Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer
File:                     65b75871-7632-4a71-a4a9-41f38235fc29.cer (raw, json)
Hash identifier:          v2kqBgur0JnblnjnObeGSKJrNYTLPCF5Y46262pcHUk=
Subject key identifier:   C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848B353DD14D7FFEF6CFEDA3F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Wed 29 Jan 2025 01:45:33 +0000
Certificate not after:    Tue 04 May 2027 00:45:33 +0000
Subordinate resources:    IP: 174.138.224.0/19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:53:dd:14:d7:ff:ef:6c:fe:da:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 29 01:45:33 2025 GMT
            Not After : May  4 00:45:33 2027 GMT
        Subject: CN=65b75871-7632-4a71-a4a9-41f38235fc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:e4:50:2d:a1:5f:39:db:f9:1c:70:02:13:
                    b8:be:8b:8d:e9:33:15:f2:b7:e0:cb:a1:39:a3:bd:
                    51:09:08:88:da:b3:5a:25:c5:b3:6e:43:77:10:ea:
                    83:f2:7f:31:1c:a8:85:b7:5b:45:41:28:5e:fc:4c:
                    df:db:85:40:25:83:25:8d:55:04:ed:96:21:64:34:
                    39:4c:9b:05:eb:55:17:6a:35:90:ad:9d:3b:ab:8f:
                    a5:99:f9:d6:51:32:d4:8c:f3:73:1b:16:ea:a5:7d:
                    e8:f0:58:0e:0d:82:38:37:68:9d:2d:d9:ef:2f:87:
                    b1:be:b2:e2:43:a5:e1:f8:21:62:3f:64:e6:c4:77:
                    cb:8c:ab:5a:a8:c7:ca:66:6d:e4:81:ea:4b:76:3b:
                    f1:95:4f:cd:3a:af:46:b1:60:6d:ec:90:a6:12:1e:
                    13:52:d8:02:91:fd:96:6c:5d:e8:1a:a4:9a:b7:bc:
                    6f:e8:81:91:89:06:d8:50:ee:50:c6:31:a3:7b:7a:
                    ff:a3:8a:ac:a4:7a:47:7d:f9:5a:a2:f0:15:22:16:
                    84:79:a3:38:dd:3c:92:10:a5:cf:64:5f:ca:de:a3:
                    ef:37:97:3f:4d:f1:23:3a:73:2e:3c:ec:61:e2:11:
                    95:c4:ad:58:7c:0d:9f:d5:f0:23:14:0a:00:ef:85:
                    c0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.138.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f6:81:a2:cf:76:11:ea:54:4d:23:e6:17:4d:38:b5:53:c8:
         af:24:af:af:11:01:e2:e0:ad:de:b9:14:aa:5c:fb:6f:10:de:
         a8:0d:9e:cd:90:04:25:fe:26:20:b0:58:0f:5f:2e:51:c0:fc:
         83:c6:13:3d:1d:f6:4a:ad:c3:be:ac:1b:dc:c0:56:01:9c:6d:
         94:e5:19:0c:5b:d6:8b:29:32:35:d9:d3:80:66:a5:33:7d:b6:
         b1:5b:aa:0c:92:21:a3:bc:0e:24:d7:c6:7b:84:53:bf:fa:99:
         3d:0e:d0:bf:fd:1b:bf:8f:ed:60:8f:87:81:4e:6b:d0:9f:d7:
         f5:b4:55:8a:08:33:44:ec:72:80:d6:9d:9c:dd:a0:a3:78:91:
         0c:a9:ee:95:71:a4:49:85:a7:62:48:c1:d5:7c:55:9e:0a:eb:
         1a:1b:de:c9:38:d3:cd:b4:2e:0c:08:7f:69:0b:9f:7d:76:48:
         dd:c3:61:a5:61:e7:fb:41:c7:17:b7:0a:a9:98:9d:7e:e0:2d:
         ba:12:02:b3:76:10:13:17:43:8b:88:b6:93:32:b0:c0:fb:21:
         e0:07:f7:f7:95:58:a6:4d:cb:a4:fe:ef:ce:86:30:12:71:b6:
         b9:a1:17:17:98:92:5f:06:b0:fd:f0:62:9d:69:8c:5e:90:c9:
         89:f7:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:54:24 2025 by rpki-client