Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
File:                     3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer (raw, json)
Hash identifier:          tAnFUCpIbA4Hhjsv/zre5oR7xgHGZCqQvfYrTannE9c=
Subject key identifier:   1E:1F:F9:04:87:DB:76:48:3A:3D:D0:EF:C1:36:6D:20:B0:3C:42:4B
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285849017F03B2365D90297DB7A160
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 26 Feb 2025 01:45:33 +0000
Certificate not after:    Tue 01 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 30407
                          IP: 98.142.240.0/20
                          IP: 104.234.0.0/16
                          IP: 206.53.48.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:01:7f:03:b2:36:5d:90:29:7d:b7:a1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Feb 26 01:45:33 2025 GMT
            Not After : Jun  1 00:45:33 2027 GMT
        Subject: CN=3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e8:4a:d5:1c:64:df:ee:63:a5:23:9a:e0:7f:
                    43:84:6b:27:82:4c:53:e5:20:99:a3:78:59:f9:9c:
                    ef:d0:ce:b2:7d:c7:07:ab:bd:19:59:5c:d7:cc:04:
                    ad:27:9b:d1:20:46:5c:89:2c:a3:2a:0d:e5:dd:ae:
                    a4:20:3b:a1:ab:80:c1:f6:c2:29:c1:33:ec:a5:2d:
                    b9:fd:55:b7:62:71:af:74:71:25:5d:f6:ca:b1:49:
                    e5:f4:a1:e7:15:2b:65:a5:4e:9d:e5:9e:c7:d8:53:
                    88:e7:b7:0a:7e:c7:90:72:39:a5:52:99:53:1a:a5:
                    a7:66:69:e3:17:b8:0b:e3:a9:17:c4:7a:2f:c1:5e:
                    d3:6c:4f:fa:22:59:de:05:1c:91:de:f6:9a:dc:65:
                    88:81:94:8b:44:1e:c1:40:18:25:d9:70:b9:00:ae:
                    35:fb:e5:d0:9c:f5:05:09:74:86:0d:77:1e:c0:a6:
                    19:d3:c5:57:34:ab:6c:ee:66:c4:16:6e:46:7e:d0:
                    49:35:ed:4d:19:e7:b1:57:c2:9d:0e:33:3a:6a:f9:
                    12:af:92:a2:5a:62:6e:52:4f:6a:7b:e1:59:bb:26:
                    a0:bf:ee:d1:dc:bd:cc:72:5d:03:38:38:47:6d:24:
                    47:a2:83:f3:2b:7a:98:af:6b:7d:36:f3:cf:bb:bc:
                    30:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1F:F9:04:87:DB:76:48:3A:3D:D0:EF:C1:36:6D:20:B0:3C:42:4B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.240.0/20
                  104.234.0.0/16
                  206.53.48.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  30407

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:cd:01:0b:8a:df:e5:ed:1b:39:4a:14:ed:a5:87:eb:2e:0b:
         09:a2:62:dd:d8:77:60:1c:51:19:e7:e6:8a:d2:5d:30:ab:e9:
         bc:a3:81:da:21:73:d1:80:dd:8a:c8:49:ac:1d:30:1d:b2:dd:
         1b:44:08:ae:20:51:17:a4:6a:2b:7c:55:66:48:5d:d2:df:ba:
         40:13:e8:f7:0a:40:a5:18:0c:50:a9:a5:89:e0:c9:06:ac:08:
         b0:cc:8c:dd:d2:7a:2d:8b:37:b4:2b:80:f7:7b:ef:14:dc:03:
         1f:26:18:31:d9:68:24:04:c4:ea:c9:e9:d2:39:7f:39:32:a8:
         59:37:78:77:43:80:6c:0f:0a:de:a2:24:33:7b:f1:e6:f6:91:
         d1:1d:7a:5a:92:1a:e4:99:83:53:75:24:f7:7e:42:80:28:49:
         34:da:1b:4b:89:15:b9:7d:ad:43:67:6d:30:76:96:82:69:cb:
         9c:dd:12:06:3d:fb:b8:73:e3:29:8d:42:e8:a9:e1:3b:cd:62:
         9c:42:1b:3f:20:c5:71:14:b7:02:5f:77:be:dc:78:52:8b:c4:
         e8:4a:7c:ef:92:72:4a:ed:d1:fc:08:66:62:8d:b6:b8:86:47:
         f4:6e:ee:46:69:98:d4:16:6a:54:f6:3b:00:03:a1:f8:18:dc:
         5d:7b:8f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:03:27 2025 by rpki-client