Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90.cer
File:                     99db0446-fe0e-41b5-bb4b-84fefa1ebf90.cer (raw, json)
Hash identifier:          6s2wmGcHK/Z/KinefANPtA/6gCqSnvC/5J+m8d2va8s=
Subject key identifier:   1C:D6:69:AB:DF:1D:06:9F:0A:43:4C:80:25:2C:B5:A4:07:93:F6:0F
Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77
Certificate issuer:       /CN=871da40f-793a-4a45-a0a9-978148321a07
Certificate serial:       010D0C9F43285848B0892E47B71909114A8AC628
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/99db0446-fe0e-41b5-bb4b-84fefa1ebf90.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Tue 28 Jan 2025 01:45:33 +0000
Certificate not after:    Mon 03 May 2027 00:45:33 +0000
Subordinate resources:    AS: 14019
                          AS: 14267
                          IP: 198.73.105.0 -- 198.73.108.255
                          IP: 198.73.192.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b0:89:2e:47:b7:19:09:11:4a:8a:c6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07
        Validity
            Not Before: Jan 28 01:45:33 2025 GMT
            Not After : May  3 00:45:33 2027 GMT
        Subject: CN=99db0446-fe0e-41b5-bb4b-84fefa1ebf90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b4:83:b3:d9:2c:65:f2:9d:d5:90:00:df:8d:
                    dc:3d:1a:81:4d:a8:b0:53:6e:57:80:52:c0:bf:67:
                    ed:09:85:c5:98:4c:52:5e:c2:d8:6d:19:97:2e:fd:
                    d0:22:d3:27:d0:75:b9:6d:45:b9:c1:fc:64:16:2a:
                    75:af:73:ec:72:9a:dc:6c:7a:a1:d9:0d:d9:b4:a3:
                    6a:f1:15:21:a9:b8:38:eb:e1:10:3d:7a:08:71:46:
                    3c:61:92:58:7b:a2:35:ad:f6:b1:dc:ea:38:55:68:
                    20:55:57:ba:b2:d8:68:f7:14:77:19:17:b6:94:1a:
                    b6:66:b2:fd:48:dc:08:1e:6d:f6:28:98:55:f2:1f:
                    40:1a:64:ce:6d:3f:ea:97:e0:0a:36:f7:e5:df:5c:
                    fb:74:83:56:0d:c7:43:d1:4a:78:1e:b1:d1:d3:80:
                    67:36:5a:27:65:b9:ab:5b:04:07:e4:27:e2:b4:ec:
                    d9:4f:9e:24:43:27:ff:ca:59:44:28:66:8b:5f:21:
                    cf:c1:81:71:a6:9f:30:5c:09:17:24:fd:f7:59:43:
                    9b:ea:a6:01:74:ce:c8:b9:fd:d6:5e:a6:d2:c8:c0:
                    67:eb:8d:eb:6e:41:bd:bf:4d:4c:9b:2c:1b:b1:24:
                    2b:74:ce:3f:4c:83:0c:b6:85:f1:1c:8f:ad:82:63:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D6:69:AB:DF:1D:06:9F:0A:43:4C:80:25:2C:B5:A4:07:93:F6:0F
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/99db0446-fe0e-41b5-bb4b-84fefa1ebf90/99db0446-fe0e-41b5-bb4b-84fefa1ebf90.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl

            X509v3 Authority Key Identifier:
                keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.105.0-198.73.108.255
                  198.73.192.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14019
                  14267

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f1:2c:7c:ab:58:c5:d3:b7:a2:5a:d8:8a:8d:a3:3d:31:d9:
         70:29:8b:e7:d0:b7:c6:de:e1:49:a2:69:a1:ed:ec:14:49:65:
         43:b0:cc:60:09:47:70:a6:48:60:95:21:e9:ff:a1:d6:68:ff:
         64:91:70:25:91:51:1a:2f:2b:2f:1a:6e:ca:18:7c:16:cd:c5:
         a7:73:64:ef:6b:d0:e9:a1:84:b5:c6:96:b5:79:af:93:97:22:
         a6:0f:cd:c1:39:a2:83:9b:bb:dd:dc:d7:46:0e:ba:3d:79:d4:
         08:ee:b1:95:ad:c4:54:c4:a5:86:29:fc:ac:f5:b5:6e:1a:87:
         ec:61:59:3a:9c:2e:a0:59:cd:f0:d3:22:4e:2f:df:ab:b9:77:
         56:b8:7f:88:cf:80:19:bb:17:27:2b:12:53:3c:67:87:f1:a6:
         bf:d4:54:d1:9f:ef:85:33:66:6a:74:51:6f:b4:e6:11:a5:3c:
         3a:58:2c:d3:d6:de:c4:a6:53:20:b6:96:c8:f7:d3:00:05:4e:
         76:01:0e:b4:dc:a3:3f:7b:03:80:18:4c:44:7b:c3:09:d8:a2:
         2a:14:79:90:09:e3:e3:b5:f6:c2:ce:a1:88:a5:7f:6c:dd:54:
         d7:93:2a:ff:9f:1b:ca:95:e7:e8:fb:13:5a:79:7d:ad:4b:44:
         19:a6:18:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:42:44 2025 by rpki-client