f6:c2:79:f1:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25
        Validity
            Not Before: Dec  5 20:34:42 2024 GMT
            Not After : Mar 10 20:34:42 2027 GMT
        Subject: CN=af7885f2-5b14-4ded-b2dd-7befe215db07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:65:21:4b:9b:62:7d:5d:0f:0d:18:6f:4e:
                    8e:a1:49:b6:cd:13:25:54:8c:7c:bf:cd:f1:f5:2c:
                    78:c2:9a:1a:d7:a2:e0:ca:72:11:6f:1c:b5:48:b6:
                    c3:4f:c8:57:c6:a3:4e:2f:11:dd:1a:5e:e0:01:61:
                    05:ce:82:ad:e5:b9:0d:30:7d:4e:dc:7c:cc:eb:a9:
                    e6:05:9d:8f:21:7a:8f:2f:ac:c9:c2:fa:5d:e2:23:
                    45:82:d4:44:c4:ea:64:6f:5a:79:1a:99:d8:dc:48:
                    b8:2f:bd:18:49:d4:2a:96:2b:26:62:df:77:c4:32:
                    ef:c2:2d:a1:34:f4:24:15:38:c5:88:d9:71:a5:4d:
                    64:66:c3:8e:60:41:04:c9:2f:11:60:cd:8f:86:6c:
                    f7:59:3f:6b:1f:3e:ca:37:40:eb:7b:f8:5a:59:0b:
                    03:7a:a5:b7:d3:5a:ff:57:09:02:f7:a9:52:88:eb:
                    0b:76:3f:19:72:ef:98:0e:de:e2:4a:6e:62:c7:c0:
                    a4:a0:90:22:92:ad:19:97:4e:29:7f:a3:29:56:e4:
                    28:17:a6:8d:c9:82:ef:d0:93:3e:80:f8:aa:b3:a4:
                    71:b9:ba:d1:6e:5a:59:fc:5d:6d:17:9b:ea:0d:a4:
                    1a:20:4d:48:43:ab:a9:c9:8c:d7:d3:44:fa:08:08:
                    59:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl

            X509v3 Authority Key Identifier:
                keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.8.0/24
                IPv6:
                  2602:811:c000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  20067

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b3:bf:8c:ec:03:d5:2a:42:20:ac:e6:1c:3c:03:b6:ef:81:
         e8:d3:0d:3e:13:16:29:5e:dc:ee:5b:81:6a:ba:4f:d6:74:22:
         8f:2d:98:32:42:5b:14:e2:20:4c:57:ec:1f:dd:f0:72:28:25:
         a4:1d:ec:2b:e4:63:74:24:7b:7b:b0:c9:6f:dc:a7:96:4a:49:
         2f:85:30:b1:40:04:be:a7:72:22:6e:05:2b:36:d9:a9:fc:80:
         b7:73:d8:28:7d:d4:c7:58:61:a5:36:87:ed:90:55:b4:c6:df:
         34:b1:9a:68:4e:0a:7d:fd:a4:d7:12:fa:9d:d3:17:56:ee:c3:
         0e:9c:e0:11:3c:35:02:d5:f9:e5:cf:70:7c:11:5e:aa:ec:3c:
         78:e7:e8:e6:62:8e:49:49:90:13:ac:b5:b4:aa:3c:8e:d4:0e:
         2e:27:5c:d2:c1:ae:f5:4c:8b:89:b8:22:a3:42:cd:87:9d:8b:
         2c:eb:39:e0:e5:20:2e:21:15:eb:64:49:9a:9e:a0:fe:27:e2:
         6f:3d:44:2b:f1:ca:4b:35:43:18:12:78:8c:ac:b0:f7:e1:50:
         fa:72:33:c4:7f:80:0b:52:8e:a2:ab:95:be:a5:aa:ae:a9:40:
         72:58:9a:8d:4f:fc:40:75:3b:b8:43:c8:eb:1a:fc:6a:0a:d6:
         e8:03:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:08:00 2025 by rpki-client