Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer
File:                     e8abcb36-7d75-4654-a098-d032ddf03d8a.cer (raw, json)
Hash identifier:          gXRxJ3huWdh2/Yioe9vk9UaB2ecxyIn84FyviPUHK/Y=
Subject key identifier:   E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285848D4D4111BC737B3A416872D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 10 Feb 2025 01:45:32 +0000
Certificate not after:    Sun 16 May 2027 00:45:32 +0000
Subordinate resources:    IP: 161.199.250.0/23
                          IP: 174.34.225.0/24
                          IP: 192.84.231.0/24
                          IP: 216.120.142.0/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d4:d4:11:1b:c7:37:b3:a4:16:87:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Feb 10 01:45:32 2025 GMT
            Not After : May 16 00:45:32 2027 GMT
        Subject: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:05:24:36:a7:61:c7:3d:a6:6c:fd:ed:13:f5:
                    72:85:76:ac:e4:15:4b:d6:0d:d3:24:ac:b0:e7:ca:
                    53:38:b7:3a:bf:c2:50:09:00:41:fa:94:cb:e0:f7:
                    a9:b3:ae:8f:68:da:54:55:fc:34:af:28:29:2e:4f:
                    a9:e7:e7:4e:c4:7c:ae:47:6a:de:ae:3e:41:02:22:
                    89:5a:ff:cd:8a:d6:79:50:a4:d4:36:c0:4c:91:de:
                    eb:1e:0a:5d:11:3c:d2:b3:71:da:76:58:49:5b:e2:
                    5a:14:96:18:bd:f9:76:2f:ee:c3:97:f2:20:1d:cc:
                    c0:93:3c:83:ca:bf:f5:c6:4d:e5:9e:f8:8a:43:54:
                    eb:e1:08:b5:b1:65:a4:1d:7d:01:c0:d2:f0:45:7d:
                    f8:ed:17:fb:0f:79:24:e2:24:1a:a2:c8:c0:9b:c3:
                    c7:d5:10:49:4a:98:c9:0f:dc:b9:af:9e:f0:e9:18:
                    40:f7:9f:f5:09:eb:32:cc:bb:a2:99:5b:b3:ce:d7:
                    1f:ba:53:9b:9c:1f:1a:90:db:67:98:07:a0:db:24:
                    37:a1:be:81:d4:a1:1e:c7:fc:52:1d:ff:05:2a:7a:
                    4e:d1:1b:47:22:a2:9c:c2:fb:f1:3d:83:17:7a:7e:
                    d6:48:ca:37:c2:92:e1:82:d4:47:29:e6:a6:62:d4:
                    fb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.250.0/23
                  174.34.225.0/24
                  192.84.231.0/24
                  216.120.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f6:ab:f7:4e:e8:9a:35:60:ed:23:6b:74:ea:a2:08:92:c3:
         23:95:af:b7:e7:fd:e4:20:d8:af:37:f8:53:c6:e5:16:c5:a3:
         04:d4:fa:c2:94:d9:bd:7d:a9:07:25:2d:61:48:46:7c:82:9e:
         ed:7c:ff:9b:35:af:31:fc:94:b8:8c:3d:e3:d5:47:a5:0b:61:
         87:d1:91:66:9c:65:c0:ab:e4:1f:0d:5e:5e:fd:e9:6a:a4:b6:
         ab:0c:7e:ee:b0:59:67:51:97:e8:f0:01:1b:f2:5d:a6:5a:83:
         1e:cb:71:3b:e3:2e:04:ba:d7:b3:2c:b7:9b:ef:14:e5:10:fc:
         02:de:34:1b:ad:68:7e:cc:f1:52:50:97:86:83:a3:63:a1:12:
         a4:e8:f6:5a:43:0f:a3:5e:61:14:ed:8b:99:83:58:9f:48:0e:
         ee:38:54:32:a3:36:ed:46:b0:72:5f:8e:61:0c:e7:2a:f0:bb:
         bf:4c:64:f2:97:5b:f6:60:c2:a2:12:a8:59:88:77:7f:61:78:
         1f:aa:54:93:ab:d0:c8:1f:ca:c1:97:8f:ce:05:eb:cf:e5:ea:
         68:7c:1b:fa:65:e9:44:24:f9:6f:8e:cb:6a:52:87:01:b3:f9:
         9c:b0:07:68:03:60:c3:d0:e3:ca:9a:b7:d5:3a:b1:52:cb:1f:
         77:10:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:04 2025 by rpki-client