Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9.cer
File:                     78f2a37d-9624-4031-908c-08f70f9830f9.cer (raw, json)
Hash identifier:          XNCHWrfkzmZdCQ7bumJcF7YgyUYspWrvRSmYv6LLPzY=
Subject key identifier:   77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848C149468350A8E69FC63CC200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Mon 03 Feb 2025 01:45:32 +0000
Certificate not after:    Sun 09 May 2027 00:45:32 +0000
Subordinate resources:    AS: 15214
                          AS: 399794
                          IP: 149.112.77.0/24
                          IP: 149.112.106.0/24
                          IP: 2001:504:134::/48
                          IP: 2602:f9f2::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:49:46:83:50:a8:e6:9f:c6:3c:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Feb  3 01:45:32 2025 GMT
            Not After : May  9 00:45:32 2027 GMT
        Subject: CN=78f2a37d-9624-4031-908c-08f70f9830f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:20:c8:bf:32:d9:0b:07:41:ab:3d:73:3f:
                    55:f9:bb:68:9c:74:3e:34:cd:b8:67:44:ec:85:5b:
                    9d:f9:05:71:74:d3:07:f5:1a:8c:a0:2d:3b:e8:02:
                    9a:01:8d:f0:bd:c5:a9:0f:5a:03:6b:a5:f9:eb:3d:
                    ab:44:b6:bc:30:2c:6b:de:fa:03:2d:81:69:46:03:
                    cc:2d:89:35:e5:c1:72:72:8e:e0:1b:42:63:f2:fe:
                    f6:43:2d:97:12:ca:e2:1b:ca:07:ae:e5:24:33:f9:
                    bb:3d:ac:af:0d:7a:f3:4c:20:d1:db:79:a6:ae:b4:
                    8b:87:89:a5:3c:21:17:6f:fc:12:23:06:e3:82:40:
                    db:4a:0c:5a:30:73:29:a6:ec:b9:7a:aa:ab:ab:48:
                    9d:1e:19:7b:2f:f9:e9:9e:18:6b:69:12:c4:d9:8d:
                    2b:55:c9:38:96:93:2c:d1:46:f0:28:c0:c0:5a:05:
                    f1:51:ac:f0:93:69:32:41:f5:65:84:fb:73:27:c0:
                    80:b1:f8:bc:b4:c5:53:b0:b1:a9:9d:a9:54:d0:7f:
                    c9:25:35:56:44:44:d0:7c:6a:6d:84:f6:14:fc:71:
                    07:4d:f9:05:84:05:89:83:bd:8b:6d:e7:e1:a3:3c:
                    af:56:8f:3b:a7:56:5c:d5:a6:5f:50:c5:b7:64:43:
                    95:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:56:2C:D7:F3:9A:CB:1C:96:F0:48:AF:50:F2:E3:FF:CD:0C:E0:90
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/78f2a37d-9624-4031-908c-08f70f9830f9/78f2a37d-9624-4031-908c-08f70f9830f9.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.77.0/24
                  149.112.106.0/24
                IPv6:
                  2001:504:134::/48
                  2602:f9f2::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15214
                  399794

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b0:4b:d7:cd:48:73:4f:a1:a7:49:ba:64:bb:5b:48:9e:d1:
         fc:b3:20:23:2e:d8:a8:bf:e4:62:1c:58:c0:67:66:82:f3:e9:
         ea:3c:ef:69:64:0f:23:e7:32:44:0f:76:5a:b3:90:fe:df:87:
         86:7d:da:d1:b4:52:a5:55:58:63:1a:ef:19:68:ec:82:79:c9:
         91:9d:63:a1:b7:ea:8c:9f:6d:47:e3:01:23:52:a5:2e:a6:c9:
         ea:40:99:d0:80:da:7f:1b:c1:8b:20:76:14:7a:4a:3a:2f:51:
         da:e7:56:94:2c:8e:3f:b2:65:bf:f8:25:94:d0:29:6d:cc:bd:
         4f:45:55:62:87:2d:bf:00:d0:05:73:3f:13:eb:1a:8e:49:69:
         31:0b:c5:86:31:35:e2:63:b3:b7:4b:f8:6d:16:b6:08:01:63:
         8e:b5:fb:d4:fe:d3:74:f0:80:b8:10:9a:d0:29:c6:55:e2:ca:
         ab:0c:62:ca:54:d5:b6:82:5e:55:fa:fc:3b:03:00:fe:c9:08:
         2b:a2:1f:08:17:cd:7b:e6:27:aa:e3:51:73:25:69:c9:36:e1:
         fd:dd:d0:7f:7c:ec:a0:67:bf:bb:38:19:93:b1:1d:8e:63:01:
         fc:9d:6b:75:f3:81:07:fe:ef:55:02:ff:c6:7a:f4:aa:1a:a9:
         44:f1:be:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:48:55 2025 by rpki-client