Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5.cer
File:                     06ed120e-7778-4219-8811-97d5203ce0c5.cer (raw, json)
Hash identifier:          blGeRN/8zSqmLgob9OKyjHCbj/10Hh0kq/Chxj+pLLE=
Subject key identifier:   63:56:AC:A5:8C:5C:E1:EB:3A:E8:8D:45:9F:84:C8:15:66:15:02:AB
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285849123F1FBD97614D4998A24100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/06ed120e-7778-4219-8811-97d5203ce0c5.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 04 Mar 2025 01:45:33 +0000
Certificate not after:    Mon 07 Jun 2027 00:45:33 +0000
Subordinate resources:    AS: 54043
                          IP: 23.166.104.0/24
                          IP: 2607:7d40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:3f:1f:bd:97:61:4d:49:98:a2:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Mar  4 01:45:33 2025 GMT
            Not After : Jun  7 00:45:33 2027 GMT
        Subject: CN=06ed120e-7778-4219-8811-97d5203ce0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:e3:1b:71:25:16:ca:0e:2c:08:26:d7:da:
                    3d:18:48:c0:ea:43:55:25:fc:58:56:6c:73:52:bf:
                    38:10:0f:0a:a8:40:39:fe:37:97:1f:bd:b2:05:7d:
                    b7:d8:c8:a6:be:66:e7:3f:6f:52:f0:5b:de:42:5f:
                    9c:3a:e5:2e:f5:80:47:ba:3f:d7:51:d4:3b:b0:45:
                    a4:6e:57:9c:e0:ee:20:a6:b0:c4:50:cc:37:d1:0b:
                    c8:1a:19:3d:be:17:92:d7:64:68:10:21:10:ec:36:
                    63:56:1a:34:e9:b9:e6:bd:9b:04:77:30:53:8d:fb:
                    44:88:b2:cc:81:eb:c4:97:bf:df:ea:d1:51:29:d0:
                    4d:12:1b:68:5c:04:b2:10:96:29:76:a2:21:c5:34:
                    d0:6c:ec:26:98:67:52:c7:03:eb:3e:0b:3a:67:b7:
                    1d:a1:1e:5b:19:c1:e7:81:2d:4e:55:ed:21:e5:41:
                    14:a1:d6:cf:d4:e3:89:9a:f4:07:58:05:89:28:02:
                    15:2a:1f:de:8b:61:51:de:c1:6f:7f:04:b1:d2:d8:
                    79:5a:f3:3a:aa:14:a1:83:de:8a:f2:e0:03:37:9a:
                    fe:20:81:e8:e3:c1:13:2e:15:e0:e4:b1:5d:2c:a1:
                    af:f1:84:7a:76:d5:7e:2c:e3:71:45:b2:18:0c:63:
                    0c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:56:AC:A5:8C:5C:E1:EB:3A:E8:8D:45:9F:84:C8:15:66:15:02:AB
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/06ed120e-7778-4219-8811-97d5203ce0c5.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.104.0/24
                IPv6:
                  2607:7d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  54043

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:01:ee:dd:70:4b:2f:70:6a:a3:53:54:e2:ca:3f:30:38:93:
         64:17:0a:78:fc:3f:1b:38:56:e6:18:c9:dd:a3:df:e8:42:28:
         13:4f:10:55:ff:61:22:89:1f:11:f0:7b:89:c7:08:b3:9a:78:
         13:8e:fb:49:25:43:0a:be:b8:0d:48:b7:05:50:e7:b0:28:98:
         cc:55:58:a9:aa:bd:ff:cc:57:eb:9d:40:ff:05:32:e0:46:25:
         c1:44:1c:a2:84:cb:68:27:81:60:f5:02:52:7f:91:cf:58:d3:
         65:27:4d:aa:44:eb:c9:e8:91:57:6e:a7:08:5b:3e:13:29:3b:
         29:03:91:2b:e7:25:77:22:49:66:e2:02:76:48:6c:7c:77:58:
         3c:4a:a8:e2:76:93:cc:b5:c5:52:18:b1:88:1b:27:b8:03:ec:
         71:b2:e6:b2:0e:7e:d6:08:34:ae:0a:9f:8e:17:6b:7e:0f:1d:
         a7:51:81:a2:37:a3:fb:37:dd:e7:68:f7:26:a0:e6:9b:dd:66:
         a1:01:8e:ed:2d:85:42:18:74:9e:a0:a3:44:70:da:62:86:fe:
         3f:7e:b8:da:5f:e6:38:16:ed:26:dd:fe:dd:82:c6:e5:aa:2e:
         cf:1c:58:13:d0:78:7e:8f:90:bf:f1:d7:7c:df:e7:dc:ad:63:
         d0:8a:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:55:10 2025 by rpki-client